Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: 5no+87IRKhlMJZZOzDGDzJGbW144h6q84sDkJN8MRKQ=
Subject key identifier: 8C:75:17:00:9A:9F:65:07:0C:87:56:64:3C:35:99:5B:D0:79:BF:45
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 01974E581178B23AEF59B247D8FB30CC88F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 07:01:23 +0000
Manifest this update: Sun 08 Jun 2025 07:01:23 +0000
Manifest next update: Mon 09 Jun 2025 07:01:23 +0000
Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: 77i4anbHf73OzJ1lQyZTav7B8AplDy3/QSk/G2YcHwc=)
2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:11:78:b2:3a:ef:59:b2:47:d8:fb:30:cc:88:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Jun 8 07:01:23 2025 GMT
Not After : Jun 9 07:01:23 2025 GMT
Subject: CN=8c7517009a9f65070c8756643c35995bd079bf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c8:47:a1:33:11:0c:f8:fb:ae:38:a5:17:ed:
b1:25:24:0f:35:2c:a6:24:9c:35:f2:64:97:c5:a9:
06:2f:ec:44:69:8e:d8:b1:9f:36:b1:4e:0e:b4:64:
60:2d:05:fe:13:75:83:c3:33:35:fa:8a:8e:ab:c7:
6d:27:86:b6:ee:84:f7:c2:b7:04:1e:1b:f1:8f:a9:
44:e2:90:8e:45:2f:0b:1e:cf:3b:7a:2f:88:06:a7:
17:e7:e4:f7:f9:73:f2:55:b9:c5:d3:b8:cb:aa:07:
81:4c:7e:3d:24:d1:71:5b:c7:06:b5:bf:74:e1:82:
d8:c9:33:da:ad:02:2c:6f:32:fb:15:76:70:3f:84:
c5:bf:25:5d:eb:cb:79:fa:8a:e3:15:77:e5:8a:0f:
cd:2a:4e:bb:12:16:14:d1:54:65:25:e7:a1:c3:9c:
3c:4c:79:94:45:cf:c8:ef:45:ab:ce:15:b0:14:bc:
64:9f:c2:d7:57:19:1f:f6:3c:31:10:d7:7c:ab:05:
70:d1:37:a6:a5:db:93:ce:ff:7f:d7:58:6a:08:f1:
eb:1b:0e:a0:73:ad:b6:2e:92:4b:99:02:07:78:b1:
c6:b4:05:5c:4c:27:33:e5:b4:2e:65:a2:a1:53:53:
ea:c6:33:2e:9a:d1:50:ca:65:1f:47:5e:f2:8c:40:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:75:17:00:9A:9F:65:07:0C:87:56:64:3C:35:99:5B:D0:79:BF:45
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1b:49:6f:9d:2b:62:31:50:63:b5:79:1b:80:3e:40:d4:17:
df:27:11:fa:52:7c:47:a4:a6:0b:97:a8:8c:e7:2d:01:46:f5:
43:b3:e0:a3:08:ca:62:54:22:98:1b:ba:57:fb:86:0e:0e:3c:
97:c8:53:12:a3:d1:1c:7f:0d:d8:b9:7c:46:78:c4:67:b2:3a:
97:2f:60:a3:d6:05:a3:5c:86:f0:8f:41:bb:bc:ad:bd:a0:34:
ae:ba:85:5d:a6:89:15:fd:f3:f9:d3:61:64:2c:02:f5:82:79:
3b:de:8b:94:9d:ce:43:ba:07:53:4c:4a:49:48:28:98:81:f9:
1a:37:18:b9:56:60:48:3c:c2:7f:58:0e:27:e5:c4:d4:96:0a:
89:90:27:64:40:93:df:e3:f7:98:75:dc:d5:dd:20:cb:f4:0d:
2a:ed:a1:9a:62:3f:d7:87:33:8c:bd:18:89:76:28:e0:11:02:
0f:dc:89:02:aa:4c:6e:a1:e9:ac:2c:fc:99:00:0e:0d:43:6e:
5d:46:81:19:48:85:7f:a0:ad:d0:3f:60:36:fe:d9:81:e0:3c:
15:1d:71:69:ae:ec:a8:69:80:dd:a8:02:9d:62:94:0d:60:34:
d7:34:54:84:80:a7:c7:14:d6:dc:57:6a:f7:63:e8:ed:ff:dd:
ca:39:63:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOWBF4sjrvWbJH2PswzIjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDc3YmE0MGE3Mjc1MmJmNTBlNDJjMDAwMzc2NWU0ZDc0
NzNlNDYwHhcNMjUwNjA4MDcwMTIzWhcNMjUwNjA5MDcwMTIzWjAzMTEwLwYDVQQD
Eyg4Yzc1MTcwMDlhOWY2NTA3MGM4NzU2NjQzYzM1OTk1YmQwNzliZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgshHoTMRDPj7rjilF+2xJSQPNSym
JJw18mSXxakGL+xEaY7YsZ82sU4OtGRgLQX+E3WDwzM1+oqOq8dtJ4a27oT3wrcE
Hhvxj6lE4pCORS8LHs87ei+IBqcX5+T3+XPyVbnF07jLqgeBTH49JNFxW8cGtb90
4YLYyTParQIsbzL7FXZwP4TFvyVd68t5+orjFXflig/NKk67EhYU0VRlJeehw5w8
THmURc/I70WrzhWwFLxkn8LXVxkf9jwxENd8qwVw0TempduTzv9/11hqCPHrGw6g
c622LpJLmQIHeLHGtAVcTCcz5bQuZaKhU1PqxjMumtFQymUfR17yjECZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx1FwCan2UHDIdWZDw1mVvQeb9FMB8GA1UdIwQY
MBaAFH1He6QKcnUr9Q5CwAA3ZeTXRz5GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2Et
OWE3ZTE0NjQ4NjJhLzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2EtOWE3ZTE0NjQ4NjJh
LzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhtJb50r
YjFQY7V5G4A+QNQX3ycR+lJ8R6SmC5eojOctAUb1Q7PgowjKYlQimBu6V/uGDg48
l8hTEqPRHH8N2Ll8RnjEZ7I6ly9go9YFo1yG8I9Bu7ytvaA0rrqFXaaJFf3z+dNh
ZCwC9YJ5O96LlJ3OQ7oHU0xKSUgomIH5GjcYuVZgSDzCf1gOJ+XE1JYKiZAnZECT
3+P3mHXc1d0gy/QNKu2hmmI/14czjL0YiXYo4BECD9yJAqpMbqHprCz8mQAODUNu
XUaBGUiFf6Ct0D9gNv7ZgeA8FR1xaa7sqGmA3agCnWKUDWA01zRUhICnxxTW3Fdq
92Po7f/dyjljow==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:45:10 2025 by rpki-client