Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier: c8E1Yp2BfLbCEp1G2AsfjRXySb/osXOn/QrjGJethM4=
Subject key identifier: 82:11:B0:3E:45:24:8F:A6:86:CD:B4:DD:9B:4E:6E:0B:2C:77:20:4F
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 01987486DBC8791EF075F19C198D3514CC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 10:00:51 +0000
Manifest this update: Mon 04 Aug 2025 10:00:51 +0000
Manifest next update: Tue 05 Aug 2025 10:00:51 +0000
Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: dNcei3AlFMXmR2PA3z1CLwTTudoT1FjIgB79he2mAA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:db:c8:79:1e:f0:75:f1:9c:19:8d:35:14:cc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: Aug 4 10:00:51 2025 GMT
Not After : Aug 5 10:00:51 2025 GMT
Subject: CN=8211b03e45248fa686cdb4dd9b4e6e0b2c77204f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:1f:b7:85:58:aa:45:87:48:68:a4:d7:2d:
c2:7a:56:15:15:f7:c8:a7:4c:c0:fd:d4:64:c8:e7:
2f:07:7b:93:31:56:a7:19:54:cd:84:f1:1d:51:58:
17:f9:6b:0d:51:3f:1d:29:4c:1e:7b:e9:1d:52:00:
1c:8e:94:1b:90:42:e6:0f:fb:44:9a:80:85:ce:14:
23:8f:04:d2:26:70:5d:f2:ad:cb:65:6a:06:23:ea:
d2:f1:19:d3:71:e9:e0:3b:44:c0:6a:59:a5:dc:77:
74:c5:a1:ad:0f:4a:12:ee:f3:17:c7:cb:94:96:6f:
bb:1a:d9:a9:67:d4:64:1a:d2:ef:f1:1a:8e:3d:3b:
4a:00:a0:82:81:8a:94:a7:af:36:7d:0a:6a:9e:0a:
c4:f7:2e:1f:82:af:59:05:4e:bd:6e:b5:e4:18:fd:
10:b8:09:9a:6e:7d:e1:a4:44:94:08:82:5a:a9:2e:
3f:d5:89:3c:b0:b5:46:70:81:7b:ca:f3:6a:8a:0f:
83:f6:3e:40:fc:52:15:59:c3:52:f3:fa:d2:cb:3a:
1d:15:5a:52:8b:1e:c0:20:9a:9e:2d:a8:57:db:0d:
11:ce:c0:a3:3f:23:54:b6:ec:3f:33:1e:01:e8:85:
96:a8:b4:6b:01:ce:d6:1c:5e:0b:60:a5:78:8a:c2:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:11:B0:3E:45:24:8F:A6:86:CD:B4:DD:9B:4E:6E:0B:2C:77:20:4F
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0a:a5:8b:c4:3d:4a:2d:23:ab:66:ac:20:68:07:c5:67:05:
fd:c7:76:b9:f2:36:a7:59:99:19:d1:a5:3e:72:b7:3a:ea:f9:
0e:fd:17:ef:00:7d:b0:a2:3d:5e:b4:58:00:d3:87:05:9e:1b:
cb:d8:56:5b:b0:01:b2:0f:76:d1:53:74:0f:30:27:f9:40:55:
4e:f6:86:ed:a0:f9:3c:c8:44:76:33:66:55:22:af:44:2f:7f:
19:95:ac:b3:f1:49:8e:b0:3e:38:37:31:a6:35:a0:a7:d7:c7:
53:30:59:41:eb:58:27:0d:9c:7a:f9:2f:15:18:e9:c0:4d:74:
0c:28:ef:50:64:fd:d5:60:43:29:4f:b2:0e:21:b4:cf:91:27:
bd:cd:1b:69:7e:e5:64:8e:b1:68:76:1b:28:ea:8c:db:9a:36:
0b:88:b2:65:49:34:10:7f:31:bd:60:f9:90:a3:83:fc:7f:ac:
b0:0c:6e:aa:99:bd:68:c3:a3:f7:0f:56:4e:25:70:af:3b:34:
7f:9e:14:2d:e6:9e:8b:d5:58:f5:e5:6e:04:3b:fb:d5:74:eb:
9f:cb:d6:52:16:66:56:14:b8:39:e6:4d:51:e2:48:98:2b:62:
cc:de:66:d2:2e:c3:c5:9d:81:be:46:d7:d4:a6:10:0e:9b:3b:
fa:87:76:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0htvIeR7wdfGcGY01FMyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTdkN2EyZDU3NjYxZjZjM2M2ZWE3NjM2Y2EwZmYyMzAw
YzE0NmYwHhcNMjUwODA0MTAwMDUxWhcNMjUwODA1MTAwMDUxWjAzMTEwLwYDVQQD
Eyg4MjExYjAzZTQ1MjQ4ZmE2ODZjZGI0ZGQ5YjRlNmUwYjJjNzcyMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlacft4VYqkWHSGik1y3CelYVFffI
p0zA/dRkyOcvB3uTMVanGVTNhPEdUVgX+WsNUT8dKUwee+kdUgAcjpQbkELmD/tE
moCFzhQjjwTSJnBd8q3LZWoGI+rS8RnTcengO0TAalml3Hd0xaGtD0oS7vMXx8uU
lm+7GtmpZ9RkGtLv8RqOPTtKAKCCgYqUp682fQpqngrE9y4fgq9ZBU69brXkGP0Q
uAmabn3hpESUCIJaqS4/1Yk8sLVGcIF7yvNqig+D9j5A/FIVWcNS8/rSyzodFVpS
ix7AIJqeLahX2w0RzsCjPyNUtuw/Mx4B6IWWqLRrAc7WHF4LYKV4isItWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIRsD5FJI+mhs203ZtObgssdyBPMB8GA1UdIwQY
MBaAFPxX16LVdmH2w8bqdjbKD/IwDBRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMt
NzMxZjQ3ODIwYjIwLzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMtNzMxZjQ3ODIwYjIw
LzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQqli8Q9
Si0jq2asIGgHxWcF/cd2ufI2p1mZGdGlPnK3Our5Dv0X7wB9sKI9XrRYANOHBZ4b
y9hWW7ABsg920VN0DzAn+UBVTvaG7aD5PMhEdjNmVSKvRC9/GZWss/FJjrA+ODcx
pjWgp9fHUzBZQetYJw2cevkvFRjpwE10DCjvUGT91WBDKU+yDiG0z5Envc0baX7l
ZI6xaHYbKOqM25o2C4iyZUk0EH8xvWD5kKOD/H+ssAxuqpm9aMOj9w9WTiVwrzs0
f54ULeaei9VY9eVuBDv71XTrn8vWUhZmVhS4OeZNUeJImCtizN5m0i7DxZ2BvkbX
1KYQDps7+od2wQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:38 2025 by rpki-client