Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: 9gNTiiKkcTZBmY3u88//hTo1reV+MbNUyACQMvDS7KY=
Subject key identifier: ED:72:FF:82:4A:5D:E8:DD:10:55:3C:C9:A8:9B:78:11:4E:F0:1A:4F
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 0198A04D4D87DECD55152D0BE76FD525966E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 0144
Signing time: Tue 12 Aug 2025 22:01:17 +0000
Manifest this update: Tue 12 Aug 2025 22:01:17 +0000
Manifest next update: Wed 13 Aug 2025 22:01:17 +0000
Files and hashes: 1: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: caHK4DvxTEGK0TOcROk+KlP40QHGRpvpSItrbD6phr0=)
2: ov9bt7rq-ZAHiu2QpDXEfzrBMio.roa (hash: fNkDgRhHNp5NjFPWLKgUQs4BOo+3hJw3ZGGsziRq0cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:4d:87:de:cd:55:15:2d:0b:e7:6f:d5:25:96:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Aug 12 22:01:17 2025 GMT
Not After : Aug 13 22:01:17 2025 GMT
Subject: CN=ed72ff824a5de8dd10553cc9a89b78114ef01a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:58:73:64:90:85:02:90:b5:ef:91:95:f0:
ee:40:25:f8:c4:b8:49:89:43:da:66:4c:cf:88:55:
65:2d:88:9b:7a:d7:aa:72:97:13:cb:c8:18:5a:b5:
42:98:4b:2f:6c:30:dd:7f:1e:58:2d:bf:1a:f1:52:
62:3a:e8:23:50:ae:cd:2b:1b:f0:69:33:7a:25:9f:
9f:66:08:7a:92:1e:0d:44:f7:5b:06:61:a4:7e:80:
6d:64:5f:17:03:18:95:5c:1d:e2:2d:2b:58:d4:d2:
2d:29:56:dc:b8:89:38:d5:58:32:bb:44:1a:d4:c2:
9d:06:9d:2c:e5:aa:b4:75:1c:a9:33:9b:83:e9:fc:
05:48:61:0d:96:c5:0b:4d:e0:03:fc:66:8c:8f:f9:
ac:a2:ff:b8:52:b3:87:89:bb:68:ce:77:7b:60:7a:
a0:c9:b5:93:49:5f:f9:3e:ad:e0:09:86:07:d4:52:
3d:ec:0f:28:11:cf:ad:18:24:d3:07:22:4b:b9:8b:
e3:2b:50:91:3b:71:ad:7b:6e:15:e2:2c:f5:2a:0c:
e5:26:c9:56:13:e3:3e:5c:9b:30:fa:17:11:c0:df:
77:66:b6:33:d0:fe:53:ed:53:ab:d3:eb:d7:08:f1:
10:00:36:12:f1:a4:81:6b:75:e7:d9:c1:4f:0d:51:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:72:FF:82:4A:5D:E8:DD:10:55:3C:C9:A8:9B:78:11:4E:F0:1A:4F
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:d8:48:c1:e3:07:58:ea:81:92:e7:16:36:0a:76:c0:33:
cc:e5:2f:fa:50:4d:f3:83:13:a8:c0:28:7c:71:20:69:4c:45:
08:74:e2:6e:f3:2d:59:8b:bf:1a:88:f5:85:ae:df:90:1b:0c:
3b:2e:b5:26:59:0e:09:f5:65:2f:1d:c4:8b:76:89:fb:72:ea:
30:29:39:3d:34:2b:5d:2d:fb:5b:1d:45:1b:64:c5:3e:d1:a5:
ed:44:a7:09:29:d9:5b:ae:cf:60:8a:44:25:08:25:44:e1:78:
57:ca:d4:20:ca:11:55:30:3d:8f:c4:1d:33:81:40:9b:97:80:
ff:2a:8d:3b:2a:9a:e5:c3:7c:52:7c:bc:19:83:27:9a:c7:ab:
c5:17:58:60:1b:16:d7:64:7d:4d:59:45:05:bc:e8:55:fa:ff:
fc:68:48:34:14:f8:10:c5:28:94:60:35:14:c0:64:e6:d8:32:
4f:02:e3:85:8c:99:4f:86:ca:da:2c:3c:9e:04:45:aa:69:3c:
a9:19:fe:5a:0e:dc:4e:f4:3a:0c:64:1d:58:91:0d:8a:77:61:
d4:99:71:b5:54:42:d0:e9:6d:87:d5:ae:27:85:78:22:d0:29:
11:68:f8:34:b8:15:be:e2:d6:5e:16:81:73:ae:3a:d9:ab:f9:
05:5e:d0:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTU2H3s1VFS0L52/VJZZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz
ZWQxNWUwHhcNMjUwODEyMjIwMTE3WhcNMjUwODEzMjIwMTE3WjAzMTEwLwYDVQQD
EyhlZDcyZmY4MjRhNWRlOGRkMTA1NTNjYzlhODliNzgxMTRlZjAxYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH1Yc2SQhQKQte+RlfDuQCX4xLhJ
iUPaZkzPiFVlLYibeteqcpcTy8gYWrVCmEsvbDDdfx5YLb8a8VJiOugjUK7NKxvw
aTN6JZ+fZgh6kh4NRPdbBmGkfoBtZF8XAxiVXB3iLStY1NItKVbcuIk41Vgyu0Qa
1MKdBp0s5aq0dRypM5uD6fwFSGENlsULTeAD/GaMj/msov+4UrOHibtoznd7YHqg
ybWTSV/5Pq3gCYYH1FI97A8oEc+tGCTTByJLuYvjK1CRO3Gte24V4iz1KgzlJslW
E+M+XJsw+hcRwN93ZrYz0P5T7VOr0+vXCPEQADYS8aSBa3Xn2cFPDVHC3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1y/4JKXejdEFU8yaibeBFO8BpPMB8GA1UdIwQY
MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct
YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj
LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezrYSMHj
B1jqgZLnFjYKdsAzzOUv+lBN84MTqMAofHEgaUxFCHTibvMtWYu/Goj1ha7fkBsM
Oy61JlkOCfVlLx3Ei3aJ+3LqMCk5PTQrXS37Wx1FG2TFPtGl7USnCSnZW67PYIpE
JQglROF4V8rUIMoRVTA9j8QdM4FAm5eA/yqNOyqa5cN8Uny8GYMnmserxRdYYBsW
12R9TVlFBbzoVfr//GhINBT4EMUolGA1FMBk5tgyTwLjhYyZT4bK2iw8ngRFqmk8
qRn+Wg7cTvQ6DGQdWJENindh1JlxtVRC0Olth9WuJ4V4ItApEWj4NLgVvuLWXhaB
c6462av5BV7Qcg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:25:09 2025 by rpki-client