Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: uYhMXVS88gMNn+RxfvlT13as82DtoLin9oZ4veADndM=
Subject key identifier: 21:4C:3D:7A:59:23:69:11:5A:2F:06:AC:CB:D0:33:58:31:A9:75:9D
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 01989713A20BC651CDCF1A43782C51534CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 03C4
Signing time: Mon 11 Aug 2025 03:01:42 +0000
Manifest this update: Mon 11 Aug 2025 03:01:42 +0000
Manifest next update: Tue 12 Aug 2025 03:01:42 +0000
Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: +olngbQQ14JtSTQvBNpZ69AhmclDvXBxhO+iJk7LgL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:a2:0b:c6:51:cd:cf:1a:43:78:2c:51:53:4c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Aug 11 03:01:42 2025 GMT
Not After : Aug 12 03:01:42 2025 GMT
Subject: CN=214c3d7a592369115a2f06accbd0335831a9759d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:24:3e:21:d9:c2:7d:e1:c8:85:81:a0:95:
36:1a:3e:93:6d:0b:b9:ee:92:83:88:ef:40:52:2b:
dc:d3:ce:15:8a:fd:18:9b:f4:a5:01:c8:15:d5:9a:
80:25:ed:1d:f6:a5:a6:b9:5c:59:b3:34:ab:cc:67:
db:2f:93:18:4d:9c:b2:92:c8:0c:c7:2f:e0:d9:17:
76:97:5d:39:3a:98:a9:0d:bb:a1:68:26:51:e0:2f:
34:ba:f9:ec:dc:ca:46:d7:d9:f6:55:6c:c2:bd:a3:
d8:54:cc:36:cf:d4:3e:6e:5e:61:79:1a:66:5d:90:
a9:77:23:17:f1:f5:fb:6d:f5:bc:1f:fe:b0:fd:ec:
f8:d4:65:82:ab:8b:56:30:f9:0f:e0:c1:ef:ac:6c:
c3:f7:48:47:77:a3:71:a2:11:71:45:96:43:97:55:
4a:f3:81:a4:80:6d:f3:d2:50:44:b7:aa:38:a5:15:
87:90:ee:d0:1d:ae:82:e0:c0:d7:07:8e:22:ca:22:
8d:71:b2:76:19:e0:6d:2b:d3:69:d5:df:06:cc:20:
08:ce:b4:b1:42:27:c8:bc:9c:82:d5:ad:8b:67:31:
ed:d7:6b:0b:4d:a9:a2:3f:e1:c7:03:50:46:80:88:
bf:9c:62:79:f1:5a:2e:0b:da:fa:00:b0:c1:7c:24:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:3D:7A:59:23:69:11:5A:2F:06:AC:CB:D0:33:58:31:A9:75:9D
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:71:7e:78:b6:1a:c2:a2:36:42:29:47:50:0e:69:39:c9:82:
17:e3:0f:de:66:d3:c5:42:93:14:7d:eb:c3:91:2f:36:d4:42:
07:e3:f5:cc:ec:71:77:5d:04:c6:d4:1e:62:92:e9:16:ed:94:
0e:66:df:ac:e1:0a:32:e8:d6:aa:22:2f:7c:d3:b3:25:34:e1:
7c:46:72:ca:52:d6:22:02:8c:da:67:f8:9b:f1:0b:a0:61:76:
0a:04:2f:4a:b9:f1:5c:6e:2f:8c:b5:44:10:22:5e:99:52:73:
c0:ed:08:b1:33:54:a3:6a:31:d2:47:ba:3e:31:07:68:58:4e:
74:93:76:97:07:ef:7e:81:ee:2e:a3:bd:e6:af:b1:eb:d6:66:
6c:15:40:12:bd:49:94:0e:ef:4e:b5:e4:16:68:ea:5f:10:18:
d2:36:8f:8c:f3:af:3a:40:6b:d1:f0:98:25:43:6d:88:1d:51:
bf:d1:3d:df:e3:c7:ff:27:66:46:3e:99:7d:57:ec:a6:2f:0b:
38:9d:9a:b9:f8:d8:b4:57:0c:ec:af:1d:47:05:5a:3a:5c:38:
e5:9b:ca:b7:34:a7:fa:6e:ee:10:17:1e:31:24:02:0b:a6:e0:
ae:f1:2b:ec:4e:1b:db:5a:08:91:e5:b2:1e:69:93:76:9e:11:
d0:08:93:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXE6ILxlHNzxpDeCxRU0y0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNDE0ZWEyMWE5MTE2ZDJjZGY4ZjVjMDJkMDg2NzNhZmE1
NzY4OTMwHhcNMjUwODExMDMwMTQyWhcNMjUwODEyMDMwMTQyWjAzMTEwLwYDVQQD
EygyMTRjM2Q3YTU5MjM2OTExNWEyZjA2YWNjYmQwMzM1ODMxYTk3NTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF8kPiHZwn3hyIWBoJU2Gj6TbQu5
7pKDiO9AUivc084Viv0Ym/SlAcgV1ZqAJe0d9qWmuVxZszSrzGfbL5MYTZyyksgM
xy/g2Rd2l105OpipDbuhaCZR4C80uvns3MpG19n2VWzCvaPYVMw2z9Q+bl5heRpm
XZCpdyMX8fX7bfW8H/6w/ez41GWCq4tWMPkP4MHvrGzD90hHd6NxohFxRZZDl1VK
84GkgG3z0lBEt6o4pRWHkO7QHa6C4MDXB44iyiKNcbJ2GeBtK9Np1d8GzCAIzrSx
QifIvJyC1a2LZzHt12sLTamiP+HHA1BGgIi/nGJ58VouC9r6ALDBfCTK/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFMPXpZI2kRWi8GrMvQM1gxqXWdMB8GA1UdIwQY
MBaAFP5BTqIakRbSzfj1wC0IZzr6V2iTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAt
YmNjYTI2ZmM4OTQ1LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAtYmNjYTI2ZmM4OTQ1
LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3F+eLYa
wqI2QilHUA5pOcmCF+MP3mbTxUKTFH3rw5EvNtRCB+P1zOxxd10ExtQeYpLpFu2U
DmbfrOEKMujWqiIvfNOzJTThfEZyylLWIgKM2mf4m/ELoGF2CgQvSrnxXG4vjLVE
ECJemVJzwO0IsTNUo2ox0ke6PjEHaFhOdJN2lwfvfoHuLqO95q+x69ZmbBVAEr1J
lA7vTrXkFmjqXxAY0jaPjPOvOkBr0fCYJUNtiB1Rv9E93+PH/ydmRj6ZfVfspi8L
OJ2aufjYtFcM7K8dRwVaOlw45ZvKtzSn+m7uEBceMSQCC6bgrvEr7E4b21oIkeWy
HmmTdp4R0AiTLA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:43 2025 by rpki-client