Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier: gZlxgRO5Tqbn0F+rgJit1fcKJMpUvW2jIbJ6TXPxx8I=
Subject key identifier: A5:AE:A1:A5:21:12:5E:24:E6:42:AD:3E:EF:07:7D:A1:BF:DE:9A:50
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 019872D0073EA5E941A5698A311628C43329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number: 0921
Signing time: Mon 04 Aug 2025 02:01:32 +0000
Manifest this update: Mon 04 Aug 2025 02:01:32 +0000
Manifest next update: Tue 05 Aug 2025 02:01:32 +0000
Files and hashes: 1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: CIyDVKTlHo9puDY9OKPEVipZdWx3XHL5hUiOkCpHLqA=)
2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:07:3e:a5:e9:41:a5:69:8a:31:16:28:c4:33:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Aug 4 02:01:32 2025 GMT
Not After : Aug 5 02:01:32 2025 GMT
Subject: CN=a5aea1a521125e24e642ad3eef077da1bfde9a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:a8:3a:7d:e5:ba:00:73:02:a3:56:f5:61:
7a:d5:30:5e:9a:4a:d2:1d:21:4e:bc:72:7c:e3:85:
34:c3:71:8e:6b:9a:fe:8d:ef:41:ca:b6:f2:ca:f9:
3e:63:0e:3c:4d:82:5d:95:3a:a6:42:c8:ef:34:53:
a7:a7:97:4b:8a:69:73:e2:58:02:3c:a0:1a:a0:9f:
d8:1c:68:8b:d0:14:8e:a8:26:80:12:c5:ec:08:04:
1b:c9:5d:c7:22:be:0d:cf:ac:5f:ae:12:86:ca:e5:
fb:f2:a1:b5:ed:4b:81:98:c7:e2:a2:cd:1e:02:03:
2e:e6:d0:2c:38:66:0c:eb:68:a4:7a:45:9f:ad:da:
b7:cd:58:ef:f1:4c:87:90:f5:90:57:b6:c8:25:a4:
e1:8f:79:fe:e8:08:5e:c2:48:19:be:ea:fc:b3:58:
76:69:aa:25:59:56:00:66:f0:de:7d:72:ff:05:52:
c1:ac:fb:ad:6f:6c:e5:06:4b:67:30:3f:b6:c5:27:
e0:26:d6:25:14:8d:52:3c:61:f9:8f:47:a7:37:28:
a5:63:8d:b4:ad:49:84:ea:be:bf:42:4f:8e:11:7e:
bf:c2:e5:15:db:d2:0e:13:10:25:4c:d3:1b:79:3b:
a2:2a:7f:cf:29:a7:d0:fd:95:56:34:5d:3c:99:57:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:A1:A5:21:12:5E:24:E6:42:AD:3E:EF:07:7D:A1:BF:DE:9A:50
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:77:ab:a6:98:e9:ea:60:f5:7b:5c:6d:8e:7c:4d:c9:87:a8:
dc:51:d9:2c:62:ae:e1:c2:0d:a1:4f:b9:e9:d4:45:f7:12:ef:
2a:93:e7:53:09:80:88:b7:d3:8b:3b:5d:6f:e3:e8:7c:90:74:
c5:50:a9:53:63:86:c4:ce:28:e4:19:51:19:7b:e0:0b:27:99:
41:34:28:7f:6c:73:cb:fe:af:94:37:c9:6e:89:6e:18:45:15:
ed:12:b2:cf:44:a3:f6:54:28:38:29:57:55:68:aa:9d:f9:4f:
cd:de:7c:05:59:28:dc:5d:28:02:b2:46:13:09:81:dd:b8:c8:
bf:5d:21:bd:50:b7:98:72:8c:8d:0f:ea:2a:99:aa:bd:44:5e:
34:f6:48:a7:a6:aa:bf:55:93:6c:9b:ec:60:2a:c5:87:e9:6e:
7c:99:77:4e:d4:5e:ae:fb:49:f7:92:e0:a0:4a:27:1d:2b:2a:
85:68:94:4b:3e:e9:ae:f3:df:53:bf:61:79:55:b3:ff:0c:b5:
24:d5:75:b1:c2:20:a1:04:88:fc:c6:6b:e7:1e:4a:29:cc:9e:
32:dd:02:ef:7f:4b:3e:70:52:f8:fe:ff:23:86:18:c1:63:48:
fc:a0:99:32:fe:30:74:29:c8:48:a0:71:9d:54:ae:4b:33:14:
1f:fd:1f:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhy0Ac+pelBpWmKMRYoxDMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OThkZjAzMDBhYWI1ZTJhNmYxYWM3OGU1OTNlY2M5NzQw
ZGFhZGIwHhcNMjUwODA0MDIwMTMyWhcNMjUwODA1MDIwMTMyWjAzMTEwLwYDVQQD
EyhhNWFlYTFhNTIxMTI1ZTI0ZTY0MmFkM2VlZjA3N2RhMWJmZGU5YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ6oOn3lugBzAqNW9WF61TBemkrS
HSFOvHJ844U0w3GOa5r+je9Byrbyyvk+Yw48TYJdlTqmQsjvNFOnp5dLimlz4lgC
PKAaoJ/YHGiL0BSOqCaAEsXsCAQbyV3HIr4Nz6xfrhKGyuX78qG17UuBmMfios0e
AgMu5tAsOGYM62ikekWfrdq3zVjv8UyHkPWQV7bIJaThj3n+6AhewkgZvur8s1h2
aaolWVYAZvDefXL/BVLBrPutb2zlBktnMD+2xSfgJtYlFI1SPGH5j0enNyilY420
rUmE6r6/Qk+OEX6/wuUV29IOExAlTNMbeTuiKn/PKafQ/ZVWNF08mVd8awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWuoaUhEl4k5kKtPu8HfaG/3ppQMB8GA1UdIwQY
MBaAFBaY3wMAqrXipvGseOWT7Ml0DarbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYt
NmVjOWQ5ODhhNDA4LzEvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYtNmVjOWQ5ODhhNDA4
LzEvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXerppjp
6mD1e1xtjnxNyYeo3FHZLGKu4cINoU+56dRF9xLvKpPnUwmAiLfTiztdb+PofJB0
xVCpU2OGxM4o5BlRGXvgCyeZQTQof2xzy/6vlDfJboluGEUV7RKyz0Sj9lQoOClX
VWiqnflPzd58BVko3F0oArJGEwmB3bjIv10hvVC3mHKMjQ/qKpmqvUReNPZIp6aq
v1WTbJvsYCrFh+lufJl3TtRervtJ95LgoEonHSsqhWiUSz7prvPfU79heVWz/wy1
JNV1scIgoQSI/MZr5x5KKcyeMt0C739LPnBS+P7/I4YYwWNI/KCZMv4wdCnISKBx
nVSuSzMUH/0fRA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:04 2025 by rpki-client