Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: CJ/G2mgwSkWjQkmMU8wIsyoLB1zChD/KiLlHEP7lOSY=
Subject key identifier: C9:94:73:35:25:D0:DC:6C:FC:8B:0F:E6:B4:3A:EE:1F:FB:98:1A:8C
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 01987374296D5851DD9F5E32E21D24D772A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 05:00:49 +0000
Manifest this update: Mon 04 Aug 2025 05:00:49 +0000
Manifest next update: Tue 05 Aug 2025 05:00:49 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: 7bPE+3IwWNqJK15vVtsw40q1UD9jIosjgV/4+3YX71s=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:29:6d:58:51:dd:9f:5e:32:e2:1d:24:d7:72:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Aug 4 05:00:49 2025 GMT
Not After : Aug 5 05:00:49 2025 GMT
Subject: CN=c994733525d0dc6cfc8b0fe6b43aee1ffb981a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:a3:99:58:f5:2d:03:9e:ef:d2:ad:09:6c:
79:22:a4:58:4d:1a:6e:02:fe:0a:6f:44:04:02:d1:
09:14:0b:26:78:5a:43:da:81:25:64:69:25:a0:a6:
e6:de:4b:97:f2:ae:c3:87:78:a1:74:f4:a5:38:90:
bd:cd:f2:9a:2f:d1:18:55:2b:c4:17:6f:69:83:12:
7d:9a:78:f0:c1:3b:97:6d:d5:9f:71:f7:02:c7:ae:
b4:60:cd:38:91:9a:cc:ae:01:98:c5:57:95:4c:18:
b5:ea:06:fe:75:b6:9c:28:53:bb:43:f5:75:b0:95:
e6:23:8e:2d:fe:8b:2e:93:22:49:f7:9b:14:f9:66:
7a:8f:bc:8e:10:f0:94:63:1e:d3:3e:0d:d2:ce:8d:
05:cd:41:88:91:57:98:1a:d4:ce:42:67:c1:c4:a9:
e1:39:d0:3b:f3:e2:96:37:2c:bb:ab:6c:75:12:90:
25:f0:51:ad:81:c7:72:4f:cd:56:8b:39:b2:60:03:
c8:9e:b2:4c:b1:f7:f3:eb:90:6e:22:82:e6:26:eb:
17:54:ed:70:c4:3f:b3:b6:a0:e1:bc:b6:bf:20:9b:
36:c6:c4:77:aa:87:78:29:30:3b:96:19:2b:8f:21:
56:98:5d:6c:d1:71:fa:ed:dd:4d:b1:f4:fa:f3:a4:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:73:35:25:D0:DC:6C:FC:8B:0F:E6:B4:3A:EE:1F:FB:98:1A:8C
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:95:ab:f6:f0:1f:d9:8f:40:38:a8:cd:1d:00:f4:24:0e:03:
15:af:10:d5:fe:38:38:48:f0:34:71:6c:f1:2d:e3:37:e1:c7:
3d:9f:b1:f4:63:ab:8b:13:ba:74:69:88:7a:69:4a:9d:c8:c6:
b3:f8:c3:9b:12:05:d3:b6:d3:db:3c:ae:6d:9a:1c:80:02:9a:
f5:de:fc:a6:93:37:08:dc:88:10:59:bc:07:c2:b3:b4:b1:5d:
5b:c5:29:87:9a:c3:6f:94:04:82:a4:c9:b9:38:68:62:57:5c:
e8:cc:b8:da:24:3e:7e:0a:bc:05:59:42:a0:e7:99:e2:23:61:
2f:41:ef:04:f2:de:b5:01:22:4d:52:59:ca:29:41:71:34:4e:
1d:fb:ce:32:0b:f0:f6:07:f6:a9:0f:e8:95:c9:48:b6:b8:25:
2a:cf:2d:33:7d:23:14:36:b5:46:60:09:f3:bb:d9:7a:4b:fc:
23:af:83:5e:5c:98:2c:a3:9f:86:51:4c:00:01:d7:93:dd:79:
38:47:e2:f4:75:80:e5:2c:aa:df:5c:23:7e:21:98:c1:41:dc:
83:16:90:21:5c:a2:06:86:29:c7:bc:f3:1e:71:e8:2a:0e:17:
8d:3f:2e:0c:c4:ee:da:27:b7:f2:ac:97:6f:79:27:7b:11:5a:
49:85:77:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdCltWFHdn14y4h0k13KhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjUwODA0MDUwMDQ5WhcNMjUwODA1MDUwMDQ5WjAzMTEwLwYDVQQD
EyhjOTk0NzMzNTI1ZDBkYzZjZmM4YjBmZTZiNDNhZWUxZmZiOTgxYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n6jmVj1LQOe79KtCWx5IqRYTRpu
Av4Kb0QEAtEJFAsmeFpD2oElZGkloKbm3kuX8q7Dh3ihdPSlOJC9zfKaL9EYVSvE
F29pgxJ9mnjwwTuXbdWfcfcCx660YM04kZrMrgGYxVeVTBi16gb+dbacKFO7Q/V1
sJXmI44t/osukyJJ95sU+WZ6j7yOEPCUYx7TPg3Szo0FzUGIkVeYGtTOQmfBxKnh
OdA78+KWNyy7q2x1EpAl8FGtgcdyT81WizmyYAPInrJMsffz65BuIoLmJusXVO1w
xD+ztqDhvLa/IJs2xsR3qod4KTA7lhkrjyFWmF1s0XH67d1NsfT686QlrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmUczUl0Nxs/IsP5rQ67h/7mBqMMB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpWr9vAf
2Y9AOKjNHQD0JA4DFa8Q1f44OEjwNHFs8S3jN+HHPZ+x9GOrixO6dGmIemlKncjG
s/jDmxIF07bT2zyubZocgAKa9d78ppM3CNyIEFm8B8KztLFdW8Uph5rDb5QEgqTJ
uThoYldc6My42iQ+fgq8BVlCoOeZ4iNhL0HvBPLetQEiTVJZyilBcTROHfvOMgvw
9gf2qQ/olclItrglKs8tM30jFDa1RmAJ87vZekv8I6+DXlyYLKOfhlFMAAHXk915
OEfi9HWA5Syq31wjfiGYwUHcgxaQIVyiBoYpx7zzHnHoKg4XjT8uDMTu2ie38qyX
b3knexFaSYV3QQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:39 2025 by rpki-client