Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier: i+9XED4qOlqa/LDHS9w0jZMtXT8j5Dsl+KTihfTeHqY=
Subject key identifier: D3:F5:83:5B:AB:53:3B:EB:83:5C:90:32:48:91:F6:15:6B:F4:41:62
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 019897EEB4A18B67929837BAC4F3F6538078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 07:01:00 +0000
Manifest this update: Mon 11 Aug 2025 07:01:00 +0000
Manifest next update: Tue 12 Aug 2025 07:01:00 +0000
Files and hashes: 1: 2A_3tfsfLBfsIjkj25Wq_P7GURU.roa (hash: 4w2SNRAXRMcEZVSqmqD0dMjfx/4HpwrZYp/R521drvc=)
2: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: 1H2LbrrHEkFCIqQ1xzC10bsUuWGPclv10Ah6jHCsdUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:b4:a1:8b:67:92:98:37:ba:c4:f3:f6:53:80:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Aug 11 07:01:00 2025 GMT
Not After : Aug 12 07:01:00 2025 GMT
Subject: CN=d3f5835bab533beb835c90324891f6156bf44162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:16:90:d7:0e:8c:68:c9:2f:b5:34:67:74:
f6:4c:58:66:38:ad:77:5d:5b:af:09:a9:e8:d9:81:
0e:a1:56:e4:ec:45:85:e9:ca:00:2a:b4:3e:71:fe:
e1:89:67:55:46:9c:00:82:b8:22:48:be:78:22:6e:
f4:10:9c:19:f2:30:53:46:9d:82:10:84:d9:42:02:
4b:fc:49:5b:30:ff:60:01:b6:65:82:dc:29:8b:cb:
21:8e:38:49:b1:13:ae:16:bf:49:64:4e:bf:b6:58:
74:ce:6c:4f:ea:f2:97:38:af:35:39:a6:a7:83:66:
fd:27:61:74:bd:ce:b5:3b:d7:dc:99:41:d0:50:d5:
8a:fb:de:87:f8:31:52:4d:7f:24:98:4b:70:bc:9c:
a7:1e:a2:0f:61:71:6a:e9:0b:88:b0:be:a8:00:83:
d3:fb:03:13:5f:bd:d3:d8:dd:d0:37:1f:fb:b8:a1:
3d:da:55:d0:99:db:6b:18:10:fc:33:62:9f:3d:5a:
9a:c1:74:bc:50:0b:0b:43:76:9c:3d:43:f1:6e:17:
42:4f:07:31:8a:c2:99:00:74:63:96:8e:80:7c:ae:
ef:b1:63:a9:15:ce:aa:9d:dc:e0:a8:8f:04:2f:a0:
73:d3:7f:c2:a9:f8:9e:a0:2d:8d:47:dc:11:ef:37:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F5:83:5B:AB:53:3B:EB:83:5C:90:32:48:91:F6:15:6B:F4:41:62
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:83:ec:09:6f:17:cf:0e:a6:c2:4f:b2:53:cb:26:ed:92:2b:
00:b8:62:91:32:de:08:51:fd:89:e8:81:41:e3:17:32:61:cd:
17:9c:26:85:27:49:af:40:16:36:3f:49:e1:d6:28:1b:fc:41:
66:26:f0:ee:37:e3:41:bf:b3:d5:a2:64:fb:8d:25:a8:c8:2c:
5e:f3:41:16:7e:df:9e:b5:2a:b6:dd:93:16:11:3f:c6:95:a0:
75:5c:83:a3:c5:03:d4:81:85:77:d1:f6:64:d0:47:88:01:c8:
ef:06:e4:47:7b:d3:66:39:15:02:d9:95:c6:61:3f:35:5e:c3:
9b:aa:2e:76:dd:52:bb:e3:61:75:ce:15:98:5d:eb:f2:d5:a2:
41:d2:f4:31:b1:b2:88:9a:ff:36:7a:22:6c:15:50:b9:7f:af:
ba:13:45:dc:43:a0:01:c1:cf:f1:21:ce:82:dc:eb:72:f3:39:
e0:0c:9a:cc:75:c3:a1:7d:c8:e1:48:6f:35:1b:cd:12:ef:cf:
f6:26:8f:47:d3:2f:9e:9c:84:cc:49:82:27:ae:f2:cd:4e:37:
09:ee:73:3f:dd:bd:26:4f:e7:91:f0:5f:7e:26:0a:47:8c:73:
f7:44:61:dd:06:25:e3:34:32:ce:8e:76:96:5b:84:4b:42:3d:
c1:7a:94:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiX7rShi2eSmDe6xPP2U4B4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk
NzM1OTUwHhcNMjUwODExMDcwMTAwWhcNMjUwODEyMDcwMTAwWjAzMTEwLwYDVQQD
EyhkM2Y1ODM1YmFiNTMzYmViODM1YzkwMzI0ODkxZjYxNTZiZjQ0MTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MkWkNcOjGjJL7U0Z3T2TFhmOK13
XVuvCano2YEOoVbk7EWF6coAKrQ+cf7hiWdVRpwAgrgiSL54Im70EJwZ8jBTRp2C
EITZQgJL/ElbMP9gAbZlgtwpi8shjjhJsROuFr9JZE6/tlh0zmxP6vKXOK81Oaan
g2b9J2F0vc61O9fcmUHQUNWK+96H+DFSTX8kmEtwvJynHqIPYXFq6QuIsL6oAIPT
+wMTX73T2N3QNx/7uKE92lXQmdtrGBD8M2KfPVqawXS8UAsLQ3acPUPxbhdCTwcx
isKZAHRjlo6AfK7vsWOpFc6qndzgqI8EL6Bz03/CqfieoC2NR9wR7zciLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP1g1urUzvrg1yQMkiR9hVr9EFiMB8GA1UdIwQY
MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt
Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm
LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIPsCW8X
zw6mwk+yU8sm7ZIrALhikTLeCFH9ieiBQeMXMmHNF5wmhSdJr0AWNj9J4dYoG/xB
Zibw7jfjQb+z1aJk+40lqMgsXvNBFn7fnrUqtt2TFhE/xpWgdVyDo8UD1IGFd9H2
ZNBHiAHI7wbkR3vTZjkVAtmVxmE/NV7Dm6oudt1Su+Nhdc4VmF3r8tWiQdL0MbGy
iJr/NnoibBVQuX+vuhNF3EOgAcHP8SHOgtzrcvM54AyazHXDoX3I4UhvNRvNEu/P
9iaPR9MvnpyEzEmCJ67yzU43Ce5zP929Jk/nkfBffiYKR4xz90Rh3QYl4zQyzo52
lluES0I9wXqU1w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:14 2025 by rpki-client