Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier: BkqjcTJG0HSb/2flLC9KQsRawUkqhcHAA4yQFJukoB0=
Subject key identifier: FB:24:85:F2:C3:2A:0A:76:EA:00:9C:BF:52:5C:A6:C5:B6:18:1F:31
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 0198D66035D3FECD80CC9A9BA5E1DAEE8733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number: 0FB5
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: FsJZX9GGj2A1me0tekd7HmtKIf4.roa (hash: wa9LmtrA5IFHkOGKHcF70x4E1HktC1RNDhObryrXOsE=)
2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: Gk5BmjI9RwLtwpQRScqh2AfGnXjLUiIJUTjB6I81W2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:35:d3:fe:cd:80:cc:9a:9b:a5:e1:da:ee:87:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=fb2485f2c32a0a76ea009cbf525ca6c5b6181f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:d3:05:38:c9:6c:5d:79:0c:50:63:d6:81:
fa:d2:45:20:0f:17:4b:0d:4f:9a:bb:68:7a:ca:ed:
d2:4d:a1:92:b4:31:28:89:3a:e0:e3:4f:4d:07:35:
36:dd:9e:5e:3c:39:72:26:00:da:8e:44:e9:ba:0d:
5f:65:e6:07:8a:d6:90:b0:d1:75:cb:0c:e9:5e:d8:
c7:80:25:48:2d:28:20:e7:9d:43:69:65:ad:1c:96:
da:7e:61:da:79:05:a9:97:c9:36:44:56:fd:ca:e7:
0e:77:3e:1b:b0:3f:c2:5c:67:de:5e:d3:72:45:b3:
9d:f5:1f:0f:45:57:7e:92:6f:48:d7:54:10:00:9a:
69:52:1f:6e:0c:8a:85:3c:8f:ef:5c:bc:97:6f:c2:
08:6c:d0:91:50:35:9a:b2:8d:00:95:80:4d:59:db:
bd:48:06:1f:42:f7:3e:f5:91:eb:4b:5e:9b:12:d9:
91:92:84:6b:a0:b9:8e:7f:2b:e9:37:3a:b0:5e:53:
84:16:e9:27:ad:76:6b:af:70:40:7c:ec:1d:45:44:
a1:6e:c1:f2:09:39:51:e3:e3:78:d9:e0:f8:ee:4c:
0c:0b:46:2d:84:26:77:45:95:58:ea:fa:d9:25:7b:
a4:a1:b2:fe:2c:d3:68:e2:b6:1e:06:06:9f:ac:c3:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:24:85:F2:C3:2A:0A:76:EA:00:9C:BF:52:5C:A6:C5:B6:18:1F:31
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:20:bd:b8:2f:31:b5:23:43:10:df:da:d9:63:de:16:15:ff:
e6:28:ed:79:eb:10:10:8c:f3:ea:1d:bf:6e:40:f8:82:51:0c:
49:a9:b2:b5:d9:1a:47:75:30:4d:9d:c8:62:2a:99:c6:22:2e:
f5:fd:e4:d5:34:3b:3c:b0:2a:89:37:11:3e:43:ec:24:3c:0c:
85:35:fc:0b:89:12:11:b3:1b:12:71:f4:ce:fd:c1:da:f5:f8:
bb:37:aa:92:05:ef:42:b5:0a:af:da:5c:6f:fa:3f:28:bd:31:
b0:17:a2:46:0f:1b:0d:b6:ba:c0:54:0f:f4:a4:1f:e3:aa:3c:
71:5d:a3:d2:1e:76:7f:fc:8f:02:7f:43:e0:c6:9d:e1:02:88:
2a:be:9e:38:2e:a0:62:0a:6a:56:28:a1:3a:b3:12:ea:f7:17:
b4:35:cd:e1:cc:c8:75:7d:68:4c:e7:2f:06:53:92:d6:81:04:
6f:d0:5c:23:96:55:5f:dc:25:e6:ea:52:0a:9f:de:b0:b2:d1:
5c:d1:93:5a:96:9e:99:af:47:60:ad:29:04:4a:22:3a:61:53:
ff:b7:b9:cb:97:7b:9e:b9:f1:2a:be:cd:18:e4:22:0f:5b:54:
b7:13:a7:cb:3c:3d:1c:25:cc:6d:1f:34:41:69:41:83:09:fe:
c3:74:63:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYDXT/s2AzJqbpeHa7oczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlOTJlZjM1MzIxYmY4ZjcyMjczNGJmZjlkZmE2M2ZiZDBm
MDY5MGEwHhcNMjUwODIzMTAwMTI2WhcNMjUwODI0MTAwMTI2WjAzMTEwLwYDVQQD
EyhmYjI0ODVmMmMzMmEwYTc2ZWEwMDljYmY1MjVjYTZjNWI2MTgxZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufLTBTjJbF15DFBj1oH60kUgDxdL
DU+au2h6yu3STaGStDEoiTrg409NBzU23Z5ePDlyJgDajkTpug1fZeYHitaQsNF1
ywzpXtjHgCVILSgg551DaWWtHJbafmHaeQWpl8k2RFb9yucOdz4bsD/CXGfeXtNy
RbOd9R8PRVd+km9I11QQAJppUh9uDIqFPI/vXLyXb8IIbNCRUDWaso0AlYBNWdu9
SAYfQvc+9ZHrS16bEtmRkoRroLmOfyvpNzqwXlOEFuknrXZrr3BAfOwdRUShbsHy
CTlR4+N42eD47kwMC0YthCZ3RZVY6vrZJXukobL+LNNo4rYeBgafrMMC6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPskhfLDKgp26gCcv1JcpsW2GB8xMB8GA1UdIwQY
MBaAFP6S7zUyG/j3InNL/536Y/vQ8GkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUt
YTllZWYyOTRhYzM0LzEvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUtYTllZWYyOTRhYzM0
LzEvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSC9uC8x
tSNDEN/a2WPeFhX/5ijteesQEIzz6h2/bkD4glEMSamytdkaR3UwTZ3IYiqZxiIu
9f3k1TQ7PLAqiTcRPkPsJDwMhTX8C4kSEbMbEnH0zv3B2vX4uzeqkgXvQrUKr9pc
b/o/KL0xsBeiRg8bDba6wFQP9KQf46o8cV2j0h52f/yPAn9D4Mad4QKIKr6eOC6g
YgpqViihOrMS6vcXtDXN4czIdX1oTOcvBlOS1oEEb9BcI5ZVX9wl5upSCp/esLLR
XNGTWpaema9HYK0pBEoiOmFT/7e5y5d7nrnxKr7NGOQiD1tUtxOnyzw9HCXMbR80
QWlBgwn+w3RjHA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:44 2025 by rpki-client