Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: 11JLIyBT+dTbds92Kt+ArwMPOEyhVDmODLg96L6HSCM=
Subject key identifier: 2F:1F:A0:4F:3A:65:91:33:70:EB:92:35:B0:35:CE:BD:31:B1:90:CD
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 0198D4A7D57380BC2F9FDC6974322D4162F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 1015
Signing time: Sat 23 Aug 2025 02:00:25 +0000
Manifest this update: Sat 23 Aug 2025 02:00:25 +0000
Manifest next update: Sun 24 Aug 2025 02:00:25 +0000
Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: 7j43EKUd0I+fflyHDAgkahSltQYt/GKcE3QlOlf0z6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d5:73:80:bc:2f:9f:dc:69:74:32:2d:41:62:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Aug 23 02:00:25 2025 GMT
Not After : Aug 24 02:00:25 2025 GMT
Subject: CN=2f1fa04f3a65913370eb9235b035cebd31b190cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:66:b0:29:c5:0c:3d:ea:9e:63:f1:b8:b9:
11:20:52:ae:ab:cf:e9:4b:78:46:0e:89:06:bf:c9:
12:30:7b:3c:29:1e:e9:29:73:c2:be:04:c1:9e:56:
15:41:00:46:f0:60:63:98:f9:68:37:f4:8b:d1:f1:
6e:2f:e6:4e:ff:b1:9c:6a:4b:0d:d5:21:b3:77:65:
a4:2f:f7:95:55:cc:7e:17:3d:f8:d9:a8:ba:19:c9:
f9:f3:cc:44:67:9f:57:7f:ba:fa:e6:f8:11:b1:06:
eb:86:8e:48:fc:09:f7:15:d8:88:13:79:1d:f0:54:
d1:27:1b:58:89:99:56:b7:f9:b4:72:98:58:bc:62:
ec:df:aa:1f:70:95:36:c9:da:36:c2:e0:39:48:dc:
6e:1d:2d:a3:f0:67:05:73:67:06:01:f7:3c:07:c0:
e6:49:03:18:bd:7b:6b:62:53:60:da:04:c5:4d:02:
d0:e2:8c:a2:bb:e0:5c:2d:6f:ce:3e:16:13:9f:5a:
61:d5:67:5a:35:d7:9c:f8:4b:a1:79:b3:99:88:8f:
4a:f5:b9:aa:5b:22:91:cc:ce:a5:e3:74:ba:47:8d:
a9:92:49:10:7f:08:79:cb:de:6a:33:c4:57:db:ed:
17:e9:c3:1f:53:7c:ee:18:3c:2c:f6:d7:7a:fc:fb:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1F:A0:4F:3A:65:91:33:70:EB:92:35:B0:35:CE:BD:31:B1:90:CD
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:f0:de:4d:60:34:27:97:77:37:80:ab:79:49:96:64:1b:be:
3b:ee:ee:43:2f:cc:0e:b4:1b:de:25:1f:ef:83:a0:e8:e6:08:
f7:13:33:1e:cf:8a:4b:80:39:90:69:49:20:49:22:79:55:c5:
e9:0a:6f:fa:59:c6:98:a2:e0:4f:9f:4d:61:b0:f9:66:ce:cc:
2d:f1:ea:2a:94:c4:2e:28:0c:54:51:fc:96:0a:75:4f:5b:b9:
24:22:d8:73:09:b4:5d:c7:f0:46:99:c5:1a:96:af:59:2d:70:
42:93:3e:59:83:1c:36:b1:43:b3:00:a8:53:71:a1:8a:cd:61:
8a:b4:93:42:c8:81:7b:ee:de:7e:80:18:2e:fc:83:55:21:36:
6b:93:ac:b2:5c:00:0c:9f:e5:af:a1:6a:cd:b6:5c:ae:2a:32:
5b:3b:46:b7:1f:1d:ce:bc:3e:79:35:17:bd:5a:27:16:72:de:
24:c0:bf:21:db:6b:94:e4:ea:09:12:7b:6c:98:98:29:5f:b3:
f1:55:77:c0:97:f6:45:55:cb:0e:81:44:3b:b7:ac:66:1d:96:
e7:6d:46:60:5c:d3:e4:42:af:27:92:c7:a3:c3:78:b9:7f:b4:
74:e5:4f:5d:74:a3:b3:8f:97:2d:9e:07:8d:33:93:68:10:9a:
8c:59:a4:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9VzgLwvn9xpdDItQWL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmViOWIzMDJjZWI2ZjU4ZDMyN2I0OTRkODE0NTk0MzNi
ZTczOGQwHhcNMjUwODIzMDIwMDI1WhcNMjUwODI0MDIwMDI1WjAzMTEwLwYDVQQD
EygyZjFmYTA0ZjNhNjU5MTMzNzBlYjkyMzViMDM1Y2ViZDMxYjE5MGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eBmsCnFDD3qnmPxuLkRIFKuq8/p
S3hGDokGv8kSMHs8KR7pKXPCvgTBnlYVQQBG8GBjmPloN/SL0fFuL+ZO/7GcaksN
1SGzd2WkL/eVVcx+Fz342ai6Gcn588xEZ59Xf7r65vgRsQbrho5I/An3FdiIE3kd
8FTRJxtYiZlWt/m0cphYvGLs36ofcJU2ydo2wuA5SNxuHS2j8GcFc2cGAfc8B8Dm
SQMYvXtrYlNg2gTFTQLQ4oyiu+BcLW/OPhYTn1ph1WdaNdec+EuhebOZiI9K9bmq
WyKRzM6l43S6R42pkkkQfwh5y95qM8RX2+0X6cMfU3zuGDws9td6/PskcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8foE86ZZEzcOuSNbA1zr0xsZDNMB8GA1UdIwQY
MBaAFPy+ubMCzrb1jTJ7SU2BRZQzvnONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUt
MzdhZmJkZjRkODQ3LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUtMzdhZmJkZjRkODQ3
LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2PDeTWA0
J5d3N4CreUmWZBu+O+7uQy/MDrQb3iUf74Og6OYI9xMzHs+KS4A5kGlJIEkieVXF
6Qpv+lnGmKLgT59NYbD5Zs7MLfHqKpTELigMVFH8lgp1T1u5JCLYcwm0XcfwRpnF
GpavWS1wQpM+WYMcNrFDswCoU3Ghis1hirSTQsiBe+7efoAYLvyDVSE2a5OsslwA
DJ/lr6FqzbZcrioyWztGtx8dzrw+eTUXvVonFnLeJMC/IdtrlOTqCRJ7bJiYKV+z
8VV3wJf2RVXLDoFEO7esZh2W521GYFzT5EKvJ5LHo8N4uX+0dOVPXXSjs4+XLZ4H
jTOTaBCajFmkfg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:51 2025 by rpki-client