Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: +E2kB3heiqJlt+I+ZxtU9UuIGiM7uRVlyVVzNgD5AZI=
Subject key identifier: CE:F0:70:9D:A5:F2:32:15:AF:14:8F:62:E7:68:64:6F:A2:40:60:42
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 0198D65FF63826E029C5A9960059307CD291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 0160
Signing time: Sat 23 Aug 2025 10:01:09 +0000
Manifest this update: Sat 23 Aug 2025 10:01:09 +0000
Manifest next update: Sun 24 Aug 2025 10:01:09 +0000
Files and hashes: 1: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: KFrv9yFAY2OYpusN8L6XbxkPEVp+yIyHIrf8lnJ9QkE=)
2: ov9bt7rq-ZAHiu2QpDXEfzrBMio.roa (hash: fNkDgRhHNp5NjFPWLKgUQs4BOo+3hJw3ZGGsziRq0cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f6:38:26:e0:29:c5:a9:96:00:59:30:7c:d2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Aug 23 10:01:09 2025 GMT
Not After : Aug 24 10:01:09 2025 GMT
Subject: CN=cef0709da5f23215af148f62e768646fa2406042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:bd:aa:9b:e5:44:01:36:8a:51:f4:74:f5:
aa:df:a1:c4:1c:17:aa:75:44:e7:0f:87:18:23:f4:
41:ea:6c:b7:94:e3:0c:6b:1f:25:77:a0:51:c5:a8:
1e:07:59:ac:28:ed:e0:a3:72:c1:6d:b7:6b:97:19:
53:60:a9:81:5c:f1:6b:21:aa:4b:96:55:01:43:2a:
62:97:2a:c5:fa:52:bf:b2:6a:34:03:50:39:0d:57:
5b:0a:15:50:dc:84:c6:91:9d:97:7a:c8:7d:06:f1:
20:cd:8f:53:e3:c8:59:cf:36:13:f9:3f:15:e9:6b:
10:f6:be:05:c7:e9:59:4e:6d:85:db:f7:5f:0f:1c:
fa:18:be:0c:fc:8e:be:cd:23:3f:ae:49:59:5c:0f:
8e:0a:8c:db:cc:0c:5d:38:37:13:0f:bf:a2:f1:1d:
b2:c1:ad:bb:40:4c:8a:d9:21:a3:a9:36:86:63:fe:
2f:81:a1:66:6f:a8:2a:9c:a4:c4:17:2e:3c:eb:33:
6c:16:84:4f:c9:89:0f:56:d4:4d:0a:90:f7:2a:6e:
a1:2a:d9:3d:a1:27:d0:8c:99:bf:d7:2a:e3:65:fc:
de:ee:43:71:83:e7:68:e1:ed:63:3b:a6:39:be:5f:
33:42:c4:08:72:16:b5:f7:d9:b9:e4:e3:a0:a0:89:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:70:9D:A5:F2:32:15:AF:14:8F:62:E7:68:64:6F:A2:40:60:42
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b4:e5:a6:da:78:bd:7e:32:ce:9b:05:5a:a0:1b:71:01:96:
93:f7:8d:8b:c5:40:cb:7e:53:bf:91:ca:8d:aa:31:0f:1e:3e:
6b:7f:3c:18:8e:60:8e:11:05:9f:b5:52:5a:ed:00:a0:7a:3b:
0b:5f:8e:99:99:87:7f:db:6c:af:a7:14:ce:47:b2:c8:24:e9:
2a:e3:84:fe:ae:77:e3:c0:fd:31:83:75:11:0b:aa:77:74:a8:
38:2e:3e:8d:81:bb:58:55:f3:dc:5f:21:21:ac:dd:53:60:d5:
6a:ce:2f:91:43:5f:ae:df:34:75:ab:77:ca:9d:fe:e5:ec:53:
0d:e4:41:65:96:a5:94:4e:3d:e1:ec:0c:40:8c:dd:4d:45:21:
43:69:cf:44:c3:14:36:7a:17:dc:2c:6b:de:dc:c4:0d:ee:d9:
93:80:53:be:d3:5c:14:e3:02:1d:eb:c0:d4:59:af:bd:4d:a7:
71:72:fa:b1:83:fb:87:0f:af:61:08:97:a3:1c:ff:cc:8a:5d:
f1:14:b8:52:4c:77:df:dd:8b:38:86:0f:df:8d:9b:ca:03:c2:
ed:22:f3:f0:86:cb:7c:9d:a4:33:88:43:8f:65:61:47:e2:81:
4b:3d:40:36:55:ad:20:c7:cd:35:9f:10:3f:91:5b:39:32:8f:
55:9a:21:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/Y4JuApxamWAFkwfNKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz
ZWQxNWUwHhcNMjUwODIzMTAwMTA5WhcNMjUwODI0MTAwMTA5WjAzMTEwLwYDVQQD
EyhjZWYwNzA5ZGE1ZjIzMjE1YWYxNDhmNjJlNzY4NjQ2ZmEyNDA2MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws29qpvlRAE2ilH0dPWq36HEHBeq
dUTnD4cYI/RB6my3lOMMax8ld6BRxageB1msKO3go3LBbbdrlxlTYKmBXPFrIapL
llUBQypilyrF+lK/smo0A1A5DVdbChVQ3ITGkZ2Xesh9BvEgzY9T48hZzzYT+T8V
6WsQ9r4Fx+lZTm2F2/dfDxz6GL4M/I6+zSM/rklZXA+OCozbzAxdODcTD7+i8R2y
wa27QEyK2SGjqTaGY/4vgaFmb6gqnKTEFy486zNsFoRPyYkPVtRNCpD3Km6hKtk9
oSfQjJm/1yrjZfze7kNxg+do4e1jO6Y5vl8zQsQIcha199m55OOgoInuWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7wcJ2l8jIVrxSPYudoZG+iQGBCMB8GA1UdIwQY
MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct
YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj
LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArTlptp4
vX4yzpsFWqAbcQGWk/eNi8VAy35Tv5HKjaoxDx4+a388GI5gjhEFn7VSWu0AoHo7
C1+OmZmHf9tsr6cUzkeyyCTpKuOE/q5348D9MYN1EQuqd3SoOC4+jYG7WFXz3F8h
IazdU2DVas4vkUNfrt80dat3yp3+5exTDeRBZZallE494ewMQIzdTUUhQ2nPRMMU
NnoX3Cxr3tzEDe7Zk4BTvtNcFOMCHevA1FmvvU2ncXL6sYP7hw+vYQiXoxz/zIpd
8RS4Ukx3392LOIYP342bygPC7SLz8IbLfJ2kM4hDj2VhR+KBSz1ANlWtIMfNNZ8Q
P5FbOTKPVZoh1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:16 2025 by rpki-client