Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json)
Hash identifier: sQaln3D+N7jOS6Ig9gm9lT73USashO2BYgPear3m5xc=
Subject key identifier: 84:C4:28:67:DF:7A:6E:50:2C:A0:BA:00:86:2D:74:A4:10:65:11:7A
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 0198D54EA9EA0C38330814B6004409308F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
Manifest number: 1270
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=)
2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: mylBis7l/HLQoRePJcz+KArmxi8H7XN+M8TOAmjStvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a9:ea:0c:38:33:08:14:b6:00:44:09:30:8f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=84c42867df7a6e502ca0ba00862d74a41065117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:ec:4c:be:84:a3:8a:1c:17:a9:57:75:25:
2f:6c:cb:a6:ba:92:05:9b:89:9a:25:1c:3d:af:1f:
d4:a6:df:43:b8:2f:67:b1:ee:d0:67:98:08:de:57:
7b:c6:d0:21:06:1e:23:3a:7d:cf:77:4a:f6:88:1d:
45:10:b1:70:f7:4f:8d:06:d9:f4:72:f5:7a:00:25:
50:f9:cb:41:49:b4:be:ec:a0:18:d0:5c:e7:f2:2a:
98:f4:bf:18:f8:bb:53:ff:ee:9e:09:73:00:de:44:
36:77:a9:9e:92:08:44:f9:64:d0:14:74:41:58:39:
ef:d6:c5:c3:0e:d3:6b:43:dd:45:ff:af:c5:48:2b:
c3:4b:47:b8:4b:50:d5:94:4b:d0:66:73:61:f8:f3:
ff:d3:d4:2b:65:33:40:10:aa:55:bf:b0:7b:0b:a9:
3d:09:6c:c7:36:ba:ea:72:69:ea:fb:98:64:dc:30:
ac:db:4d:99:7e:81:a6:ec:48:e7:c1:d2:7a:1f:5c:
73:9e:f6:9b:74:86:77:99:22:63:b8:61:78:2b:f1:
a5:9f:42:46:40:0e:3c:81:8e:d8:bc:45:42:3d:4f:
eb:6f:1a:b8:dc:4f:56:95:ae:60:e3:90:e5:66:db:
54:54:04:12:2d:2e:e7:ad:ff:6f:a1:38:97:3d:09:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C4:28:67:DF:7A:6E:50:2C:A0:BA:00:86:2D:74:A4:10:65:11:7A
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9a:22:18:6b:d7:3d:75:ea:b4:29:cd:06:b4:9b:be:4c:2e:
0d:e3:9a:98:2a:a1:45:22:51:3e:b6:94:16:42:89:2f:78:b3:
e1:9e:75:de:ea:fa:1a:c5:d7:0b:36:06:e8:87:3c:3f:ec:f3:
ad:fb:fd:f6:58:cc:1b:2a:13:d7:01:8f:41:80:4d:76:d7:38:
77:c3:be:50:ff:11:58:1f:4a:b5:29:f2:ec:3e:24:07:14:a9:
64:86:ad:d0:08:19:ea:db:33:0c:87:16:b6:66:89:9d:57:f4:
4e:20:19:9c:33:88:10:ef:9a:7e:02:ab:30:08:7c:55:6f:f7:
ab:98:32:17:2c:6e:00:7a:6d:ab:93:f0:02:74:d1:ef:9d:45:
3d:e2:45:8d:ee:ed:30:8c:b1:bc:f1:b2:63:a1:f0:77:34:81:
f5:94:2c:10:43:e7:d9:cd:2b:1d:46:3b:6e:d2:da:b7:a2:4b:
f3:da:2a:89:84:61:2c:64:d7:f9:c4:1f:fc:3f:5d:9e:e0:ef:
8e:e1:c9:9b:3e:6f:e8:1e:4d:75:48:50:ce:85:4a:49:b0:f0:
2a:af:68:1b:d3:8d:bd:20:b5:4a:d8:22:a5:cb:14:f2:fa:62:
35:cc:e7:86:f7:30:7d:d2:d1:d7:b6:23:e5:fc:ab:ae:df:0e:
30:ec:a4:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqnqDDgzCBS2AEQJMI8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNTNjYmViNzE1MDg0YjMyMmExYTE0OWM5NmUwOWM0MGVk
NmQ4ODMwHhcNMjUwODIzMDUwMjM5WhcNMjUwODI0MDUwMjM5WjAzMTEwLwYDVQQD
Eyg4NGM0Mjg2N2RmN2E2ZTUwMmNhMGJhMDA4NjJkNzRhNDEwNjUxMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidHsTL6Eo4ocF6lXdSUvbMumupIF
m4maJRw9rx/Upt9DuC9nse7QZ5gI3ld7xtAhBh4jOn3Pd0r2iB1FELFw90+NBtn0
cvV6ACVQ+ctBSbS+7KAY0Fzn8iqY9L8Y+LtT/+6eCXMA3kQ2d6mekghE+WTQFHRB
WDnv1sXDDtNrQ91F/6/FSCvDS0e4S1DVlEvQZnNh+PP/09QrZTNAEKpVv7B7C6k9
CWzHNrrqcmnq+5hk3DCs202ZfoGm7EjnwdJ6H1xznvabdIZ3mSJjuGF4K/Gln0JG
QA48gY7YvEVCPU/rbxq43E9Wla5g45DlZttUVAQSLS7nrf9voTiXPQm84QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITEKGffem5QLKC6AIYtdKQQZRF6MB8GA1UdIwQY
MBaAFKxTy+txUISzIqGhScluCcQO1tiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQt
N2FlYWRiNDVhMjM3LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQtN2FlYWRiNDVhMjM3
LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5oiGGvX
PXXqtCnNBrSbvkwuDeOamCqhRSJRPraUFkKJL3iz4Z513ur6GsXXCzYG6Ic8P+zz
rfv99ljMGyoT1wGPQYBNdtc4d8O+UP8RWB9KtSny7D4kBxSpZIat0AgZ6tszDIcW
tmaJnVf0TiAZnDOIEO+afgKrMAh8VW/3q5gyFyxuAHptq5PwAnTR751FPeJFje7t
MIyxvPGyY6HwdzSB9ZQsEEPn2c0rHUY7btLat6JL89oqiYRhLGTX+cQf/D9dnuDv
juHJmz5v6B5NdUhQzoVKSbDwKq9oG9ONvSC1StgipcsU8vpiNcznhvcwfdLR17Yj
5fyrrt8OMOykJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:46 2025 by rpki-client