Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier: WBc/d7dpR26uh58Gdh2vhkqO3cAlzeDWBnixFJ6pVqk=
Subject key identifier: FC:42:EF:B7:40:2E:01:51:76:B5:94:96:DE:26:3F:B2:32:E7:11:FA
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 0198D54E8CF08DA8221561FA28D371658542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: qpJKck/ijUMlUrCr3v/YaMgYwXRh9b62PxyXvuwddj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8c:f0:8d:a8:22:15:61:fa:28:d3:71:65:85:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=fc42efb7402e015176b59496de263fb232e711fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:89:b6:4f:5a:56:4a:52:e0:1f:04:bd:61:
c5:50:34:25:e0:d2:12:33:a9:26:1d:c9:6c:90:0a:
96:1e:06:ae:b9:04:f2:d3:96:da:b9:81:eb:98:65:
58:1e:7b:99:1f:bc:64:36:5a:ca:4c:6a:b1:30:f3:
f5:9a:76:83:9e:e8:0f:f0:b2:99:64:c6:ef:09:ac:
5e:3e:2a:51:43:9b:5d:87:50:77:82:99:e1:64:31:
fa:b3:d6:b6:dc:4a:62:01:c3:6d:05:1f:62:08:a4:
20:b7:f3:7b:ec:07:09:57:c9:64:27:bd:ce:cf:96:
66:03:9b:67:7a:e1:d5:97:0e:88:ea:9c:f3:b6:6f:
b6:a4:4b:d0:6c:ca:91:51:83:48:a4:0b:9e:02:35:
43:35:0d:6f:96:0c:e2:02:94:3c:f0:e3:22:2f:46:
f6:77:b5:d7:11:f4:22:2c:ac:c5:ba:49:05:cf:6b:
26:a9:3b:01:e3:ab:20:2a:cc:e3:e1:48:82:e9:29:
fd:b5:1f:ec:02:0b:06:e7:10:15:b1:f9:73:29:2d:
ba:72:3f:b3:ef:a7:be:0f:6e:20:ce:65:6a:9d:3e:
0d:5d:57:8f:80:c2:fd:73:3f:91:d8:8e:d4:72:36:
b6:08:af:5b:71:ca:29:6d:16:89:bd:df:69:79:c9:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:EF:B7:40:2E:01:51:76:B5:94:96:DE:26:3F:B2:32:E7:11:FA
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f5:bc:be:f7:48:c0:80:6f:00:3b:65:74:39:35:1e:5c:7e:
19:a6:1a:55:2a:cf:2b:87:d9:fb:8a:67:38:3b:f3:82:c5:09:
e3:5b:14:97:b1:d9:bf:93:26:4e:79:e2:b7:54:55:b7:20:31:
8c:1d:a6:cc:de:56:5d:b5:32:45:d0:89:70:50:b2:ed:18:b9:
84:32:7b:04:c9:e8:62:f2:9b:06:23:15:49:d5:10:43:25:d6:
23:96:03:10:66:82:1e:0a:08:d7:37:ee:6b:f5:c8:88:6b:57:
95:2d:0b:e1:9c:8c:be:f8:7a:80:ce:9f:a1:79:02:6f:9c:36:
ad:00:3b:4e:af:8f:00:ba:9b:72:7d:a8:a7:0b:57:9f:0c:9f:
a2:79:0c:3d:19:25:a0:18:59:04:6a:e0:54:ea:cf:3e:cb:eb:
f3:dc:01:6e:47:6f:d9:03:c5:bc:7c:04:3b:94:da:d0:53:49:
01:9b:47:5f:f1:92:ff:9d:c7:78:ca:e1:fe:29:64:24:71:cf:
c7:57:f7:4d:38:90:cf:a8:ad:70:e3:e4:d8:d5:b2:d4:b3:c1:
57:0f:e0:82:09:34:a0:31:5f:04:63:c9:d7:81:b4:bb:af:47:
be:14:b5:46:55:35:41:0d:4f:6c:81:c9:6e:45:92:50:7e:53:
08:5f:44:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTozwjagiFWH6KNNxZYVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZWI5NDU3ZWM1MTllODIzNzg2NzcxMGJjYzgyZmEzMGVh
ZTY3YzAwHhcNMjUwODIzMDUwMjMxWhcNMjUwODI0MDUwMjMxWjAzMTEwLwYDVQQD
EyhmYzQyZWZiNzQwMmUwMTUxNzZiNTk0OTZkZTI2M2ZiMjMyZTcxMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5OJtk9aVkpS4B8EvWHFUDQl4NIS
M6kmHclskAqWHgauuQTy05bauYHrmGVYHnuZH7xkNlrKTGqxMPP1mnaDnugP8LKZ
ZMbvCaxePipRQ5tdh1B3gpnhZDH6s9a23EpiAcNtBR9iCKQgt/N77AcJV8lkJ73O
z5ZmA5tneuHVlw6I6pzztm+2pEvQbMqRUYNIpAueAjVDNQ1vlgziApQ88OMiL0b2
d7XXEfQiLKzFukkFz2smqTsB46sgKszj4UiC6Sn9tR/sAgsG5xAVsflzKS26cj+z
76e+D24gzmVqnT4NXVePgML9cz+R2I7Ucja2CK9bccopbRaJvd9pecldhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxC77dALgFRdrWUlt4mP7Iy5xH6MB8GA1UdIwQY
MBaAFE/rlFfsUZ6CN4Z3ELzIL6MOrmfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAt
NWYxMjM1NTVjZmIxLzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAtNWYxMjM1NTVjZmIx
LzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPW8vvdI
wIBvADtldDk1Hlx+GaYaVSrPK4fZ+4pnODvzgsUJ41sUl7HZv5MmTnnit1RVtyAx
jB2mzN5WXbUyRdCJcFCy7Ri5hDJ7BMnoYvKbBiMVSdUQQyXWI5YDEGaCHgoI1zfu
a/XIiGtXlS0L4ZyMvvh6gM6foXkCb5w2rQA7Tq+PALqbcn2opwtXnwyfonkMPRkl
oBhZBGrgVOrPPsvr89wBbkdv2QPFvHwEO5Ta0FNJAZtHX/GS/53HeMrh/ilkJHHP
x1f3TTiQz6itcOPk2NWy1LPBVw/gggk0oDFfBGPJ14G0u69HvhS1RlU1QQ1PbIHJ
bkWSUH5TCF9EhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:11 2025 by rpki-client