Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: xmqRDTl0YLrbQ1H6EiQXNYsni2Bv3Z5PqwiYY0ed3Ps=
Subject key identifier: 51:1F:DD:14:35:96:F7:10:8F:1A:44:CE:BD:67:41:B3:B3:7B:3C:3A
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 0198D6CE017AFEC6B49CA844A6A6E89C8629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 0F60
Signing time: Sat 23 Aug 2025 12:01:21 +0000
Manifest this update: Sat 23 Aug 2025 12:01:21 +0000
Manifest next update: Sun 24 Aug 2025 12:01:21 +0000
Files and hashes: 1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: nlxdrFKs5k2rYYVrDSPrXvweZeT6KTbRUeDFQK0u5mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:01:7a:fe:c6:b4:9c:a8:44:a6:a6:e8:9c:86:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Aug 23 12:01:21 2025 GMT
Not After : Aug 24 12:01:21 2025 GMT
Subject: CN=511fdd143596f7108f1a44cebd6741b3b37b3c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:76:c5:fe:01:0e:49:6a:c1:09:6b:e3:f7:
4d:14:46:8b:3d:9f:f9:99:98:b9:b7:e9:8f:28:cc:
08:47:70:89:f5:8c:95:4a:92:67:b6:f7:ef:cf:a0:
0c:68:41:c5:3d:50:98:a5:88:61:a0:70:38:02:0f:
32:62:f3:0b:c8:f3:90:ad:43:6c:f1:34:fb:8c:fc:
89:1d:1b:d9:94:02:e7:4e:a5:18:fd:79:2e:ef:0a:
0e:31:fa:82:c5:ec:21:cf:f2:31:fe:33:29:8e:d6:
2b:4e:fa:09:36:0a:01:f7:7d:4f:4f:a7:cd:da:85:
3f:76:29:d2:db:eb:3b:3e:55:e7:5c:9c:56:40:22:
da:43:aa:48:2b:21:03:71:5c:3b:a2:2f:e6:a6:a1:
4e:50:f6:f4:99:b5:fe:f1:ef:0e:6d:50:c3:4d:3f:
5a:11:09:b2:3d:60:54:2f:85:1c:5e:8a:8a:3f:ee:
b8:0e:a2:d9:a1:37:48:74:f4:04:04:ad:6a:8a:67:
f5:1f:b4:ac:e7:ec:43:85:ba:3c:a2:9f:1c:00:1d:
c5:a2:3c:fe:fa:c1:50:61:ad:fd:5f:a4:ed:2c:78:
1c:6d:4c:bc:cc:b9:2b:2a:46:46:f9:23:c7:5b:19:
ef:2a:13:0e:57:e4:8f:41:b7:fb:ed:53:d8:d2:25:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:DD:14:35:96:F7:10:8F:1A:44:CE:BD:67:41:B3:B3:7B:3C:3A
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:1f:2f:be:b7:b1:17:47:7c:44:08:ae:29:e0:8f:10:eb:
0f:9e:55:be:42:e5:75:5e:a9:bd:d8:bc:b5:b1:84:a1:e1:6c:
da:cf:fb:a3:df:ad:65:da:e5:3b:0c:03:9f:22:26:07:16:19:
c4:bb:3d:ad:ad:a0:5c:b2:ec:27:4b:15:4f:c7:53:0f:7f:3a:
38:2f:c9:07:b6:fc:6b:c9:10:d9:41:99:19:0e:4d:15:ef:99:
19:ae:e3:e0:81:67:3e:25:c7:0a:e9:01:a6:3d:e5:e4:f8:f2:
ca:14:54:f7:dc:f1:08:b2:d2:71:0d:52:05:7e:cc:53:bc:47:
fd:a3:9f:4a:d6:de:a7:db:19:82:d3:8c:31:12:98:ee:d9:11:
03:16:4e:9e:48:00:2e:61:a9:1f:8e:60:fb:b2:11:df:24:f9:
9a:0d:a7:98:8f:85:29:90:b5:d7:79:6e:4d:02:57:15:d7:9d:
67:f6:ab:1d:dc:fc:c3:9b:74:97:ea:09:10:20:30:f8:c7:20:
a4:7f:b1:73:f5:34:4b:cf:30:6c:70:c5:07:0e:f8:e0:71:53:
e3:04:60:8d:95:8b:3a:46:15:11:03:e3:6b:35:29:fe:dd:1f:
db:71:60:6a:78:9a:20:8d:cb:ec:1b:71:07:89:22:38:ab:4f:
c7:8b:5c:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzgF6/sa0nKhEpqbonIYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk
YjA5MTMwHhcNMjUwODIzMTIwMTIxWhcNMjUwODI0MTIwMTIxWjAzMTEwLwYDVQQD
Eyg1MTFmZGQxNDM1OTZmNzEwOGYxYTQ0Y2ViZDY3NDFiM2IzN2IzYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzJ2xf4BDklqwQlr4/dNFEaLPZ/5
mZi5t+mPKMwIR3CJ9YyVSpJntvfvz6AMaEHFPVCYpYhhoHA4Ag8yYvMLyPOQrUNs
8TT7jPyJHRvZlALnTqUY/Xku7woOMfqCxewhz/Ix/jMpjtYrTvoJNgoB931PT6fN
2oU/dinS2+s7PlXnXJxWQCLaQ6pIKyEDcVw7oi/mpqFOUPb0mbX+8e8ObVDDTT9a
EQmyPWBUL4UcXoqKP+64DqLZoTdIdPQEBK1qimf1H7Ss5+xDhbo8op8cAB3Fojz+
+sFQYa39X6TtLHgcbUy8zLkrKkZG+SPHWxnvKhMOV+SPQbf77VPY0iVx1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEf3RQ1lvcQjxpEzr1nQbOzezw6MB8GA1UdIwQY
MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt
ZGQ0ODA0ODQwZGQ2LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2
LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1wfL763
sRdHfEQIringjxDrD55VvkLldV6pvdi8tbGEoeFs2s/7o9+tZdrlOwwDnyImBxYZ
xLs9ra2gXLLsJ0sVT8dTD386OC/JB7b8a8kQ2UGZGQ5NFe+ZGa7j4IFnPiXHCukB
pj3l5PjyyhRU99zxCLLScQ1SBX7MU7xH/aOfStbep9sZgtOMMRKY7tkRAxZOnkgA
LmGpH45g+7IR3yT5mg2nmI+FKZC113luTQJXFdedZ/arHdz8w5t0l+oJECAw+Mcg
pH+xc/U0S88wbHDFBw744HFT4wRgjZWLOkYVEQPjazUp/t0f23FganiaII3L7Btx
B4kiOKtPx4tcSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:27 2025 by rpki-client