Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: W+U8jrYrwQWSqDZMV6rwL0aMsBqj21vbOvEpZz+17BM=
Subject key identifier: 6B:C8:39:95:DF:7A:AF:B3:31:53:11:40:B7:CE:E6:06:18:58:43:74
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 0198D660BBD55D6DDD5C006C6F6B0C7E1B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 14B3
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: s8aKyCsuQ3YRttByHtnAddiU2Wxk4VehM42Z6QXEFEY=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bb:d5:5d:6d:dd:5c:00:6c:6f:6b:0c:7e:1b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=6bc83995df7aafb331531140b7cee60618584374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:c1:96:62:77:37:84:64:af:f5:45:68:59:
88:55:32:f9:40:a6:59:e6:b4:ac:07:12:96:93:45:
cc:cb:8f:94:ef:6e:c9:77:bb:de:65:c5:68:57:db:
99:a4:3c:a1:46:1f:14:69:35:bd:ee:23:99:8d:dc:
61:21:bb:39:ba:5b:93:36:4b:8e:d9:09:6d:b3:99:
04:6c:bd:16:f1:d1:df:16:20:a2:9e:ab:7f:a0:5f:
33:93:bd:4a:1e:31:33:d4:0d:17:cc:51:ac:9b:67:
3d:8d:57:03:3d:f7:0b:5a:5e:a9:6e:fb:59:52:60:
d7:ae:68:b6:20:ef:99:3a:92:86:27:12:5f:75:ce:
45:e8:14:35:8f:bc:fc:02:53:26:6d:6f:a8:41:a7:
1d:25:db:b4:7f:ba:47:2f:37:d2:0f:50:6e:37:a0:
97:68:d9:4e:9d:69:b0:ff:51:2b:ee:88:53:5f:3a:
db:c6:5e:55:28:3d:b9:8b:01:7a:0b:3e:92:11:1d:
4e:a4:6c:a7:e3:bc:f1:e1:76:38:cf:16:a2:fc:ad:
1c:27:e6:71:8b:76:de:a1:c9:06:95:45:1e:5e:a9:
be:f9:c8:43:1f:bb:f3:71:9a:ed:04:94:95:09:22:
6f:3b:bd:c2:67:39:b2:c4:68:24:e5:71:70:87:c2:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C8:39:95:DF:7A:AF:B3:31:53:11:40:B7:CE:E6:06:18:58:43:74
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:12:c0:bc:d9:e7:da:99:fe:c5:5a:ce:14:f8:ba:9d:1b:fb:
e7:80:76:48:0c:90:66:ed:23:14:8f:c9:fd:3c:69:fa:1a:e4:
c4:db:5a:53:ba:ef:0e:59:e2:f0:31:b8:5d:35:70:0b:43:57:
9b:4c:4a:33:2b:8c:63:06:6a:f9:b1:e5:bc:1e:b7:ea:d2:44:
19:00:d2:8c:27:2b:83:61:bf:5a:96:f7:fa:fc:1d:4b:98:e8:
7c:95:ac:1d:f6:59:b3:21:f5:3e:40:de:bc:c4:da:fa:41:62:
43:70:63:9a:01:73:dd:75:bb:59:1f:e9:ef:f1:0a:dd:cf:3f:
93:32:13:45:24:e3:d4:57:8f:a8:93:8f:cb:fd:2f:ea:9e:5b:
fe:f1:eb:9d:b3:d2:08:00:74:af:80:e5:e5:f0:20:9b:8b:b4:
67:8c:0f:10:9d:c6:cf:37:4c:0b:79:75:df:02:2e:c4:7f:f0:
68:56:77:bb:ff:c5:91:86:85:f5:6b:67:81:0f:b3:7d:66:ec:
c2:e1:4b:5c:db:5e:b8:7e:b3:5e:ce:b0:4e:c9:60:8a:68:e3:
e3:b9:85:3c:68:4d:94:56:b1:93:5d:f9:38:25:9d:65:41:a2:
d1:cf:5a:5d:59:1b:9e:97:32:8a:fd:eb:3f:90:fe:b4:61:08:
2c:cc:d8:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYLvVXW3dXABsb2sMfht8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjUwODIzMTAwMjAwWhcNMjUwODI0MTAwMjAwWjAzMTEwLwYDVQQD
Eyg2YmM4Mzk5NWRmN2FhZmIzMzE1MzExNDBiN2NlZTYwNjE4NTg0Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhzBlmJ3N4Rkr/VFaFmIVTL5QKZZ
5rSsBxKWk0XMy4+U727Jd7veZcVoV9uZpDyhRh8UaTW97iOZjdxhIbs5uluTNkuO
2Qlts5kEbL0W8dHfFiCinqt/oF8zk71KHjEz1A0XzFGsm2c9jVcDPfcLWl6pbvtZ
UmDXrmi2IO+ZOpKGJxJfdc5F6BQ1j7z8AlMmbW+oQacdJdu0f7pHLzfSD1BuN6CX
aNlOnWmw/1Er7ohTXzrbxl5VKD25iwF6Cz6SER1OpGyn47zx4XY4zxai/K0cJ+Zx
i3beockGlUUeXqm++chDH7vzcZrtBJSVCSJvO73CZzmyxGgk5XFwh8KqNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvIOZXfeq+zMVMRQLfO5gYYWEN0MB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBLAvNnn
2pn+xVrOFPi6nRv754B2SAyQZu0jFI/J/Txp+hrkxNtaU7rvDlni8DG4XTVwC0NX
m0xKMyuMYwZq+bHlvB636tJEGQDSjCcrg2G/Wpb3+vwdS5jofJWsHfZZsyH1PkDe
vMTa+kFiQ3BjmgFz3XW7WR/p7/EK3c8/kzITRSTj1FePqJOPy/0v6p5b/vHrnbPS
CAB0r4Dl5fAgm4u0Z4wPEJ3GzzdMC3l13wIuxH/waFZ3u//FkYaF9WtngQ+zfWbs
wuFLXNteuH6zXs6wTslgimjj47mFPGhNlFaxk135OCWdZUGi0c9aXVkbnpcyiv3r
P5D+tGEILMzY+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:18 2025 by rpki-client