Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: x3yRhmu194Wfucsj+1bYhSiueAKISjoDecp4uIq3fQY=
Subject key identifier: 0F:DF:79:11:1E:D3:CC:BB:89:4D:62:33:D9:46:0A:84:B9:45:07:BA
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 0198D5F138C859B8F97CFB167D3BD34E20C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 149F
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: TC9nedhWlSew91RuJxqIueXP7so9MYDT98pWiC9KlAU=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:38:c8:59:b8:f9:7c:fb:16:7d:3b:d3:4e:20:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=0fdf79111ed3ccbb894d6233d9460a84b94507ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:3a:f3:82:9f:e1:b4:01:1c:5f:ed:c2:d1:
ef:df:c4:10:f8:7b:09:28:4d:c3:60:7b:e2:93:9a:
e7:ce:e5:80:21:ca:81:77:27:4c:25:cf:77:70:5d:
b5:35:b7:c4:07:0e:33:df:e1:65:2a:04:88:3a:85:
f4:be:c9:26:d7:26:ec:96:f5:66:41:d3:d5:42:41:
ed:46:dd:b7:63:e4:9b:37:6c:3b:f4:5c:eb:a9:e2:
67:38:41:15:c6:23:ef:97:a6:44:24:ce:d6:da:15:
e5:be:59:90:58:ea:fc:f3:25:d6:9a:81:9e:84:0f:
6d:c6:00:20:01:71:05:f3:56:f5:da:b9:ac:90:8a:
84:a5:5f:5c:2c:56:9c:03:a9:fd:75:28:15:cc:95:
f1:15:7b:43:46:65:ef:e7:46:31:f1:7e:34:e1:af:
98:7c:96:38:18:ff:19:e7:9a:4f:6c:5a:c0:9e:bc:
c3:93:4d:9a:54:7e:fa:11:5b:70:08:2e:45:76:06:
1e:f8:c9:89:26:5e:64:23:24:88:66:48:06:d9:b3:
81:76:df:51:64:3d:2d:f4:2c:34:b8:f3:41:b9:cc:
2e:d4:a1:dd:42:5c:97:87:da:84:8b:ab:c1:58:d7:
54:9a:82:a3:42:06:d4:9f:5e:0d:19:be:b6:d9:f5:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DF:79:11:1E:D3:CC:BB:89:4D:62:33:D9:46:0A:84:B9:45:07:BA
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f0:0a:d1:5a:d7:a5:6b:5b:d9:48:f9:1b:bf:9b:a3:7c:5a:
b9:42:67:50:95:ab:89:99:4f:35:dc:e0:4f:6c:37:48:67:d6:
5a:bc:66:81:43:62:57:e0:69:dc:1d:34:21:98:c1:d5:31:b6:
fa:e2:5f:9b:e9:79:be:a6:8c:5b:a1:1f:d6:8a:c0:22:dc:80:
41:ea:6a:55:a6:90:19:78:26:4c:0a:1f:d1:f6:ca:78:10:bc:
5f:69:d7:a9:97:48:98:c6:57:48:a7:79:b9:a5:9a:52:42:c2:
3f:35:77:70:72:eb:dc:37:6b:08:6f:79:1a:24:68:3b:58:34:
c8:54:fa:65:91:27:52:0b:58:b4:3f:0c:44:1e:49:48:b5:46:
96:f8:3e:a9:d9:4b:30:10:bd:18:09:a1:04:0e:bf:58:fd:96:
11:08:72:f6:ad:5f:7f:62:29:de:26:99:8f:eb:df:ce:0d:b2:
9e:76:ca:4d:be:72:46:a2:24:94:57:e3:45:e9:2a:35:1b:93:
d8:e0:ac:d3:43:69:c1:a9:67:4e:1b:78:6a:cc:0c:37:59:d3:
c6:0d:1d:79:57:f7:dc:68:df:fc:6b:cc:89:eb:40:8b:4d:b6:
ac:3f:50:70:79:04:97:ee:5d:32:b5:70:91:fa:9a:c1:f5:ce:
ed:ff:06:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8TjIWbj5fPsWfTvTTiDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGI1NGRmZDQxNjEwNzc0ZmU3ZjI0MmQ3ZGQzODczYTY1
ODQ3M2IwHhcNMjUwODIzMDgwMDEyWhcNMjUwODI0MDgwMDEyWjAzMTEwLwYDVQQD
EygwZmRmNzkxMTFlZDNjY2JiODk0ZDYyMzNkOTQ2MGE4NGI5NDUwN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouE684Kf4bQBHF/twtHv38QQ+HsJ
KE3DYHvik5rnzuWAIcqBdydMJc93cF21NbfEBw4z3+FlKgSIOoX0vskm1ybslvVm
QdPVQkHtRt23Y+SbN2w79FzrqeJnOEEVxiPvl6ZEJM7W2hXlvlmQWOr88yXWmoGe
hA9txgAgAXEF81b12rmskIqEpV9cLFacA6n9dSgVzJXxFXtDRmXv50Yx8X404a+Y
fJY4GP8Z55pPbFrAnrzDk02aVH76EVtwCC5FdgYe+MmJJl5kIySIZkgG2bOBdt9R
ZD0t9Cw0uPNBucwu1KHdQlyXh9qEi6vBWNdUmoKjQgbUn14NGb622fU33QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/feREe08y7iU1iM9lGCoS5RQe6MB8GA1UdIwQY
MBaAFH5LVN/UFhB3T+fyQtfdOHOmWEc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEt
Nzc0NGVmM2MwYjk5LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEtNzc0NGVmM2MwYjk5
LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyPAK0VrX
pWtb2Uj5G7+bo3xauUJnUJWriZlPNdzgT2w3SGfWWrxmgUNiV+Bp3B00IZjB1TG2
+uJfm+l5vqaMW6Ef1orAItyAQepqVaaQGXgmTAof0fbKeBC8X2nXqZdImMZXSKd5
uaWaUkLCPzV3cHLr3DdrCG95GiRoO1g0yFT6ZZEnUgtYtD8MRB5JSLVGlvg+qdlL
MBC9GAmhBA6/WP2WEQhy9q1ff2Ip3iaZj+vfzg2ynnbKTb5yRqIklFfjRekqNRuT
2OCs00NpwalnTht4aswMN1nTxg0deVf33Gjf/GvMietAi022rD9QcHkEl+5dMrVw
kfqawfXO7f8GTw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:36 2025 by rpki-client