Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: rcvQCgTH6gigMMFk50lRJGy2CchMvmQHS6hxoylcPQ4=
Subject key identifier: 9B:7E:B8:13:BB:9C:1B:E0:74:63:7D:69:88:06:49:E9:E0:AD:C0:4B
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 0199FB7C818DCC29FA1F07CA96CF96F37DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 1537
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: iJ5zB0ss08RKAL4CwYp8MIDNkjLxBsQ+ZsURdC3ryz8=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:81:8d:cc:29:fa:1f:07:ca:96:cf:96:f3:7d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=9b7eb813bb9c1be074637d69880649e9e0adc04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:aa:da:6d:20:55:1f:2d:1f:fb:d8:8f:96:
1b:dc:bb:b6:2c:bb:7d:d6:63:12:86:d9:1b:fa:2a:
b6:17:bc:f6:82:0c:5f:70:33:f3:17:af:e2:81:12:
cc:6e:23:e8:db:58:7b:f0:5e:41:a0:a6:4e:c9:5f:
8d:57:7b:c1:8e:df:32:f3:a2:96:e3:1e:b5:a5:72:
a8:ef:ac:57:f4:9e:ad:e9:95:63:25:7d:ca:0a:fa:
03:e1:5d:58:9d:06:19:a5:fa:56:34:b9:e8:9c:45:
9f:2c:70:0e:8e:4a:30:ce:d5:16:b9:c9:11:ee:de:
89:64:d3:e1:b5:7d:8f:7b:28:23:4a:10:16:63:7d:
3f:66:20:47:84:7f:87:b7:69:1f:79:48:26:5d:2c:
59:b6:7b:47:63:09:6c:19:48:42:33:2b:05:95:f9:
03:6e:d4:03:78:03:66:09:29:c0:0f:fd:22:cc:73:
51:86:8d:52:7f:1e:68:9f:55:99:db:c8:ca:6a:79:
b3:a5:53:1c:52:68:07:aa:1d:01:2d:20:0c:61:35:
cb:47:c1:36:5e:e4:2f:34:19:8a:94:3b:96:3e:43:
55:fa:12:97:eb:42:a7:9c:6d:c7:60:8f:b6:32:03:
5f:7c:12:58:7a:c9:98:1d:97:72:d9:29:dc:b3:06:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:B8:13:BB:9C:1B:E0:74:63:7D:69:88:06:49:E9:E0:AD:C0:4B
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1b:44:1b:9b:16:e2:00:44:3d:2d:8e:51:d0:81:e8:f1:0a:
13:0b:65:e0:c2:ab:f5:91:39:1c:01:03:25:44:2e:19:8b:55:
26:ff:0b:59:d9:c5:2e:5c:d3:c2:3a:b3:67:c0:28:61:e0:ec:
51:02:d0:6d:7f:2c:70:4e:e3:bc:0c:f2:ca:62:8a:0e:f7:f9:
b9:cf:26:62:1e:24:9a:a7:2b:b5:93:f7:b4:1c:57:31:16:81:
bd:31:c3:00:08:d7:15:58:55:8e:9c:6c:2f:b1:c6:23:ae:5e:
e9:18:80:f7:2d:39:ae:06:d5:c1:0e:67:69:7e:e7:e0:8a:06:
eb:df:0e:88:91:dd:b8:cb:12:f1:0c:51:c8:0e:cd:51:fb:1e:
0a:b8:fc:fb:fe:fb:f6:91:95:04:2a:0d:6c:f4:40:32:c3:c1:
75:dc:09:02:d7:7a:39:fd:7c:47:19:53:bc:31:19:83:00:b0:
86:05:70:5a:cc:99:3f:2d:00:e9:69:2b:1d:5a:f1:31:43:97:
6b:5e:23:24:b3:80:80:64:fd:b8:02:40:e4:2b:d4:5b:42:7b:
2c:ca:9e:45:a7:f7:73:5e:28:d1:b5:62:c4:83:f4:fc:a0:d7:
aa:73:c5:8e:04:79:6c:26:ff:f0:98:cc:12:e7:1d:f5:4b:9a:
65:dc:d7:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fIGNzCn6HwfKls+W833BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGI1NGRmZDQxNjEwNzc0ZmU3ZjI0MmQ3ZGQzODczYTY1
ODQ3M2IwHhcNMjUxMDE5MDgwMTA0WhcNMjUxMDIwMDgwMTA0WjAzMTEwLwYDVQQD
Eyg5YjdlYjgxM2JiOWMxYmUwNzQ2MzdkNjk4ODA2NDllOWUwYWRjMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC6q2m0gVR8tH/vYj5Yb3Lu2LLt9
1mMShtkb+iq2F7z2ggxfcDPzF6/igRLMbiPo21h78F5BoKZOyV+NV3vBjt8y86KW
4x61pXKo76xX9J6t6ZVjJX3KCvoD4V1YnQYZpfpWNLnonEWfLHAOjkowztUWuckR
7t6JZNPhtX2PeygjShAWY30/ZiBHhH+Ht2kfeUgmXSxZtntHYwlsGUhCMysFlfkD
btQDeANmCSnAD/0izHNRho1Sfx5on1WZ28jKanmzpVMcUmgHqh0BLSAMYTXLR8E2
XuQvNBmKlDuWPkNV+hKX60KnnG3HYI+2MgNffBJYesmYHZdy2SncswboTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt+uBO7nBvgdGN9aYgGSengrcBLMB8GA1UdIwQY
MBaAFH5LVN/UFhB3T+fyQtfdOHOmWEc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEt
Nzc0NGVmM2MwYjk5LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEtNzc0NGVmM2MwYjk5
LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhtEG5sW
4gBEPS2OUdCB6PEKEwtl4MKr9ZE5HAEDJUQuGYtVJv8LWdnFLlzTwjqzZ8AoYeDs
UQLQbX8scE7jvAzyymKKDvf5uc8mYh4kmqcrtZP3tBxXMRaBvTHDAAjXFVhVjpxs
L7HGI65e6RiA9y05rgbVwQ5naX7n4IoG698OiJHduMsS8QxRyA7NUfseCrj8+/77
9pGVBCoNbPRAMsPBddwJAtd6Of18RxlTvDEZgwCwhgVwWsyZPy0A6WkrHVrxMUOX
a14jJLOAgGT9uAJA5CvUW0J7LMqeRaf3c14o0bVixIP0/KDXqnPFjgR5bCb/8JjM
Eucd9UuaZdzXQA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:27 2025 by rpki-client