Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier: Hbjsd/aGyVYjNpwoEEv+DUn+D4Z2pG/5zDk6+gNs8jc=
Subject key identifier: 11:B4:57:28:D3:B5:40:AC:01:75:97:FA:56:6A:33:50:EC:A5:3D:A4
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 0198D404CDFFBC5C48E00CD6CD3AD9C842E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number: 02FB
Signing time: Fri 22 Aug 2025 23:02:21 +0000
Manifest this update: Fri 22 Aug 2025 23:02:21 +0000
Manifest next update: Sat 23 Aug 2025 23:02:21 +0000
Files and hashes: 1: 8ERPvpxKfVBfAUigys2-PiTFfqA.roa (hash: KAiZ9xkRQ32j6xO0jLEnhDznPnUl1zJBNWjMk46qfE0=)
2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: 3/IehloFfE2pa/RnzxUgtlinDgMWdWwqg70HraUfjUw=)
3: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (hash: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:cd:ff:bc:5c:48:e0:0c:d6:cd:3a:d9:c8:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Aug 22 23:02:21 2025 GMT
Not After : Aug 23 23:02:21 2025 GMT
Subject: CN=11b45728d3b540ac017597fa566a3350eca53da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:93:3e:3d:b0:b0:db:8f:cd:08:4c:ab:e8:
a2:f1:d2:af:94:6d:70:18:cb:91:85:35:a3:83:20:
61:66:21:c9:30:e8:de:60:1e:8d:fc:66:04:92:71:
e8:54:5b:85:68:ee:9a:4f:8a:47:38:dd:f4:6c:4c:
f4:0c:15:4c:4a:9c:bc:90:d1:10:3a:ca:8d:d6:bf:
7c:a1:47:5c:6a:4e:ea:89:ed:34:6b:68:c0:90:c2:
4b:89:6f:aa:91:62:f4:52:f3:79:c0:f3:5f:cc:38:
8c:cb:1f:24:bf:b6:dc:72:69:24:a0:13:d9:78:46:
16:49:32:70:36:6b:92:97:ce:33:58:5e:ce:f2:5e:
4f:ba:31:26:c4:25:c1:27:f9:05:b8:26:dd:83:a9:
1f:3f:60:27:86:5d:67:0b:50:e2:68:69:da:f0:70:
52:fe:ad:44:13:71:a2:39:20:15:f4:62:da:1e:a1:
aa:02:65:f1:6d:01:a2:87:8b:d8:9b:aa:af:b3:1e:
05:3f:c5:37:24:01:f2:f3:0c:ad:db:99:1b:a3:70:
c9:64:7f:92:55:f7:0f:e0:eb:87:60:45:4f:6e:4b:
d5:ff:01:f7:f7:1b:9c:bf:67:7c:81:f5:a3:58:75:
0f:92:5b:76:d0:07:a4:8a:9e:94:35:a9:b6:39:59:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B4:57:28:D3:B5:40:AC:01:75:97:FA:56:6A:33:50:EC:A5:3D:A4
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a1:72:7d:c5:7f:bf:f2:b4:ea:45:b6:10:c9:bd:ec:a8:44:
96:fb:62:55:77:37:23:f9:c5:bc:f7:f1:5e:f3:b6:6e:c2:fc:
7c:0b:1f:1d:9d:d6:b4:c4:11:08:23:08:94:9f:63:8d:73:b7:
77:dc:b9:17:de:da:80:87:10:75:ce:5c:d4:19:83:52:70:cf:
3b:ca:2d:f2:51:6c:99:73:f1:72:90:29:b0:0a:a7:9c:36:cf:
1e:d3:d2:c4:3e:ab:1c:2e:5f:45:25:a9:f8:cb:e0:4e:3d:df:
4f:99:99:36:1d:78:29:14:8d:27:32:56:36:f8:87:60:33:aa:
77:ff:53:30:f7:38:b8:45:db:d9:09:90:22:82:01:6c:46:9f:
88:0f:de:e9:f0:62:05:a9:75:86:df:04:a0:26:8c:ec:bc:60:
3c:0a:ac:98:7f:4f:04:5a:bf:d3:03:b2:a1:77:5a:f1:30:20:
b5:1d:cc:a2:14:be:e0:b9:29:a8:fe:2f:68:72:a2:bb:36:e0:
1b:59:af:58:c7:f3:87:88:38:34:b1:5f:72:a6:47:96:15:52:
a7:21:d9:a8:ff:b0:21:fd:ea:cf:4f:98:46:a7:96:25:6d:de:
50:18:c8:05:49:30:bb:95:66:80:ab:f5:f9:a1:1c:cb:f4:d9:
84:18:b2:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBM3/vFxI4AzWzTrZyELjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTE0YzUxZDAzMTQxMWMxMzQwMTcxNTkzNjAzMTYzYzNk
NGEwOGUwHhcNMjUwODIyMjMwMjIxWhcNMjUwODIzMjMwMjIxWjAzMTEwLwYDVQQD
EygxMWI0NTcyOGQzYjU0MGFjMDE3NTk3ZmE1NjZhMzM1MGVjYTUzZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGeTPj2wsNuPzQhMq+ii8dKvlG1w
GMuRhTWjgyBhZiHJMOjeYB6N/GYEknHoVFuFaO6aT4pHON30bEz0DBVMSpy8kNEQ
OsqN1r98oUdcak7qie00a2jAkMJLiW+qkWL0UvN5wPNfzDiMyx8kv7bccmkkoBPZ
eEYWSTJwNmuSl84zWF7O8l5PujEmxCXBJ/kFuCbdg6kfP2Anhl1nC1DiaGna8HBS
/q1EE3GiOSAV9GLaHqGqAmXxbQGih4vYm6qvsx4FP8U3JAHy8wyt25kbo3DJZH+S
VfcP4OuHYEVPbkvV/wH39xucv2d8gfWjWHUPklt20Aekip6UNam2OVl4WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG0VyjTtUCsAXWX+lZqM1DspT2kMB8GA1UdIwQY
MBaAFBaRTFHQMUEcE0AXFZNgMWPD1KCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmIt
MDlmMTljNmU1MWIyLzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmItMDlmMTljNmU1MWIy
LzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6FyfcV/
v/K06kW2EMm97KhElvtiVXc3I/nFvPfxXvO2bsL8fAsfHZ3WtMQRCCMIlJ9jjXO3
d9y5F97agIcQdc5c1BmDUnDPO8ot8lFsmXPxcpApsAqnnDbPHtPSxD6rHC5fRSWp
+MvgTj3fT5mZNh14KRSNJzJWNviHYDOqd/9TMPc4uEXb2QmQIoIBbEafiA/e6fBi
Bal1ht8EoCaM7LxgPAqsmH9PBFq/0wOyoXda8TAgtR3MohS+4LkpqP4vaHKiuzbg
G1mvWMfzh4g4NLFfcqZHlhVSpyHZqP+wIf3qz0+YRqeWJW3eUBjIBUkwu5VmgKv1
+aEcy/TZhBiyUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:36 2025 by rpki-client