Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
File: Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft (raw, json)
Hash identifier: LIcf66HUC7b+aSgQqHFEC+GsPg+Pryv5Xx7gba0evhc=
Subject key identifier: 56:05:74:24:6A:AE:6E:A7:53:AE:BE:6A:E0:92:18:7C:94:BC:0A:07
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial: 0198D583660440AB3C29FE96304AEDDDCEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
Manifest number: 089A
Signing time: Sat 23 Aug 2025 06:00:14 +0000
Manifest this update: Sat 23 Aug 2025 06:00:14 +0000
Manifest next update: Sun 24 Aug 2025 06:00:14 +0000
Files and hashes: 1: Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl (hash: bQnIe5gIyRajZ6XhqUHa11w5PQRMK9wW/yaRDojiM80=)
2: a6yjRQPaEVSmn2Af_50hlyGwo-8.roa (hash: f+GvZNBih0mNs6EfHvNm1HRb2NXRxOiIU+W+BUZl09g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:66:04:40:ab:3c:29:fe:96:30:4a:ed:dd:ce:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
Validity
Not Before: Aug 23 06:00:14 2025 GMT
Not After : Aug 24 06:00:14 2025 GMT
Subject: CN=560574246aae6ea753aebe6ae092187c94bc0a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:dc:c4:19:43:ef:73:ba:44:6d:7a:df:05:
77:db:be:e4:0b:c3:97:09:82:32:77:a4:64:8f:1b:
06:51:1d:66:f5:89:38:9a:36:46:73:1c:d6:13:5a:
78:b8:4b:72:e2:44:85:e1:d4:12:d2:8d:38:19:67:
37:dd:71:66:85:b0:a0:90:1b:01:bc:7a:b3:e8:95:
2b:2c:06:51:38:b0:b4:78:9e:62:cf:0a:f2:ac:e1:
59:45:62:6e:cb:ad:a5:3f:f3:d4:c8:b3:50:0b:5a:
52:90:c5:df:53:72:08:44:d8:e9:b5:c5:aa:b0:8a:
4e:a6:67:a1:94:a7:af:4b:4b:82:2e:c9:73:75:3b:
30:21:0d:ac:8f:6a:77:c7:50:ef:be:f4:9e:0e:79:
5d:af:61:5c:74:44:9f:69:ac:be:e7:da:40:be:e2:
71:5e:19:61:5c:08:13:3c:45:f0:6e:f7:a8:e1:f1:
46:b7:4b:95:df:7b:53:90:3b:3e:ae:c0:16:c2:86:
09:05:cf:ed:18:30:95:e6:97:80:c8:31:d3:1a:70:
02:68:55:71:1c:94:ff:fc:76:96:a5:4a:63:61:b7:
dd:de:03:eb:ee:89:3e:86:38:9f:85:27:fc:5e:d1:
84:16:64:8b:9f:0d:65:12:50:19:d4:c6:44:0c:67:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:74:24:6A:AE:6E:A7:53:AE:BE:6A:E0:92:18:7C:94:BC:0A:07
X509v3 Authority Key Identifier:
keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:90:40:73:dd:25:88:6c:90:42:fb:2f:f4:e3:a9:d8:f2:1f:
b1:32:e7:88:02:38:2e:68:75:b0:ce:8d:fa:2c:b1:3c:1a:88:
b4:4b:44:14:18:38:2d:41:c6:fa:81:2c:63:de:3f:1e:3d:67:
24:e4:07:4c:c8:1f:ef:73:34:46:52:c9:ce:ea:df:44:1c:ff:
1b:36:e8:95:7e:c1:0a:b9:1d:8f:78:33:be:30:f3:7f:87:86:
52:12:2e:6b:86:f9:f1:2d:2c:d6:4c:af:bf:54:1a:3c:5e:8d:
e5:74:18:2d:ca:c4:66:04:d5:c6:22:cf:b7:05:3b:e8:02:f2:
b8:7a:f3:10:0d:9a:72:51:bf:d6:86:13:98:fc:b0:ac:5e:25:
da:33:a4:f5:7a:c2:7d:c4:f1:8c:7b:7f:b7:37:b0:16:25:fe:
4c:71:25:5e:dc:20:54:87:73:0f:5b:f2:84:0e:39:38:56:7b:
72:46:cd:17:10:56:4b:a2:98:db:d4:5e:f7:7f:37:1b:a2:07:
a7:16:ba:6a:5d:0b:6b:49:7d:28:73:ae:cc:a6:1e:88:81:bd:
ff:df:88:02:cb:5c:d9:0e:27:f3:6d:c6:be:64:77:df:c1:3a:
c7:c2:87:d1:1b:ce:04:fd:24:4e:b6:80:8b:8c:e7:91:78:a6:
51:e8:b6:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2YEQKs8Kf6WMErt3c7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZWRjZmVjOWY2ZTMyNWJjMmMzOWQyNDE5M2Y4MzBmNDMx
ODMxMzUwHhcNMjUwODIzMDYwMDE0WhcNMjUwODI0MDYwMDE0WjAzMTEwLwYDVQQD
Eyg1NjA1NzQyNDZhYWU2ZWE3NTNhZWJlNmFlMDkyMTg3Yzk0YmMwYTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumncxBlD73O6RG163wV3277kC8OX
CYIyd6RkjxsGUR1m9Yk4mjZGcxzWE1p4uEty4kSF4dQS0o04GWc33XFmhbCgkBsB
vHqz6JUrLAZROLC0eJ5izwryrOFZRWJuy62lP/PUyLNQC1pSkMXfU3IIRNjptcWq
sIpOpmehlKevS0uCLslzdTswIQ2sj2p3x1DvvvSeDnldr2FcdESfaay+59pAvuJx
XhlhXAgTPEXwbveo4fFGt0uV33tTkDs+rsAWwoYJBc/tGDCV5peAyDHTGnACaFVx
HJT//HaWpUpjYbfd3gPr7ok+hjifhSf8XtGEFmSLnw1lElAZ1MZEDGc/TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYFdCRqrm6nU66+auCSGHyUvAoHMB8GA1UdIwQY
MBaAFBbtz+yfbjJbwsOdJBk/gw9DGDE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81OTExZDUtMTYwZS00NjM1LTkyOTct
NWU1YjA0NjkzYWRjLzEvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81OTExZDUtMTYwZS00NjM1LTkyOTctNWU1YjA0NjkzYWRj
LzEvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZBAc90l
iGyQQvsv9OOp2PIfsTLniAI4Lmh1sM6N+iyxPBqItEtEFBg4LUHG+oEsY94/Hj1n
JOQHTMgf73M0RlLJzurfRBz/GzbolX7BCrkdj3gzvjDzf4eGUhIua4b58S0s1kyv
v1QaPF6N5XQYLcrEZgTVxiLPtwU76ALyuHrzEA2aclG/1oYTmPywrF4l2jOk9XrC
fcTxjHt/tzewFiX+THElXtwgVIdzD1vyhA45OFZ7ckbNFxBWS6KY29Re9383G6IH
pxa6al0La0l9KHOuzKYeiIG9/9+IAstc2Q4n823GvmR338E6x8KH0RvOBP0kTraA
i4znkXimUei2aQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:27 2025 by rpki-client