Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: 3cK9XHr9prZROQB1b2liw884qh28XIpBMqOppnRYUqs=
Subject key identifier: 39:FF:A7:AA:44:22:CE:1C:5B:A4:63:12:83:9C:D7:BF:8A:A0:F2:96
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 0198D4E0D2AAFC3E03FE828CE3737189B54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 0249
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: xhVPgsx0ui69nqXe1y3MOnKFXDjRD7fjmy8F+uW7jqI=)
2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d2:aa:fc:3e:03:fe:82:8c:e3:73:71:89:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=39ffa7aa4422ce1c5ba46312839cd7bf8aa0f296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:2d:b0:b9:3f:e3:da:08:c1:77:ac:38:72:
41:5a:cc:8a:9a:12:30:2a:f5:49:4c:65:19:da:d6:
73:aa:18:84:23:17:9c:e8:6a:08:75:ef:47:e2:25:
d7:a5:96:e4:ef:68:0e:df:50:3b:85:63:c9:38:59:
29:44:af:38:65:1f:4f:77:89:99:b4:7a:a8:fa:92:
b8:90:07:5c:37:c0:10:59:81:bf:60:41:3a:0b:0d:
09:e9:24:d6:45:aa:82:f1:79:53:92:ca:d9:17:14:
d3:a8:bd:4d:22:79:9a:58:ee:f1:ef:13:8c:17:72:
33:6b:07:87:2d:d3:f3:e6:19:a6:8c:73:13:5a:26:
a9:68:84:0c:26:fb:66:5d:7b:96:45:92:84:bb:e2:
40:81:70:7c:66:b8:ee:76:0d:25:57:cf:36:f3:22:
06:bd:ae:ba:a9:81:2a:a0:76:44:52:f2:1f:43:c0:
dd:c9:2c:1b:1b:15:f0:f6:a8:29:27:82:f4:74:10:
73:d6:c5:cb:57:89:80:e0:71:cb:88:e9:f6:b4:68:
42:fb:1c:3a:b1:43:11:c0:3d:ee:4c:02:14:a2:0c:
1f:16:bd:78:2b:3e:1f:ae:ff:5f:83:8b:1a:db:08:
39:27:0b:fc:cf:bc:50:49:23:4f:26:81:a5:41:f9:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FF:A7:AA:44:22:CE:1C:5B:A4:63:12:83:9C:D7:BF:8A:A0:F2:96
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:30:06:e9:de:65:1d:bf:a8:7b:b7:9e:f8:74:2b:12:d0:7a:
5e:d2:3c:9d:96:05:2b:5c:38:5e:44:dc:bb:c2:47:0f:3e:25:
f8:7a:61:fc:0a:b3:6d:56:f7:6a:a5:bb:02:f4:62:e0:cc:d7:
b3:a0:a0:58:9e:b4:9e:fe:79:28:46:6d:81:93:6f:50:d5:a8:
db:07:46:3a:d4:f8:ff:1f:76:df:53:74:ac:c9:42:2c:59:e6:
b4:f6:9d:07:18:c3:ba:31:3f:0f:e9:a3:3c:19:06:00:f3:a8:
cc:40:7e:d7:d0:3b:94:db:d9:3e:cf:ec:03:c3:3f:30:20:be:
5b:38:c1:08:f9:ed:f9:a3:73:13:9a:2a:58:50:82:bf:9f:97:
e0:70:be:89:c5:5d:24:d6:b8:3c:72:dd:24:8a:f4:0d:95:f6:
7e:cc:79:41:65:0f:f7:70:b0:0f:15:6e:d5:f3:e9:09:99:bf:
3f:22:39:a2:9f:29:80:1b:a4:2d:79:01:12:d5:96:31:b6:14:
a1:4c:e4:93:19:68:e6:18:67:c2:2c:a6:45:4b:81:36:96:ac:
3c:8e:78:66:30:3e:c9:44:c1:a2:86:5f:b7:e3:6f:9c:63:7d:
25:1c:ba:0b:66:5c:19:49:12:72:09:74:24:70:0c:b1:24:8f:
86:32:28:be
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjU4NKq/D4D/oKM43NxibVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTI1ZTQxMmM2YWUyYjE2Y2FjMzllY2YyODhjMmUyZTZh
NzVkZTIwHhcNMjUwODIzMDMwMjQwWhcNMjUwODI0MDMwMjQwWjAzMTEwLwYDVQQD
EygzOWZmYTdhYTQ0MjJjZTFjNWJhNDYzMTI4MzljZDdiZjhhYTBmMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmUtsLk/49oIwXesOHJBWsyKmhIw
KvVJTGUZ2tZzqhiEIxec6GoIde9H4iXXpZbk72gO31A7hWPJOFkpRK84ZR9Pd4mZ
tHqo+pK4kAdcN8AQWYG/YEE6Cw0J6STWRaqC8XlTksrZFxTTqL1NInmaWO7x7xOM
F3IzaweHLdPz5hmmjHMTWiapaIQMJvtmXXuWRZKEu+JAgXB8Zrjudg0lV8828yIG
va66qYEqoHZEUvIfQ8DdySwbGxXw9qgpJ4L0dBBz1sXLV4mA4HHLiOn2tGhC+xw6
sUMRwD3uTAIUogwfFr14Kz4frv9fg4sa2wg5Jwv8z7xQSSNPJoGlQfkRlwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDn/p6pEIs4cW6RjEoOc17+KoPKWMB8GA1UdIwQY
MBaAFPhSXkEsauKxbKw57PKIwuLmp13iMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GSmVRU3hxNHJGc3JEbnM4b2pDNHVhblhlSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvYTNmZDhiLTY4NmItNGU2Yy04Yjdi
LTQzMTBjMzliMWY0NC8xLzEtRkplUVN4cTRyRnNyRG5zOG9qQzR1YW5YZUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EzL2EzZmQ4Yi02ODZiLTRlNmMtOGI3Yi00MzEwYzM5YjFm
NDQvMS8xLUZKZVFTeHE0ckZzckRuczhvakM0dWFuWGVJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzAG
6d5lHb+oe7ee+HQrEtB6XtI8nZYFK1w4XkTcu8JHDz4l+Hph/AqzbVb3aqW7AvRi
4MzXs6CgWJ60nv55KEZtgZNvUNWo2wdGOtT4/x9231N0rMlCLFnmtPadBxjDujE/
D+mjPBkGAPOozEB+19A7lNvZPs/sA8M/MCC+WzjBCPnt+aNzE5oqWFCCv5+X4HC+
icVdJNa4PHLdJIr0DZX2fsx5QWUP93CwDxVu1fPpCZm/PyI5op8pgBukLXkBEtWW
MbYUoUzkkxlo5hhnwiymRUuBNpasPI54ZjA+yUTBooZft+NvnGN9JRy6C2ZcGUkS
cgl0JHAMsSSPhjIovg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:47 2025 by rpki-client