Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: AD2ybO8gApu6M0YQGV6MHOvw5nPeMtrVuqEUxrKiraY=
Subject key identifier: CA:48:B2:51:18:A9:87:0D:8E:D6:CB:65:71:1F:53:45:66:75:64:20
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 0198D4A8503C8F4FF6C0495C5A8B5F07FB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:57 +0000
Manifest this update: Sat 23 Aug 2025 02:00:57 +0000
Manifest next update: Sun 24 Aug 2025 02:00:57 +0000
Files and hashes: 1: 7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa (hash: 9bGwX0kwTRRgIdjNNDlgMuEQgvhNB3ZWI22IbqLrXvk=)
2: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: EYHSvaFoSbIQpgzkCC+T4CJPCAir/qMtC0ZtfGYRfUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:50:3c:8f:4f:f6:c0:49:5c:5a:8b:5f:07:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Aug 23 02:00:57 2025 GMT
Not After : Aug 24 02:00:57 2025 GMT
Subject: CN=ca48b25118a9870d8ed6cb65711f534566756420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:7f:08:0a:8f:1e:08:be:30:81:71:ab:45:
e6:9b:4f:bc:3b:cb:3f:cb:9c:62:48:99:11:31:41:
1d:52:1b:4a:eb:11:47:58:75:4c:bc:34:51:9e:40:
bd:d3:30:6d:27:31:55:8e:10:64:ef:d8:ba:e7:2f:
b2:7a:eb:69:21:59:5b:f9:aa:be:b6:dd:7d:88:31:
f8:9f:85:29:11:f4:08:4d:ee:70:a2:21:55:64:f7:
26:77:17:f9:69:3f:4f:e2:08:5c:3a:b8:dc:5a:a7:
ff:9f:1f:d3:35:33:66:47:9f:62:9e:01:04:c4:51:
f3:b9:0c:7a:d9:c8:73:5c:09:96:24:67:63:7f:fd:
b8:de:b5:94:f0:99:9f:d3:6d:ce:37:9c:6a:04:e9:
04:32:6a:ef:2e:2d:94:b0:2b:0d:82:be:79:3f:f4:
ab:29:49:ed:9a:89:9a:18:31:74:8d:39:bd:2c:c1:
3f:6a:67:ab:d7:64:e9:c5:9f:3c:4e:1a:1c:95:82:
76:46:3b:19:bf:06:d8:39:8d:6f:bc:de:ad:60:4b:
18:3c:80:8d:df:f2:ec:14:59:50:8b:09:ac:9d:ed:
e8:d6:f1:92:cc:a7:ad:5c:44:a8:40:0b:bd:6e:64:
94:ee:5e:49:64:99:ce:65:72:79:51:60:1c:66:ba:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:48:B2:51:18:A9:87:0D:8E:D6:CB:65:71:1F:53:45:66:75:64:20
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:28:69:a0:8c:e1:d1:e5:7f:58:ac:42:80:6f:5f:42:e9:e3:
25:c5:09:f1:3e:48:38:1b:0f:0d:e7:b8:71:63:d0:fc:00:19:
12:b0:c5:9a:15:57:f1:25:60:50:d6:49:6c:c5:30:b1:89:d2:
06:44:96:01:64:fa:19:d5:94:07:9b:2b:75:4c:05:57:4d:5b:
f6:9b:11:c8:b6:15:fe:71:78:72:f7:12:4a:a8:93:f5:99:aa:
78:ac:85:da:1d:98:10:f9:94:3e:96:b2:13:fc:76:0b:5a:8b:
96:ce:35:c6:d5:79:9b:91:bb:34:27:f7:0c:2c:8f:4f:c6:d3:
42:d2:09:f3:32:94:46:f6:83:e5:19:d0:5b:0a:d4:5b:c4:9c:
83:7b:eb:52:89:fc:65:3b:91:e5:4b:97:9c:44:df:80:ec:51:
18:ee:fa:b3:bb:a2:e4:44:3f:b5:88:aa:90:4a:69:09:bd:ea:
4e:67:f4:30:bb:49:3b:a8:34:a9:2d:09:47:59:a8:61:34:71:
05:ad:82:07:31:98:bd:ae:55:d3:5d:94:d5:1d:50:04:6d:d2:
dd:31:fd:5f:e5:3b:9a:17:b9:ca:59:fd:c9:4c:dc:af:c8:95:
f8:38:09:41:04:e5:6f:8c:16:e4:ce:db:b5:30:cc:4a:d8:72:
14:b4:6d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqFA8j0/2wElcWotfB/swMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NjI4ZjlmZGFhYjhiODU0OTRiYzMzODgwOTFhMTIyYjBi
YmE1YzgwHhcNMjUwODIzMDIwMDU3WhcNMjUwODI0MDIwMDU3WjAzMTEwLwYDVQQD
EyhjYTQ4YjI1MTE4YTk4NzBkOGVkNmNiNjU3MTFmNTM0NTY2NzU2NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGp/CAqPHgi+MIFxq0Xmm0+8O8s/
y5xiSJkRMUEdUhtK6xFHWHVMvDRRnkC90zBtJzFVjhBk79i65y+yeutpIVlb+aq+
tt19iDH4n4UpEfQITe5woiFVZPcmdxf5aT9P4ghcOrjcWqf/nx/TNTNmR59ingEE
xFHzuQx62chzXAmWJGdjf/243rWU8Jmf023ON5xqBOkEMmrvLi2UsCsNgr55P/Sr
KUntmomaGDF0jTm9LME/amer12TpxZ88ThoclYJ2RjsZvwbYOY1vvN6tYEsYPICN
3/LsFFlQiwmsne3o1vGSzKetXESoQAu9bmSU7l5JZJnOZXJ5UWAcZro9swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpIslEYqYcNjtbLZXEfU0VmdWQgMB8GA1UdIwQY
MBaAFBVij5/aq4uFSUvDOICRoSKwu6XIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRldLUG45cXJpNFZKUzhNNGdKR2hJckM3cGNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kYjI2OTItNGI3MS00M2NiLWEzODkt
OTZmMDQwYmJiYTBkLzEvRldLUG45cXJpNFZKUzhNNGdKR2hJckM3cGNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kYjI2OTItNGI3MS00M2NiLWEzODktOTZmMDQwYmJiYTBk
LzEvRldLUG45cXJpNFZKUzhNNGdKR2hJckM3cGNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXShpoIzh
0eV/WKxCgG9fQunjJcUJ8T5IOBsPDee4cWPQ/AAZErDFmhVX8SVgUNZJbMUwsYnS
BkSWAWT6GdWUB5srdUwFV01b9psRyLYV/nF4cvcSSqiT9ZmqeKyF2h2YEPmUPpay
E/x2C1qLls41xtV5m5G7NCf3DCyPT8bTQtIJ8zKURvaD5RnQWwrUW8Scg3vrUon8
ZTuR5UuXnETfgOxRGO76s7ui5EQ/tYiqkEppCb3qTmf0MLtJO6g0qS0JR1moYTRx
Ba2CBzGYva5V012U1R1QBG3S3TH9X+U7mhe5yln9yUzcr8iV+DgJQQTlb4wW5M7b
tTDMSthyFLRtqw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:24 2025 by rpki-client