Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
File: fhN6p6PGSUQ0z09AqLSOz8Agye8.mft (raw, json)
Hash identifier: FXw3MW/XysyMBdiZ6YEz4mWzzc+nKdC37RdywlsVH50=
Subject key identifier: BF:E6:64:D1:BD:8C:E3:34:87:88:9F:2D:27:6B:74:95:E2:AE:6B:9D
Authority key identifier: 7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
Certificate issuer: /CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Certificate serial: 0198D54E3D2FFC6E1C3E037E8917EC63EB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
Manifest number: 31
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: OILyzQ2UmvS21gSFd565SbxH7mA.roa (hash: 9fyLmCcJiT605kvUMhZI3DGLYcwb/Ju1g++2lmYXkfY=)
2: fhN6p6PGSUQ0z09AqLSOz8Agye8.crl (hash: EWkZQyOazDM3kaXNuXgL+qug1CUZRyaslGGY3X9Q2ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3d:2f:fc:6e:1c:3e:03:7e:89:17:ec:63:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=bfe664d1bd8ce33487889f2d276b7495e2ae6b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:e2:ad:bb:60:4e:bf:d3:07:c7:43:e6:49:
36:37:d3:ba:79:6e:db:02:84:bd:d4:95:db:f4:32:
a6:a8:d9:49:5b:1a:dc:59:41:da:26:cd:67:d7:be:
cd:51:89:23:79:bc:b0:b6:92:ca:35:fd:f5:31:71:
02:87:58:1c:af:69:2a:46:d2:dd:7e:4b:da:9b:20:
36:e9:2f:bf:2f:4e:3e:e6:b8:07:91:5e:e6:e3:84:
46:65:7c:2d:f3:2f:1a:72:19:df:dd:39:dc:95:14:
7a:13:e5:c7:41:5a:f2:fb:4e:08:ec:6b:f3:f7:eb:
c2:b8:34:26:94:31:2a:f1:79:64:1f:9c:3e:71:d0:
e4:39:aa:3e:41:dc:b4:35:e2:c9:90:44:78:38:29:
76:db:a2:f4:d3:a2:b6:1e:5f:ca:ab:a8:4e:66:67:
3e:cb:c8:50:01:3c:7f:6b:e6:1a:8e:ec:ad:ab:7f:
11:ad:fb:15:59:c0:db:45:59:a0:1c:0c:3a:0c:0c:
4f:49:d3:44:a5:c8:f8:2b:f3:f8:b5:18:2a:3d:40:
77:4e:a6:18:cb:65:ed:24:35:09:f6:fb:7f:8f:96:
dd:b7:f6:fa:5f:1a:b6:5f:81:06:11:3e:5f:05:e1:
69:b7:46:ca:1a:2f:e5:12:dd:20:2f:81:58:a0:be:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:64:D1:BD:8C:E3:34:87:88:9F:2D:27:6B:74:95:E2:AE:6B:9D
X509v3 Authority Key Identifier:
keyid:7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8e:cd:23:8f:c5:8c:58:63:75:c9:71:a2:02:ef:1e:6e:29:
c2:3e:c1:c8:4e:1e:6b:84:90:1c:f5:e2:3c:ab:2e:22:de:d6:
5e:f8:34:53:6c:0b:65:84:89:eb:a2:0d:1a:8d:4a:4f:2a:38:
1d:77:74:ec:f8:39:96:19:f0:ca:1f:be:a2:71:5a:54:27:7a:
5b:9f:c2:64:c5:c5:3e:86:99:92:4d:62:fd:1d:14:4a:3f:00:
20:40:c9:29:9a:95:09:e6:10:c5:84:f6:35:e2:9c:23:35:14:
7c:94:d9:05:7a:3d:b8:64:77:ad:c9:38:ec:41:b3:44:c5:95:
4c:ed:ba:b0:9d:94:6b:ef:33:6b:3e:7b:9f:79:9c:d6:8c:d8:
4d:d3:19:08:5f:d9:80:2f:08:df:85:58:89:1c:ad:ef:ad:59:
11:ae:d8:8d:a3:e3:64:ba:ec:87:7a:40:ee:c0:84:85:7d:e6:
75:1d:41:06:ca:58:28:84:e6:da:9e:66:c6:42:99:30:67:b6:
3c:eb:1d:f0:5e:e7:d0:f1:f3:29:12:b0:06:c4:50:6c:98:bc:
5e:52:c1:27:31:c9:7b:3c:8f:32:0a:4d:c9:2c:ef:7c:f5:e7:
5d:ab:a8:7a:50:6e:24:65:64:4f:42:4b:09:42:87:f3:ee:e1:
3e:db:f2:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTj0v/G4cPgN+iRfsY+t1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTM3YWE3YTNjNjQ5NDQzNGNmNGY0MGE4YjQ4ZWNmYzAy
MGM5ZWYwHhcNMjUwODIzMDUwMjEwWhcNMjUwODI0MDUwMjEwWjAzMTEwLwYDVQQD
EyhiZmU2NjRkMWJkOGNlMzM0ODc4ODlmMmQyNzZiNzQ5NWUyYWU2YjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+TirbtgTr/TB8dD5kk2N9O6eW7b
AoS91JXb9DKmqNlJWxrcWUHaJs1n177NUYkjebywtpLKNf31MXECh1gcr2kqRtLd
fkvamyA26S+/L04+5rgHkV7m44RGZXwt8y8achnf3TnclRR6E+XHQVry+04I7Gvz
9+vCuDQmlDEq8XlkH5w+cdDkOao+Qdy0NeLJkER4OCl226L006K2Hl/Kq6hOZmc+
y8hQATx/a+Yajuytq38RrfsVWcDbRVmgHAw6DAxPSdNEpcj4K/P4tRgqPUB3TqYY
y2XtJDUJ9vt/j5bdt/b6Xxq2X4EGET5fBeFpt0bKGi/lEt0gL4FYoL6+TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/mZNG9jOM0h4ifLSdrdJXirmudMB8GA1UdIwQY
MBaAFH4TeqejxklENM9PQKi0js/AIMnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhONnA2UEdTVVEwejA5QXFMU096OEFneWU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yZjRhNDEtOWYzMC00MjhlLWFjZmYt
MzM2M2RmMDM5NWMxLzEvZmhONnA2UEdTVVEwejA5QXFMU096OEFneWU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yZjRhNDEtOWYzMC00MjhlLWFjZmYtMzM2M2RmMDM5NWMx
LzEvZmhONnA2UEdTVVEwejA5QXFMU096OEFneWU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsY7NI4/F
jFhjdclxogLvHm4pwj7ByE4ea4SQHPXiPKsuIt7WXvg0U2wLZYSJ66INGo1KTyo4
HXd07Pg5lhnwyh++onFaVCd6W5/CZMXFPoaZkk1i/R0USj8AIEDJKZqVCeYQxYT2
NeKcIzUUfJTZBXo9uGR3rck47EGzRMWVTO26sJ2Ua+8zaz57n3mc1ozYTdMZCF/Z
gC8I34VYiRyt761ZEa7YjaPjZLrsh3pA7sCEhX3mdR1BBspYKITm2p5mxkKZMGe2
POsd8F7n0PHzKRKwBsRQbJi8XlLBJzHJezyPMgpNySzvfPXnXauoelBuJGVkT0JL
CUKH8+7hPtvyTQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:49 2025 by rpki-client