Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: 2zjJZQKoR2oa3xFVgZjsqV33C7vjainRkohcCnCdy60=
Subject key identifier: 0F:8D:BE:5E:A8:2F:B1:60:9B:AC:11:49:C2:27:A2:43:CD:83:2D:76
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 0198D5BBD56BA572ACA11D9B862482EFEBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: aI8f6zqolNYy8PfdI0DQPcIlef6nS5eabAxbtXV7BoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d5:6b:a5:72:ac:a1:1d:9b:86:24:82:ef:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=0f8dbe5ea82fb1609bac1149c227a243cd832d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:e6:40:dd:34:61:d9:44:74:9a:96:2a:3a:
d1:bc:38:7a:1c:71:4d:58:16:0e:e1:1c:fb:6e:dd:
5d:68:1a:79:ab:9e:50:ee:e4:0f:ce:0a:d6:d0:fe:
87:73:0a:10:63:b8:bf:c4:c7:b0:8b:fa:b1:d8:21:
b5:60:f8:77:74:5c:b2:61:73:35:c1:d7:bf:21:f0:
56:22:97:b4:d5:53:84:ab:c1:26:fb:37:c6:c3:7f:
00:29:86:bb:79:c3:43:22:b7:8c:50:86:60:df:ef:
7a:a7:82:63:81:22:5e:3f:a9:81:16:4e:ab:b8:93:
94:7c:65:5d:df:bb:ce:9c:12:f9:62:51:9e:8b:1e:
cb:b6:01:c1:73:68:38:f5:9e:e5:f6:e5:ed:72:60:
d2:3e:66:d3:a6:c5:8a:0d:2b:1e:ea:c8:62:67:a6:
f1:b7:e9:9b:a8:88:f2:be:c3:e5:58:c3:cc:91:ce:
f4:f2:24:8e:04:14:7b:9c:74:b6:bd:01:25:dc:75:
18:03:2e:ee:a7:e3:ac:f7:26:96:50:05:54:f9:71:
ba:0e:e1:a7:61:0a:2d:4f:85:59:65:b7:32:55:6b:
6c:12:77:02:73:51:d0:f6:c5:d4:a6:47:67:16:af:
4d:ba:ca:f7:e8:6d:6c:d9:eb:dd:ca:92:c5:f7:48:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8D:BE:5E:A8:2F:B1:60:9B:AC:11:49:C2:27:A2:43:CD:83:2D:76
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:60:55:73:18:02:b3:93:49:f4:de:08:2b:70:2b:e6:c1:8f:
30:de:15:c9:46:d6:f5:dd:ae:a0:4a:ac:aa:3f:2a:f6:40:61:
98:9d:c9:72:c7:75:b3:a0:41:9c:0d:82:e7:de:36:e5:47:3a:
64:35:e8:f4:e4:48:8f:b0:b7:ad:6c:3a:34:66:89:86:91:81:
92:ce:da:21:4c:9a:9e:52:fb:01:4d:e7:2e:73:64:bb:1e:1a:
dd:08:f4:8f:f1:d4:4d:0e:d9:77:36:e9:14:26:cc:00:df:75:
17:5f:fa:d9:87:67:2c:a7:ec:f1:9f:91:9c:07:db:33:f5:56:
d0:e7:a3:f6:67:61:d4:f1:26:cb:d0:97:96:b4:75:80:20:0a:
a1:b9:2d:e7:2d:d0:37:be:af:6a:f0:62:2d:84:a0:ce:33:8d:
26:5a:0b:59:04:5d:f9:50:9a:0c:06:e9:21:63:fa:0b:4c:00:
be:85:74:63:b1:6e:16:b5:c5:b4:c1:ee:6a:0a:ca:87:57:5a:
7b:87:50:fe:c7:72:b8:d9:06:c0:d4:46:91:1b:2d:57:89:b9:
33:96:a2:81:25:cb:36:0e:f2:6d:04:6b:7d:4f:e1:fd:0a:4f:
b2:be:e5:56:2c:0d:95:e8:bd:25:ae:f0:7b:11:b0:84:f5:e1:
3b:32:f9:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9VrpXKsoR2bhiSC7+vpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYjQ1NjVhMzJkYjNjOWM4YjhiMGY3YjRjMTFiZDExNTRl
MjBkZTkwHhcNMjUwODIzMDcwMTUzWhcNMjUwODI0MDcwMTUzWjAzMTEwLwYDVQQD
EygwZjhkYmU1ZWE4MmZiMTYwOWJhYzExNDljMjI3YTI0M2NkODMyZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHXmQN00YdlEdJqWKjrRvDh6HHFN
WBYO4Rz7bt1daBp5q55Q7uQPzgrW0P6HcwoQY7i/xMewi/qx2CG1YPh3dFyyYXM1
wde/IfBWIpe01VOEq8Em+zfGw38AKYa7ecNDIreMUIZg3+96p4JjgSJeP6mBFk6r
uJOUfGVd37vOnBL5YlGeix7LtgHBc2g49Z7l9uXtcmDSPmbTpsWKDSse6shiZ6bx
t+mbqIjyvsPlWMPMkc708iSOBBR7nHS2vQEl3HUYAy7up+Os9yaWUAVU+XG6DuGn
YQotT4VZZbcyVWtsEncCc1HQ9sXUpkdnFq9Nusr36G1s2evdypLF90iV0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+Nvl6oL7Fgm6wRScInokPNgy12MB8GA1UdIwQY
MBaAFH60Vloy2zyci4sPe0wRvRFU4g3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgt
MGU3OTQ5OTM1ZDgxLzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgtMGU3OTQ5OTM1ZDgx
LzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2BVcxgC
s5NJ9N4IK3Ar5sGPMN4VyUbW9d2uoEqsqj8q9kBhmJ3Jcsd1s6BBnA2C59425Uc6
ZDXo9ORIj7C3rWw6NGaJhpGBks7aIUyanlL7AU3nLnNkux4a3Qj0j/HUTQ7Zdzbp
FCbMAN91F1/62YdnLKfs8Z+RnAfbM/VW0Oej9mdh1PEmy9CXlrR1gCAKobkt5y3Q
N76vavBiLYSgzjONJloLWQRd+VCaDAbpIWP6C0wAvoV0Y7FuFrXFtMHuagrKh1da
e4dQ/sdyuNkGwNRGkRstV4m5M5aigSXLNg7ybQRrfU/h/QpPsr7lViwNlei9Ja7w
exGwhPXhOzL5Zw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:35 2025 by rpki-client