Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: SUAGhtz3GuhbUj9lcqaQKWakdz9/zTHG9dn9281fft0=
Subject key identifier: 87:1C:4D:97:3F:69:95:06:3A:6C:71:3D:0D:6D:FA:FB:6F:20:80:E4
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 0198D47439A39A4B1DD00B2C6EF8FAF949D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 13CB
Signing time: Sat 23 Aug 2025 01:04:03 +0000
Manifest this update: Sat 23 Aug 2025 01:04:03 +0000
Manifest next update: Sun 24 Aug 2025 01:04:03 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: 1Vw7kKH8+LqCUd3dZT68YW8Ce2UNO0eQo5mg0qzKKyY=)
2: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (hash: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:39:a3:9a:4b:1d:d0:0b:2c:6e:f8:fa:f9:49:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Aug 23 01:04:03 2025 GMT
Not After : Aug 24 01:04:03 2025 GMT
Subject: CN=871c4d973f6995063a6c713d0d6dfafb6f2080e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:52:54:f9:e1:d9:0f:9f:38:f7:05:34:13:
b6:fc:5a:53:90:26:d0:c1:c9:9b:20:42:46:da:2e:
f6:c5:1c:eb:c0:bc:29:d4:13:24:e0:d0:93:8a:80:
1c:b1:e6:9b:41:ea:5f:b7:47:6a:cc:0e:85:73:7b:
10:8b:51:a8:a6:d6:97:71:51:41:c3:8d:b9:e5:8e:
36:74:5d:71:1a:58:37:d2:bf:d2:8e:1b:e1:6e:df:
3f:ff:6c:f0:3d:5f:b9:1b:82:cc:2c:e8:9d:f0:f2:
1d:7c:69:77:32:33:5b:f7:4c:46:8d:8a:80:e2:12:
f8:2d:cc:ea:b1:7f:94:f3:76:70:15:fe:5b:fe:4b:
96:9f:b0:0d:0d:a5:31:29:81:28:01:2a:04:cd:f2:
07:de:a1:6d:ae:e5:df:c0:b1:16:37:19:e0:a1:12:
e8:92:c2:b3:2a:3e:57:8a:e8:ab:89:5b:bc:bb:3a:
34:08:3f:cb:c5:7b:8e:85:bd:76:ce:0a:fe:fe:b2:
c1:67:f7:8e:01:83:4c:20:35:bc:80:69:00:65:52:
8b:64:30:dd:8a:8e:9e:ac:f7:4a:93:18:7f:ad:6c:
51:51:21:cd:d0:aa:2f:6b:3d:1f:a2:a8:62:0e:53:
10:ec:61:6a:4c:8e:69:55:c5:92:5f:5e:a4:b3:2f:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1C:4D:97:3F:69:95:06:3A:6C:71:3D:0D:6D:FA:FB:6F:20:80:E4
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:04:f3:90:80:69:87:0a:84:52:94:58:af:87:18:e4:ae:b3:
aa:b0:17:66:b7:b6:50:c3:5a:80:5e:aa:24:e4:de:79:4a:d3:
ae:e1:9c:40:cc:f1:b6:09:87:ce:e8:77:47:17:e6:86:b3:0b:
6b:fe:48:97:66:5c:a7:16:91:31:d2:e4:10:42:25:34:7d:98:
ab:95:91:12:67:4a:f1:c3:a2:c8:5e:e7:2e:5b:a7:f8:30:48:
ab:44:68:ad:e4:86:70:5e:cf:e0:11:4b:02:76:21:c0:86:fc:
6e:a1:a7:8b:e7:ee:2c:d8:2e:87:24:75:9a:f9:d9:ce:57:42:
a5:f5:1f:67:19:0e:a5:e2:38:a6:14:a2:b1:ae:2c:58:20:72:
f7:a7:7c:d6:00:60:25:56:3e:7e:bb:0b:62:1b:d0:01:4b:52:
95:0a:47:e0:d1:2d:5c:e0:77:28:81:0a:d0:83:73:14:07:98:
18:c5:d1:22:a4:c8:e8:24:9b:a6:6d:9b:ee:3c:c8:91:48:83:
81:38:60:51:94:43:ae:81:0a:f4:6e:97:7e:27:20:a2:6a:19:
fa:2b:75:ab:dc:96:4e:33:53:58:68:e8:e0:d2:5d:ba:ab:1d:
65:86:4f:ea:e3:7e:25:c0:2d:40:f5:d7:0c:d6:37:d1:48:ab:
82:d6:f7:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdDmjmksd0Assbvj6+UnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTBmYzE3MzgyZGQ2MDY2YTM4ZTQyM2JhZGIyZDhhMThk
MWMwNDUwHhcNMjUwODIzMDEwNDAzWhcNMjUwODI0MDEwNDAzWjAzMTEwLwYDVQQD
Eyg4NzFjNGQ5NzNmNjk5NTA2M2E2YzcxM2QwZDZkZmFmYjZmMjA4MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK9SVPnh2Q+fOPcFNBO2/FpTkCbQ
wcmbIEJG2i72xRzrwLwp1BMk4NCTioAcseabQepft0dqzA6Fc3sQi1GoptaXcVFB
w4255Y42dF1xGlg30r/Sjhvhbt8//2zwPV+5G4LMLOid8PIdfGl3MjNb90xGjYqA
4hL4LczqsX+U83ZwFf5b/kuWn7ANDaUxKYEoASoEzfIH3qFtruXfwLEWNxngoRLo
ksKzKj5XiuiriVu8uzo0CD/LxXuOhb12zgr+/rLBZ/eOAYNMIDW8gGkAZVKLZDDd
io6erPdKkxh/rWxRUSHN0Kovaz0foqhiDlMQ7GFqTI5pVcWSX16ksy/PZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIccTZc/aZUGOmxxPQ1t+vtvIIDkMB8GA1UdIwQY
MBaAFBSQ/Bc4LdYGajjkI7rbLYoY0cBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUt
NTU2Y2MyZTA3MWRjLzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUtNTU2Y2MyZTA3MWRj
LzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgTzkIBp
hwqEUpRYr4cY5K6zqrAXZre2UMNagF6qJOTeeUrTruGcQMzxtgmHzuh3RxfmhrML
a/5Il2ZcpxaRMdLkEEIlNH2Yq5WREmdK8cOiyF7nLlun+DBIq0RoreSGcF7P4BFL
AnYhwIb8bqGni+fuLNguhyR1mvnZzldCpfUfZxkOpeI4phSisa4sWCBy96d81gBg
JVY+frsLYhvQAUtSlQpH4NEtXOB3KIEK0INzFAeYGMXRIqTI6CSbpm2b7jzIkUiD
gThgUZRDroEK9G6XficgomoZ+it1q9yWTjNTWGjo4NJduqsdZYZP6uN+JcAtQPXX
DNY30Uirgtb3vg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:04 2025 by rpki-client