Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: mAdCqwG/7frBMvocCQ/upagedlI2tUo+TBoHS4s1c4g=
Subject key identifier: 1D:28:F1:6B:6C:9A:02:8E:19:C8:A8:AD:2F:9B:43:0B:03:B8:C5:69
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 0198D4A786A829F2013F10D5CF10C8BF7EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 0589
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: yDvQZa0tX37D0ho8NBRkhzOop09Dbw/UjwwQvcfF8yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:86:a8:29:f2:01:3f:10:d5:cf:10:c8:bf:7e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=1d28f16b6c9a028e19c8a8ad2f9b430b03b8c569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:7b:16:87:b0:72:91:71:14:03:22:ab:68:
b6:48:9f:ea:33:87:9d:28:ae:6f:2a:93:85:76:c0:
7c:c0:28:60:30:fb:4e:88:39:ea:78:4d:d7:84:80:
cf:79:4a:ff:21:51:3b:9f:00:59:3b:15:90:72:8e:
07:51:e8:df:da:ce:50:7e:e3:7a:83:02:ee:fb:bb:
b2:fc:45:b5:8b:eb:08:12:ef:b4:59:cb:0e:08:d1:
64:a2:9e:dd:1d:fe:88:95:ba:cd:51:0e:cc:85:69:
ff:99:e3:d7:a0:44:b0:97:eb:2c:60:b4:9b:8f:44:
91:cf:57:d9:9d:47:77:66:82:15:f9:49:19:d6:c0:
d4:34:e5:27:4d:fc:57:07:7f:e8:e3:9a:f5:99:66:
78:71:62:1c:b0:b4:1a:82:7e:91:f8:c9:05:53:bc:
fa:b6:f1:29:a5:1e:6e:e1:a0:e6:ec:63:eb:2d:64:
8a:30:be:03:41:dc:4a:ea:25:08:59:27:89:81:f6:
b6:7e:32:69:97:6d:18:3f:71:91:c0:85:ec:f8:89:
5e:c7:2f:fb:f4:f6:87:b8:57:37:7c:33:db:ab:62:
8d:ba:22:c3:f6:a8:ad:b8:6f:31:08:af:01:4a:a1:
d5:28:9b:c6:9d:c3:ee:5d:45:f7:25:e8:af:fd:5b:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:28:F1:6B:6C:9A:02:8E:19:C8:A8:AD:2F:9B:43:0B:03:B8:C5:69
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:92:94:7f:c0:7a:87:c6:e4:96:d5:c1:fd:df:6a:40:84:e9:
a3:63:e9:7c:9d:0e:9a:06:66:fc:45:89:79:8c:1c:a1:7f:b6:
66:0b:86:15:ba:01:e9:4f:a1:56:b4:e5:9f:be:84:7f:f4:bd:
a5:10:6b:b4:f4:b4:e0:d7:3a:7a:e7:a6:45:8c:f2:4e:ef:fc:
33:f2:70:5a:17:fd:8b:b9:05:b8:03:83:82:dd:fb:d3:30:7b:
f4:f0:5e:55:2b:cb:3d:74:dc:9d:e8:78:95:b2:99:4e:24:f0:
fa:0c:b0:9e:32:4f:e8:e0:b0:1d:ac:72:33:48:30:b2:12:e8:
6f:a1:9d:1f:4c:eb:8e:0f:5f:1a:fd:fb:06:5c:ea:21:b9:da:
56:f0:0c:33:74:6f:c8:89:1f:56:ec:e1:0e:00:a6:90:9a:74:
37:20:77:01:49:be:ab:bf:72:9b:93:d3:f5:95:c7:2b:a7:db:
1e:a2:ee:17:13:1d:85:cd:8e:ef:d3:0e:4d:64:23:54:9a:a2:
fa:03:3d:a0:0a:91:5d:43:a9:a5:45:f5:46:f9:aa:81:c6:3c:
fc:18:77:a9:9d:63:51:f4:52:ff:eb:c9:d8:34:71:f7:b7:e5:
58:51:74:ca:5f:7b:04:da:4e:47:41:df:54:01:e5:f3:de:0c:
e8:6f:f3:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp4aoKfIBPxDVzxDIv37FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5
YmE5ZjEwHhcNMjUwODIzMDIwMDA1WhcNMjUwODI0MDIwMDA1WjAzMTEwLwYDVQQD
EygxZDI4ZjE2YjZjOWEwMjhlMTljOGE4YWQyZjliNDMwYjAzYjhjNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiF7FoewcpFxFAMiq2i2SJ/qM4ed
KK5vKpOFdsB8wChgMPtOiDnqeE3XhIDPeUr/IVE7nwBZOxWQco4HUejf2s5QfuN6
gwLu+7uy/EW1i+sIEu+0WcsOCNFkop7dHf6IlbrNUQ7MhWn/mePXoESwl+ssYLSb
j0SRz1fZnUd3ZoIV+UkZ1sDUNOUnTfxXB3/o45r1mWZ4cWIcsLQagn6R+MkFU7z6
tvEppR5u4aDm7GPrLWSKML4DQdxK6iUIWSeJgfa2fjJpl20YP3GRwIXs+Ilexy/7
9PaHuFc3fDPbq2KNuiLD9qituG8xCK8BSqHVKJvGncPuXUX3Jeiv/Vt+cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0o8WtsmgKOGciorS+bQwsDuMVpMB8GA1UdIwQY
MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt
NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy
LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpKUf8B6
h8bkltXB/d9qQITpo2PpfJ0OmgZm/EWJeYwcoX+2ZguGFboB6U+hVrTln76Ef/S9
pRBrtPS04Nc6euemRYzyTu/8M/JwWhf9i7kFuAODgt370zB79PBeVSvLPXTcneh4
lbKZTiTw+gywnjJP6OCwHaxyM0gwshLob6GdH0zrjg9fGv37BlzqIbnaVvAMM3Rv
yIkfVuzhDgCmkJp0NyB3AUm+q79ym5PT9ZXHK6fbHqLuFxMdhc2O79MOTWQjVJqi
+gM9oAqRXUOppUX1RvmqgcY8/Bh3qZ1jUfRS/+vJ2DRx97flWFF0yl97BNpOR0Hf
VAHl894M6G/zzg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:39 2025 by rpki-client