Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: IR54cUUFKJ8FALMh5NnExE9xfZ9YrJ4EmQ62VR//f44=
Subject key identifier: 0B:F7:BC:C2:23:50:69:E8:CD:63:DE:7D:76:64:D1:BB:6D:19:38:5B
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 0198D54E82E22BA12F67549263CA8367D832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:28 +0000
Manifest this update: Sat 23 Aug 2025 05:02:28 +0000
Manifest next update: Sun 24 Aug 2025 05:02:28 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: QfCesqq9HmSO55kMQbNIZWJRmgAgzaqHU3X4TOKAJMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:82:e2:2b:a1:2f:67:54:92:63:ca:83:67:d8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Aug 23 05:02:28 2025 GMT
Not After : Aug 24 05:02:28 2025 GMT
Subject: CN=0bf7bcc2235069e8cd63de7d7664d1bb6d19385b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:4e:5f:d9:43:df:f0:42:38:65:f2:e0:b2:
41:22:7c:31:de:bb:64:75:97:9f:59:38:84:35:91:
7e:a1:82:8d:b4:b4:5f:ae:3b:ed:67:87:09:a6:65:
ae:fa:3a:42:09:72:7a:a1:7c:ae:31:78:5e:ee:da:
ba:b5:49:74:8e:fa:a0:be:75:ea:d2:e5:d3:5c:94:
76:de:fc:8a:7d:d6:79:29:f8:ea:f3:cb:ea:9a:67:
d0:ed:27:b6:da:a9:20:77:a6:07:86:27:80:a0:b3:
f3:f1:a6:73:65:ec:03:5c:ec:b7:e7:75:de:52:82:
5e:3c:ab:7e:0b:62:29:5a:73:18:ce:9d:5e:01:88:
e6:58:4d:41:ef:40:f1:bf:a3:3b:d2:af:b6:32:8b:
af:31:57:f1:63:45:c5:44:8d:75:74:c0:89:29:a3:
4f:d1:a0:f8:d1:b9:f6:8f:c7:95:39:44:31:9b:0f:
68:a1:be:ba:f4:24:c7:a0:83:8b:89:09:d8:7b:5d:
42:7b:6d:ab:4d:83:0f:d2:73:41:e0:72:8a:3c:60:
76:2c:89:49:fb:65:51:9d:c2:84:cd:0c:c4:8a:92:
6f:dc:81:7a:4c:3a:5d:14:39:92:52:0b:b3:9b:8b:
c1:2c:7a:4b:2b:8b:70:ed:3f:96:16:e0:00:69:96:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:BC:C2:23:50:69:E8:CD:63:DE:7D:76:64:D1:BB:6D:19:38:5B
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ff:e3:a6:9a:08:af:c6:68:3b:cf:17:69:1a:73:ca:f6:53:
1e:0a:2d:64:e4:cb:71:87:cd:ff:0e:4a:e7:8a:31:7e:34:78:
80:73:04:c9:46:9b:30:60:48:32:9c:fb:b5:c7:2c:21:ac:d5:
3a:44:28:75:3b:01:b8:1d:ba:16:87:45:1b:0f:fe:26:bc:75:
bd:f0:fa:af:fd:10:82:57:ff:60:0b:c0:24:af:9c:5a:1c:68:
9e:2a:cb:98:52:46:85:06:6c:4b:f4:49:3a:3c:0f:24:36:9e:
79:33:ef:47:12:88:db:7c:47:9d:bc:6a:f1:ba:1e:ae:6f:69:
94:4f:8f:0d:7e:21:dd:53:ee:33:fd:64:35:a4:73:95:c3:63:
11:d0:a2:d0:83:56:35:27:b5:4d:77:a2:1b:3a:b4:b4:0e:3b:
5b:45:a7:e3:f7:01:07:72:a0:99:f5:e0:bc:25:55:64:75:2d:
1d:09:25:5f:7b:63:e2:e6:77:ab:cb:4d:1e:81:b7:c6:61:72:
18:4c:f3:50:69:f0:62:2d:7c:36:7a:f5:2f:2a:e7:1d:d9:30:
c8:d5:f6:23:94:eb:c2:e6:9b:db:4e:84:52:4a:0e:9f:35:29:
31:f5:0d:f4:3e:82:49:37:d1:74:df:7f:56:32:d4:9d:c9:b0:
82:aa:ef:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVToLiK6EvZ1SSY8qDZ9gyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTA0Y2M2N2VmOTZkOTAyMmYzZDBiZmM1MWVhZGI0YTRi
NjNlZTYwHhcNMjUwODIzMDUwMjI4WhcNMjUwODI0MDUwMjI4WjAzMTEwLwYDVQQD
EygwYmY3YmNjMjIzNTA2OWU4Y2Q2M2RlN2Q3NjY0ZDFiYjZkMTkzODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM1OX9lD3/BCOGXy4LJBInwx3rtk
dZefWTiENZF+oYKNtLRfrjvtZ4cJpmWu+jpCCXJ6oXyuMXhe7tq6tUl0jvqgvnXq
0uXTXJR23vyKfdZ5Kfjq88vqmmfQ7Se22qkgd6YHhieAoLPz8aZzZewDXOy353Xe
UoJePKt+C2IpWnMYzp1eAYjmWE1B70Dxv6M70q+2MouvMVfxY0XFRI11dMCJKaNP
0aD40bn2j8eVOUQxmw9oob669CTHoIOLiQnYe11Ce22rTYMP0nNB4HKKPGB2LIlJ
+2VRncKEzQzEipJv3IF6TDpdFDmSUguzm4vBLHpLK4tw7T+WFuAAaZa0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv3vMIjUGnozWPefXZk0bttGThbMB8GA1UdIwQY
MBaAFHygTMZ++W2QIvPQv8UerbSktj7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEt
YTU1NjhlMGZiYjZkLzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEtYTU1NjhlMGZiYjZk
LzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW//jppoI
r8ZoO88XaRpzyvZTHgotZOTLcYfN/w5K54oxfjR4gHMEyUabMGBIMpz7tccsIazV
OkQodTsBuB26FodFGw/+Jrx1vfD6r/0Qglf/YAvAJK+cWhxonirLmFJGhQZsS/RJ
OjwPJDaeeTPvRxKI23xHnbxq8boerm9plE+PDX4h3VPuM/1kNaRzlcNjEdCi0INW
NSe1TXeiGzq0tA47W0Wn4/cBB3KgmfXgvCVVZHUtHQklX3tj4uZ3q8tNHoG3xmFy
GEzzUGnwYi18Nnr1LyrnHdkwyNX2I5Trwuab206EUkoOnzUpMfUN9D6CSTfRdN9/
VjLUncmwgqrvug==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:29 2025 by rpki-client