Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier: fufdTyt2f8hdS3BjtLcHVfQEJGqX8NNLYSzOqSK3z3s=
Subject key identifier: 7A:9D:FF:EC:BE:B3:49:0E:50:4C:73:0D:51:86:0C:A8:C0:E5:86:5F
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 0198D6297EB57806B064A076EE9894DBAADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 09:01:40 +0000
Manifest this update: Sat 23 Aug 2025 09:01:40 +0000
Manifest next update: Sun 24 Aug 2025 09:01:40 +0000
Files and hashes: 1: BP7hIYhiDfgoLYC3EQ_BWDeI0kM.roa (hash: ojCr5JBVKUCnA0I9p1E7esZg/ahEto7MwTtjkK6NUEk=)
2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: g/yXP/MmGkI4NLAMelkX0JBZRcsZd0lCy7p3hoP106A=)
3: jZCTuDYNLnCGsAPDwWIixMbLxV4.roa (hash: V9apneKgCADjYV+Y9jMV35PL/ZewdT33ExfgNVHPedw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7e:b5:78:06:b0:64:a0:76:ee:98:94:db:aa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Aug 23 09:01:40 2025 GMT
Not After : Aug 24 09:01:40 2025 GMT
Subject: CN=7a9dffecbeb3490e504c730d51860ca8c0e5865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:dc:ad:f7:f4:e2:5d:60:a0:f3:48:a0:0c:
11:0e:a6:37:55:26:aa:2e:4f:20:15:82:48:99:75:
7f:75:18:46:80:2f:59:d8:ce:7c:1b:bc:25:bc:88:
25:78:1f:a8:81:21:3f:40:b7:99:4e:6f:2b:12:7f:
de:79:9e:85:f2:ca:af:47:2f:37:68:2f:73:80:73:
48:48:a1:25:24:00:b1:fe:47:fc:77:40:28:78:a1:
b3:ac:49:04:72:a8:ac:29:02:c8:f8:25:f8:5a:51:
41:74:8c:b8:11:40:c0:68:8d:2a:4d:55:c8:67:7e:
a6:51:58:01:ec:e1:f1:32:a2:86:30:8a:b2:2a:ee:
df:b8:49:0f:e1:64:88:53:78:54:e5:ad:71:c9:6d:
46:6d:e0:b1:a2:c1:c1:55:f9:8a:80:d9:be:67:36:
e2:c2:d7:42:e5:13:12:7b:ca:e8:33:5b:0f:a6:ce:
cb:d6:ab:72:24:89:29:ff:bb:bc:6e:24:e5:79:d3:
a9:36:d4:03:34:86:70:d1:cd:75:dd:ad:0f:07:84:
5a:f5:36:56:f4:37:43:e0:d9:9b:cb:b4:85:50:7a:
e0:f7:35:97:17:88:75:72:1c:1e:8d:b2:39:d3:b5:
d1:81:f6:fa:5c:17:c7:7d:9b:1b:e0:f3:02:d3:03:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9D:FF:EC:BE:B3:49:0E:50:4C:73:0D:51:86:0C:A8:C0:E5:86:5F
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9d:7d:9d:2e:36:43:28:7a:4f:f2:cc:f7:9f:6e:ff:91:46:
0e:4b:9e:1a:cb:bc:7d:50:a1:6a:c3:38:3c:4b:6b:b3:94:02:
2e:c7:9f:1d:d1:f0:ed:e9:22:b6:44:b4:4f:15:2c:95:f7:b7:
ba:3c:85:70:75:d5:4d:bc:6b:11:4f:ad:fd:bc:1a:60:62:a2:
a7:3d:5a:b2:6d:8c:4e:bc:82:9e:d1:08:d8:8d:23:11:1b:a6:
b0:a3:d6:2f:60:b2:db:69:81:47:c8:8a:d0:fc:4e:79:ca:ce:
fd:73:a5:28:5a:60:05:0f:0d:dd:e6:62:ec:62:7f:12:19:70:
4b:8b:d7:01:59:2e:85:84:68:b2:41:6a:e9:67:4e:e2:50:80:
13:05:fd:99:3a:7e:4b:6f:25:3d:92:ef:26:bd:79:bc:ab:26:
92:70:9b:dd:72:e0:f9:ed:f1:02:6b:4c:ca:09:ae:e0:7f:fe:
2f:26:84:0c:b0:fb:59:f3:96:d1:ff:db:87:2e:8b:40:8f:73:
ed:f3:3c:19:5e:94:b5:90:34:71:43:3b:2e:40:c9:80:d0:ea:
34:8f:4d:bd:58:db:6f:e9:f9:c4:79:af:fa:95:a4:42:30:65:
6e:01:32:8e:23:bf:25:29:ba:b9:d9:55:45:69:db:d6:1e:31:
6c:d1:1f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKX61eAawZKB27piU26raMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz
M2EyYmQwHhcNMjUwODIzMDkwMTQwWhcNMjUwODI0MDkwMTQwWjAzMTEwLwYDVQQD
Eyg3YTlkZmZlY2JlYjM0OTBlNTA0YzczMGQ1MTg2MGNhOGMwZTU4NjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht/crff04l1goPNIoAwRDqY3VSaq
Lk8gFYJImXV/dRhGgC9Z2M58G7wlvIgleB+ogSE/QLeZTm8rEn/eeZ6F8sqvRy83
aC9zgHNISKElJACx/kf8d0AoeKGzrEkEcqisKQLI+CX4WlFBdIy4EUDAaI0qTVXI
Z36mUVgB7OHxMqKGMIqyKu7fuEkP4WSIU3hU5a1xyW1GbeCxosHBVfmKgNm+Zzbi
wtdC5RMSe8roM1sPps7L1qtyJIkp/7u8biTledOpNtQDNIZw0c113a0PB4Ra9TZW
9DdD4Nmby7SFUHrg9zWXF4h1chwejbI507XRgfb6XBfHfZsb4PMC0wMjBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqd/+y+s0kOUExzDVGGDKjA5YZfMB8GA1UdIwQY
MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt
Mjg1ZWM4ZmU4ZWM2LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2
LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp519nS42
Qyh6T/LM959u/5FGDkueGsu8fVChasM4PEtrs5QCLsefHdHw7ekitkS0TxUslfe3
ujyFcHXVTbxrEU+t/bwaYGKipz1asm2MTryCntEI2I0jERumsKPWL2Cy22mBR8iK
0PxOecrO/XOlKFpgBQ8N3eZi7GJ/EhlwS4vXAVkuhYRoskFq6WdO4lCAEwX9mTp+
S28lPZLvJr15vKsmknCb3XLg+e3xAmtMygmu4H/+LyaEDLD7WfOW0f/bhy6LQI9z
7fM8GV6UtZA0cUM7LkDJgNDqNI9NvVjbb+n5xHmv+pWkQjBlbgEyjiO/JSm6udlV
RWnb1h4xbNEfIQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:22 2025 by rpki-client