Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: RfE6c4unyuw4rgdXijTgKLxHJCnz+ZnlXrN9JhHvQtw=
Subject key identifier: F0:3E:E4:ED:ED:16:E0:B7:39:D4:60:F1:5E:DB:34:75:D9:DE:52:4A
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 0198D66004B2BE8D1B75FBEBD7E565B61EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 113F
Signing time: Sat 23 Aug 2025 10:01:13 +0000
Manifest this update: Sat 23 Aug 2025 10:01:13 +0000
Manifest next update: Sun 24 Aug 2025 10:01:13 +0000
Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: UeDXYLhSFj7QTDASkgtDm1KWjw2CEPY7IRGWDOmLg3U=)
2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:04:b2:be:8d:1b:75:fb:eb:d7:e5:65:b6:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Aug 23 10:01:13 2025 GMT
Not After : Aug 24 10:01:13 2025 GMT
Subject: CN=f03ee4eded16e0b739d460f15edb3475d9de524a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:76:5d:92:65:96:f7:35:e8:69:ce:55:21:
c3:66:63:4e:f6:20:3d:5a:2f:ad:66:66:a4:be:ed:
e3:8a:2b:89:ff:84:74:31:60:d7:f0:e7:55:80:11:
e1:ff:b9:46:97:eb:aa:2c:19:5a:03:4c:d4:f3:20:
81:f5:dc:7e:7a:b0:48:be:f9:aa:45:2b:11:59:34:
9f:66:40:5a:c1:8a:c3:37:00:29:1c:58:99:63:fa:
6d:e4:7c:17:3b:fd:07:be:04:74:fe:2f:e2:1f:8c:
7d:ef:f7:15:6e:6a:d3:11:68:9d:60:07:6f:15:e4:
1d:f8:48:0c:01:a9:46:37:66:e7:90:e8:d8:19:3e:
b9:84:20:44:3d:02:81:2c:fe:c8:fe:6a:97:33:68:
a8:9f:ae:55:37:ae:66:2c:1b:df:c8:d6:4f:9b:af:
0d:94:f3:99:b2:9b:c7:54:c5:04:28:4c:5b:59:c8:
f9:5f:6a:b9:53:24:3d:06:61:03:d3:df:53:4b:c1:
65:9f:ae:54:79:9f:8d:95:21:8a:63:0a:09:a5:2a:
5f:71:1f:d0:b1:e2:9b:2f:80:ba:c0:08:7d:78:53:
fe:48:7d:5d:70:52:ff:4b:1b:da:03:63:22:ee:82:
54:a3:d2:1b:48:a6:1b:44:58:61:6e:9f:f9:86:19:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3E:E4:ED:ED:16:E0:B7:39:D4:60:F1:5E:DB:34:75:D9:DE:52:4A
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:91:91:e5:c0:a5:59:00:10:03:51:bd:43:c6:5a:39:bc:67:
3b:92:18:0f:25:4f:63:1a:1d:24:49:d2:46:e8:13:92:d2:76:
43:b0:41:b0:f9:c6:7c:6d:95:7c:fc:e0:ca:7d:13:c5:17:75:
69:a4:75:90:ba:92:46:03:69:21:d1:44:76:98:9e:28:a3:eb:
c0:b1:88:06:ab:6e:33:dd:80:74:93:1d:ce:ef:94:38:aa:3d:
d3:b0:98:a2:2d:85:ea:f7:db:82:f5:d7:bd:e3:63:cf:1e:1d:
5a:ab:65:44:64:52:7a:25:27:4f:0f:0e:ce:de:ba:90:8a:dd:
d4:40:5b:ff:e0:6f:c7:a3:84:6f:4b:0d:ff:73:84:69:e8:e8:
f9:af:c0:e3:d6:90:1b:c6:6c:e2:cd:6a:79:d0:34:b5:f3:97:
30:b0:ca:6a:9b:a2:a0:bd:7d:6c:08:cd:be:55:c0:e1:74:74:
b5:17:c4:21:99:32:dd:ab:3c:3c:31:3e:3b:9b:36:a9:4e:88:
f0:6e:f7:41:49:71:7c:04:98:f1:ce:14:78:27:44:2a:da:e1:
3c:22:4c:99:39:0c:f7:91:15:98:4b:57:a4:c9:b1:8e:b7:f4:
7a:48:2e:91:a1:c9:90:53:0e:c8:73:12:8a:2f:94:5d:ae:c7:
58:1f:49:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYASyvo0bdfvr1+Vlth6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk
ZjkxNjkwHhcNMjUwODIzMTAwMTEzWhcNMjUwODI0MTAwMTEzWjAzMTEwLwYDVQQD
EyhmMDNlZTRlZGVkMTZlMGI3MzlkNDYwZjE1ZWRiMzQ3NWQ5ZGU1MjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSl2XZJllvc16GnOVSHDZmNO9iA9
Wi+tZmakvu3jiiuJ/4R0MWDX8OdVgBHh/7lGl+uqLBlaA0zU8yCB9dx+erBIvvmq
RSsRWTSfZkBawYrDNwApHFiZY/pt5HwXO/0HvgR0/i/iH4x97/cVbmrTEWidYAdv
FeQd+EgMAalGN2bnkOjYGT65hCBEPQKBLP7I/mqXM2ion65VN65mLBvfyNZPm68N
lPOZspvHVMUEKExbWcj5X2q5UyQ9BmED099TS8Fln65UeZ+NlSGKYwoJpSpfcR/Q
seKbL4C6wAh9eFP+SH1dcFL/SxvaA2Mi7oJUo9IbSKYbRFhhbp/5hhkgMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA+5O3tFuC3OdRg8V7bNHXZ3lJKMB8GA1UdIwQY
MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt
ODNjMjE1N2JkYWMwLzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw
LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJGR5cCl
WQAQA1G9Q8ZaObxnO5IYDyVPYxodJEnSRugTktJ2Q7BBsPnGfG2VfPzgyn0TxRd1
aaR1kLqSRgNpIdFEdpieKKPrwLGIBqtuM92AdJMdzu+UOKo907CYoi2F6vfbgvXX
veNjzx4dWqtlRGRSeiUnTw8Ozt66kIrd1EBb/+Bvx6OEb0sN/3OEaejo+a/A49aQ
G8Zs4s1qedA0tfOXMLDKapuioL19bAjNvlXA4XR0tRfEIZky3as8PDE+O5s2qU6I
8G73QUlxfASY8c4UeCdEKtrhPCJMmTkM95EVmEtXpMmxjrf0ekgukaHJkFMOyHMS
ii+UXa7HWB9J6g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:15 2025 by rpki-client