Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier: m29feKKu5VzArpMoGhSxuqLI8YNgN4cWog6ckMt3Zyk=
Subject key identifier: 96:04:65:A3:4E:63:A0:81:3E:30:D8:30:17:01:90:A3:FB:D3:42:BE
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 0198D54DC7EE218A02B4D1C85676F9FD9863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number: 141F
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (hash: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=)
2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: yX4T96MlUHgYXYZvwSiulTf7xCI6tvMesa4AxYFx2lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c7:ee:21:8a:02:b4:d1:c8:56:76:f9:fd:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=960465a34e63a0813e30d830170190a3fbd342be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:23:53:5f:49:a1:da:b7:24:d8:09:07:d6:
ba:7e:eb:d1:26:66:8d:f1:8b:c1:00:14:c9:c8:79:
f1:42:21:88:33:fb:fc:95:ae:44:7f:30:f8:89:f4:
c1:a4:39:3a:d2:fa:b1:34:70:19:d2:b6:5b:84:41:
ca:39:35:8c:12:f1:72:26:e0:cf:18:25:0d:f0:0d:
53:6f:74:42:96:95:d2:f7:f5:23:6f:4e:f7:ec:7a:
43:6e:4e:32:ae:56:45:ac:19:ac:18:f7:d5:57:b1:
d6:a1:b8:0b:18:88:cd:fb:3a:43:8c:4a:95:4e:ad:
01:af:37:49:a0:f2:89:3f:52:f6:d3:85:97:50:38:
4d:07:f4:b2:8e:a3:60:b7:b9:9c:7b:73:e2:fb:88:
1d:af:dd:c0:5c:31:83:c1:f2:ad:47:37:70:8e:6c:
59:f1:4c:29:54:ae:ea:82:55:f6:64:f2:81:24:68:
6d:cb:01:a1:ec:52:d9:12:99:17:87:5f:18:ef:e2:
33:81:3f:22:19:cd:a5:a7:9a:a7:2a:86:6f:fa:e9:
dd:4d:9c:99:6e:3d:5e:54:80:c7:50:85:de:52:db:
da:56:24:51:ed:4e:09:09:7f:e8:d3:b8:80:49:e1:
f8:94:9a:92:18:d0:dc:71:dc:6c:3c:87:d0:2e:31:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:04:65:A3:4E:63:A0:81:3E:30:D8:30:17:01:90:A3:FB:D3:42:BE
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:24:2d:1f:f4:21:25:c2:41:ca:de:3a:91:db:8c:d8:01:19:
6c:92:d7:aa:9a:b0:47:30:c5:7a:67:6b:fc:65:77:f1:b2:55:
7f:52:81:8a:16:72:5d:ba:6d:06:70:56:d7:3c:bd:3c:4e:8a:
4b:9c:92:cb:53:28:8e:23:6b:5e:b5:87:18:b7:f6:ca:ec:b1:
44:7b:b2:ee:c4:0b:9c:bd:36:01:ab:77:b1:94:be:ab:09:af:
25:cf:4a:48:d3:71:d5:36:c3:90:94:02:1f:50:cc:c6:2f:79:
6a:46:72:19:5e:1d:b2:54:e3:c4:f5:4d:52:57:64:7c:aa:5a:
6b:bc:27:a6:7f:6d:ef:e0:ed:c1:02:49:6f:e5:7c:67:3f:64:
a7:39:b1:d8:8c:e9:83:d5:b4:26:98:c7:0d:a4:7d:b5:25:b3:
c6:7a:53:c4:c8:51:ee:1b:30:fa:a2:08:8d:bb:87:7a:ef:90:
d9:cd:f0:d5:8d:98:a1:15:4b:16:86:50:65:8d:6c:8c:c8:69:
1f:e0:b6:ae:77:d0:35:5c:86:83:64:d0:de:de:31:bb:e7:79:
a8:08:ed:8a:eb:9a:49:29:e1:d8:a6:b5:3b:73:31:3f:29:84:
d9:e5:d0:63:1e:c7:f1:4b:05:94:2a:00:90:2c:da:0d:a6:e1:
c6:67:b5:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcfuIYoCtNHIVnb5/ZhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMWQwZTMyOThiZWQzYTdmMzlmYjNiMjQ0ZWQ5MThiZjZj
NGQ3YmYwHhcNMjUwODIzMDUwMTQxWhcNMjUwODI0MDUwMTQxWjAzMTEwLwYDVQQD
Eyg5NjA0NjVhMzRlNjNhMDgxM2UzMGQ4MzAxNzAxOTBhM2ZiZDM0MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPwjU19Jodq3JNgJB9a6fuvRJmaN
8YvBABTJyHnxQiGIM/v8la5EfzD4ifTBpDk60vqxNHAZ0rZbhEHKOTWMEvFyJuDP
GCUN8A1Tb3RClpXS9/Ujb0737HpDbk4yrlZFrBmsGPfVV7HWobgLGIjN+zpDjEqV
Tq0BrzdJoPKJP1L204WXUDhNB/SyjqNgt7mce3Pi+4gdr93AXDGDwfKtRzdwjmxZ
8UwpVK7qglX2ZPKBJGhtywGh7FLZEpkXh18Y7+IzgT8iGc2lp5qnKoZv+undTZyZ
bj1eVIDHUIXeUtvaViRR7U4JCX/o07iASeH4lJqSGNDccdxsPIfQLjEtUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYEZaNOY6CBPjDYMBcBkKP700K+MB8GA1UdIwQY
MBaAFH8dDjKYvtOn85+zskTtkYv2xNe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMt
MjFhZjNkZWU4ZWU5LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMtMjFhZjNkZWU4ZWU5
LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiQtH/Qh
JcJByt46kduM2AEZbJLXqpqwRzDFemdr/GV38bJVf1KBihZyXbptBnBW1zy9PE6K
S5ySy1MojiNrXrWHGLf2yuyxRHuy7sQLnL02Aat3sZS+qwmvJc9KSNNx1TbDkJQC
H1DMxi95akZyGV4dslTjxPVNUldkfKpaa7wnpn9t7+DtwQJJb+V8Zz9kpzmx2Izp
g9W0JpjHDaR9tSWzxnpTxMhR7hsw+qIIjbuHeu+Q2c3w1Y2YoRVLFoZQZY1sjMhp
H+C2rnfQNVyGg2TQ3t4xu+d5qAjtiuuaSSnh2Ka1O3MxPymE2eXQYx7H8UsFlCoA
kCzaDabhxme1Kw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:29 2025 by rpki-client