Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
File: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft (raw, json)
Hash identifier: zaE/szVQdrGIxpv4DT6NoTYjgzxuI3NGg/c6jIYFgOk=
Subject key identifier: 18:35:39:07:08:DE:8D:20:1E:FB:C4:61:EC:BE:DE:AE:91:77:17:B9
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial: 0198481BDC160E14A4A96C2C1723C241F459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
Manifest number: 072F
Signing time: Sat 26 Jul 2025 19:00:42 +0000
Manifest this update: Sat 26 Jul 2025 19:00:42 +0000
Manifest next update: Sun 27 Jul 2025 19:00:42 +0000
Files and hashes: 1: 1fzx311S5jcwOa4F8HMO1WGGMRs.roa (hash: Nf7uyvKCbxyvq+ckjdshr/ayknm9CnDDcdCg9xx36FM=)
2: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl (hash: k6Yrqk72IhRyFFzTY4wYPVM5uula9xz4E7ENqWHAQ0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:dc:16:0e:14:a4:a9:6c:2c:17:23:c2:41:f4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Validity
Not Before: Jul 26 19:00:42 2025 GMT
Not After : Jul 27 19:00:42 2025 GMT
Subject: CN=1835390708de8d201efbc461ecbedeae917717b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:08:9b:77:5f:e4:1e:3c:88:32:8d:b8:89:
75:66:7a:d8:a8:c2:16:0e:07:cf:35:98:2e:cd:40:
a7:75:f4:10:fd:02:2d:1d:98:d5:2d:34:f9:85:52:
94:11:6f:11:37:7e:91:80:8a:cf:16:dc:1c:67:ea:
74:d6:4a:5e:2e:fd:29:a7:43:42:89:4c:9e:da:b0:
f0:f2:01:2f:5a:ee:22:be:3e:39:58:be:a0:c2:e9:
b7:c4:ef:19:02:1d:d5:de:77:4a:e5:f0:79:2f:bf:
43:2a:61:df:dd:e9:2b:5c:3d:b8:5f:a4:5c:6f:45:
b4:66:31:04:6b:a5:f5:c1:f1:f6:97:49:98:aa:e9:
b8:6b:3d:1f:e6:5f:a8:ea:a9:52:e7:02:4f:8a:e2:
90:66:92:77:60:8d:2a:62:fd:28:b4:d6:45:2e:e3:
91:e2:c9:92:16:2d:7e:70:04:10:4b:1f:24:8e:04:
2e:41:76:8a:e3:90:49:d2:58:67:93:88:c0:83:ce:
d2:e4:ba:4b:00:f0:83:a5:17:a6:97:68:1d:12:9c:
75:8f:7f:b2:69:90:5e:81:f6:5c:7d:51:bb:7b:95:
52:c1:4b:40:7d:06:26:51:78:19:33:30:2d:59:e8:
9f:f8:47:81:da:a4:3e:2b:81:59:66:93:6d:bc:b2:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:39:07:08:DE:8D:20:1E:FB:C4:61:EC:BE:DE:AE:91:77:17:B9
X509v3 Authority Key Identifier:
keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:20:87:dc:df:f9:71:cb:73:49:05:e0:f0:79:83:89:f4:c0:
de:fa:7f:e9:08:99:09:47:34:f4:6e:ae:e3:10:4c:30:2e:8b:
50:5a:b1:a5:b5:98:47:37:a0:88:9e:0b:4c:ff:bf:63:4d:36:
16:3c:1b:27:5a:fd:2a:1d:bb:7a:18:9c:df:ca:57:a8:57:23:
af:aa:65:00:0d:22:29:74:ae:a6:6f:d8:41:c3:60:52:47:e7:
78:8f:dd:d6:1b:e3:ba:90:92:be:00:14:13:7e:2d:9b:e6:1c:
ee:80:e0:cc:c9:30:2e:f9:08:56:96:84:be:48:12:49:56:58:
5f:ed:dc:1a:29:80:e1:ff:4a:79:93:9a:fd:83:0c:c8:7c:7d:
fc:ff:d4:d4:67:97:21:23:0e:75:40:8b:c1:b6:11:5b:d8:3c:
dd:6f:d2:6e:9f:26:e5:00:00:3e:2f:a5:68:ab:0e:34:d0:02:
19:3d:5d:45:92:a0:bf:81:d0:f8:72:64:03:a9:42:7a:bf:37:
11:5a:92:24:4e:3d:9d:03:05:f1:21:63:5d:4f:93:74:41:57:
74:3f:ff:b9:4c:16:38:fe:12:4a:00:11:60:ef:a8:93:53:0a:
1d:fc:7a:0d:e9:ca:ff:ae:13:49:59:8f:7e:26:c5:30:85:c3:
35:ee:9e:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG9wWDhSkqWwsFyPCQfRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MTg2MTlhZTNjOWI1OWQ4NjhiY2RmY2M3ZTczZDgxM2Y4
NTA0ZTUwHhcNMjUwNzI2MTkwMDQyWhcNMjUwNzI3MTkwMDQyWjAzMTEwLwYDVQQD
EygxODM1MzkwNzA4ZGU4ZDIwMWVmYmM0NjFlY2JlZGVhZTkxNzcxN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYoIm3df5B48iDKNuIl1ZnrYqMIW
DgfPNZguzUCndfQQ/QItHZjVLTT5hVKUEW8RN36RgIrPFtwcZ+p01kpeLv0pp0NC
iUye2rDw8gEvWu4ivj45WL6gwum3xO8ZAh3V3ndK5fB5L79DKmHf3ekrXD24X6Rc
b0W0ZjEEa6X1wfH2l0mYqum4az0f5l+o6qlS5wJPiuKQZpJ3YI0qYv0otNZFLuOR
4smSFi1+cAQQSx8kjgQuQXaK45BJ0lhnk4jAg87S5LpLAPCDpReml2gdEpx1j3+y
aZBegfZcfVG7e5VSwUtAfQYmUXgZMzAtWeif+EeB2qQ+K4FZZpNtvLIBCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg1OQcI3o0gHvvEYey+3q6Rdxe5MB8GA1UdIwQY
MBaAFPYYYZrjybWdhovN/MfnPYE/hQTlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQt
ZDk3N2IzODlkNWFiLzEvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQtZDk3N2IzODlkNWFi
LzEvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAviCH3N/5
cctzSQXg8HmDifTA3vp/6QiZCUc09G6u4xBMMC6LUFqxpbWYRzegiJ4LTP+/Y002
FjwbJ1r9Kh27ehic38pXqFcjr6plAA0iKXSupm/YQcNgUkfneI/d1hvjupCSvgAU
E34tm+Yc7oDgzMkwLvkIVpaEvkgSSVZYX+3cGimA4f9KeZOa/YMMyHx9/P/U1GeX
ISMOdUCLwbYRW9g83W/Sbp8m5QAAPi+laKsONNACGT1dRZKgv4HQ+HJkA6lCer83
EVqSJE49nQMF8SFjXU+TdEFXdD//uUwWOP4SSgARYO+ok1MKHfx6DenK/64TSVmP
fibFMIXDNe6eog==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:29:14 2025 by rpki-client