Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: VDpT+COPfBBG6ZGIEMhEy30V/P85p7bP7mggNbytvOo=
Subject key identifier: 79:3C:2B:31:05:67:33:22:04:8F:B9:F3:B7:F4:BC:0F:B5:DA:5E:0D
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 0199342516681F51E8C21C1628475CFFC3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 020B
Signing time: Wed 10 Sep 2025 15:01:09 +0000
Manifest this update: Wed 10 Sep 2025 15:01:09 +0000
Manifest next update: Thu 11 Sep 2025 15:01:09 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: 8qd45jh/pcdU1pPWQ5WDIKKwXWYeQCNUQK9NkSQcUPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:25:16:68:1f:51:e8:c2:1c:16:28:47:5c:ff:c3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Sep 10 15:01:09 2025 GMT
Not After : Sep 11 15:01:09 2025 GMT
Subject: CN=793c2b3105673322048fb9f3b7f4bc0fb5da5e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:67:66:f2:45:30:90:0b:5e:2d:9f:91:bb:
93:8f:d4:5f:03:79:c9:9a:ab:b8:7e:e4:39:da:da:
a0:6a:94:4d:8e:1f:a7:fd:76:23:4d:d1:4c:08:28:
cf:ca:73:3b:46:00:04:98:b6:d4:e1:a7:03:12:72:
55:c9:e7:af:b6:fc:18:fb:7f:22:0c:be:3b:2c:5b:
a3:23:1c:eb:3a:fb:7c:94:60:d8:5d:0b:7f:58:cb:
73:8a:98:3a:9d:11:9f:9a:04:44:ea:d5:e5:40:d2:
ba:c1:0f:96:33:cd:57:7d:2e:af:12:cb:b8:76:1a:
d4:7e:57:e9:0e:ca:a5:91:21:eb:63:fc:f8:cc:ce:
0a:29:12:6e:e5:e1:1b:c0:9a:6d:98:ee:3f:18:a0:
6f:69:93:30:64:71:e5:b5:ea:2f:dd:2d:8f:15:86:
10:23:f7:27:74:b7:f1:29:a9:63:aa:e2:47:ff:9c:
33:d0:83:89:41:02:1e:9a:e7:19:91:b0:5f:18:30:
af:e4:93:00:f5:2a:80:5e:6c:fe:78:17:e1:cc:b2:
fa:6c:a3:3e:e5:43:da:15:bd:84:37:98:ee:a1:a6:
f9:fb:ea:5f:a2:8f:99:dc:ca:2d:6c:7b:05:e8:e9:
b3:10:e1:4e:15:20:1f:a5:a7:c0:f3:71:fb:83:8b:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:2B:31:05:67:33:22:04:8F:B9:F3:B7:F4:BC:0F:B5:DA:5E:0D
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:55:c5:91:b8:bc:54:bb:f1:38:15:0f:e2:e4:16:ae:ab:1a:
5c:5b:04:db:b0:19:a2:d7:63:68:6f:92:fd:eb:2d:b6:4f:73:
1a:51:31:63:c3:f5:dc:4f:a9:bb:7b:8a:ae:cc:4e:e5:70:bc:
71:9e:6f:0f:e9:05:97:f2:81:f5:bf:f2:08:f0:fd:82:f5:00:
7e:de:de:38:97:50:65:28:94:59:79:2b:fa:dd:b3:5d:e0:23:
eb:cd:a6:eb:bd:7c:1f:d3:2c:cb:ad:91:66:58:03:5d:03:64:
a5:00:d8:0c:57:20:3e:2f:5c:57:e7:58:cf:eb:cc:2f:c4:7f:
c3:97:a5:66:a3:3f:f7:e7:bb:d4:55:15:d2:b5:4a:46:be:cc:
75:c3:f6:8f:ff:68:32:4c:86:ca:26:0e:36:65:49:44:35:63:
d1:8f:9b:3a:69:3a:c5:ad:e0:de:6d:12:56:ab:88:2c:76:52:
bf:36:ec:46:38:8a:69:22:26:8d:2b:d9:bf:7f:1d:e5:e5:8e:
be:6e:f7:80:0b:5a:c7:64:c1:c9:33:a2:b4:64:14:34:a4:8b:
82:15:af:bb:b3:57:1d:fb:89:05:42:e1:24:2f:f6:f5:61:92:
4f:46:38:9b:1f:27:02:f9:39:41:8d:c9:f8:39:45:87:d1:71:
fd:e6:fd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JRZoH1HowhwWKEdc/8O9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNmUyZTY5NjZlMDZhYjI1Y2EwZTFkYTY2ZTFlM2Q2NDI0
OGIzYTEwHhcNMjUwOTEwMTUwMTA5WhcNMjUwOTExMTUwMTA5WjAzMTEwLwYDVQQD
Eyg3OTNjMmIzMTA1NjczMzIyMDQ4ZmI5ZjNiN2Y0YmMwZmI1ZGE1ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlChnZvJFMJALXi2fkbuTj9RfA3nJ
mqu4fuQ52tqgapRNjh+n/XYjTdFMCCjPynM7RgAEmLbU4acDEnJVyeevtvwY+38i
DL47LFujIxzrOvt8lGDYXQt/WMtzipg6nRGfmgRE6tXlQNK6wQ+WM81XfS6vEsu4
dhrUflfpDsqlkSHrY/z4zM4KKRJu5eEbwJptmO4/GKBvaZMwZHHlteov3S2PFYYQ
I/cndLfxKaljquJH/5wz0IOJQQIemucZkbBfGDCv5JMA9SqAXmz+eBfhzLL6bKM+
5UPaFb2EN5juoab5++pfoo+Z3MotbHsF6OmzEOFOFSAfpafA83H7g4uGaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk8KzEFZzMiBI+587f0vA+12l4NMB8GA1UdIwQY
MBaAFH5uLmlm4GqyXKDh2mbh49ZCSLOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEt
ODdkOTdlMmFhZGM0LzEvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEtODdkOTdlMmFhZGM0
LzEvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFXFkbi8
VLvxOBUP4uQWrqsaXFsE27AZotdjaG+S/esttk9zGlExY8P13E+pu3uKrsxO5XC8
cZ5vD+kFl/KB9b/yCPD9gvUAft7eOJdQZSiUWXkr+t2zXeAj682m6718H9Msy62R
ZlgDXQNkpQDYDFcgPi9cV+dYz+vML8R/w5elZqM/9+e71FUV0rVKRr7MdcP2j/9o
MkyGyiYONmVJRDVj0Y+bOmk6xa3g3m0SVquILHZSvzbsRjiKaSImjSvZv38d5eWO
vm73gAtax2TByTOitGQUNKSLghWvu7NXHfuJBULhJC/29WGST0Y4mx8nAvk5QY3J
+DlFh9Fx/eb9SA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:22:27 2025 by rpki-client