Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: ktJkHTNhzOly9LevLcVBZqhplRXCZogt7hdFxq8qwC8=
Subject key identifier: 20:91:C3:4D:DB:09:F8:97:A4:D6:69:A1:0B:BC:C0:EE:83:9B:00:8B
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 01992367C1311BAE9076DBAD2D4F1EEE5A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 0376
Signing time: Sun 07 Sep 2025 09:00:26 +0000
Manifest this update: Sun 07 Sep 2025 09:00:26 +0000
Manifest next update: Mon 08 Sep 2025 09:00:26 +0000
Files and hashes: 1: DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa (hash: 8XNyxo7dqU3caZB7WQMnNM1LcvoL0TWuICCANY2KZkk=)
2: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: vn16Djf6tjYZR3PCYr3OgC7j+u/WnMrkkwLefYkjOUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c1:31:1b:ae:90:76:db:ad:2d:4f:1e:ee:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Sep 7 09:00:26 2025 GMT
Not After : Sep 8 09:00:26 2025 GMT
Subject: CN=2091c34ddb09f897a4d669a10bbcc0ee839b008b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:95:76:83:d5:43:98:93:4c:6c:26:0f:12:
e1:4a:63:44:76:c9:f9:16:92:78:89:d8:47:53:05:
df:af:64:7b:73:34:66:b9:d5:83:c8:1f:7f:8f:ea:
21:16:8a:0c:80:29:c8:9a:ee:cf:67:bc:18:73:d8:
65:e4:cf:7e:ff:c2:3a:40:fe:6f:93:a6:34:a7:c3:
6f:1f:d7:40:e2:56:fa:1e:27:03:1e:af:76:b4:7b:
96:cd:dc:fe:29:f7:df:ad:a8:73:ab:1b:9d:77:07:
65:be:44:7d:8d:87:13:8d:31:6d:38:dc:6c:a6:a9:
63:ff:d0:8c:65:e2:9c:7d:e1:f4:40:e8:37:30:d6:
aa:c4:18:7c:24:ec:95:b3:60:84:75:ec:60:29:2a:
b9:bc:ac:2a:3a:76:8e:2e:06:dd:f5:fb:b3:fe:c0:
4f:9d:78:9c:cd:bc:89:b6:5c:be:72:6e:b1:2b:98:
8d:dd:5f:1e:0d:21:31:a1:9e:bb:a5:cd:33:7f:ea:
e7:bf:7a:a5:a1:1f:9b:5e:f5:a9:7e:79:43:ca:36:
56:b0:01:92:de:e8:7e:67:92:f2:7d:64:8f:36:22:
40:a3:34:dc:ba:6d:f1:8b:65:56:9c:4d:dd:d1:39:
2e:be:ba:2d:59:6d:76:68:a8:7b:89:99:ac:f5:b0:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:C3:4D:DB:09:F8:97:A4:D6:69:A1:0B:BC:C0:EE:83:9B:00:8B
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ec:b3:76:3b:6f:a4:54:80:68:86:26:80:2a:fb:5e:c5:77:
f2:17:7a:a4:50:fd:e9:88:7e:f0:57:27:6f:5c:a1:7c:43:9d:
5d:11:42:85:1c:b2:de:b3:fd:e9:91:19:ac:3a:12:ac:07:b0:
0e:2c:87:5a:58:b2:8f:58:27:5e:33:a3:86:10:52:d5:aa:6d:
82:40:fd:a0:e9:a4:3e:f8:16:93:2e:c7:2a:a2:f8:fe:fd:3e:
85:02:18:98:c5:ac:b5:3c:37:e5:eb:b1:4b:1c:58:12:d9:27:
a0:16:c4:61:f4:43:ce:a1:cf:64:41:db:bd:a9:f9:49:4b:41:
f7:8a:9d:fb:14:bd:eb:b2:aa:5f:4d:4e:79:0e:d6:0d:85:77:
7e:24:b8:e3:e0:6d:ff:73:70:1a:54:54:24:64:12:1c:41:b1:
58:55:12:3a:ac:98:1f:c8:27:c2:ca:6a:3c:5d:04:26:5f:2f:
59:d8:d5:2f:aa:98:9b:5a:80:83:f5:34:a7:5a:cd:91:08:fd:
50:31:2d:63:5c:34:ea:58:0f:8b:4b:64:fd:0d:9f:3b:be:03:
5c:e3:a4:4d:8b:a5:a7:08:8b:99:6f:0d:a4:03:46:9b:61:8f:
51:ed:a5:9b:97:f8:b6:90:a6:95:76:84:e0:8d:86:71:2e:61:
1e:89:5e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjZ8ExG66QdtutLU8e7lprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YjE5OGI2ZWUzYWY2OGRlYmMyMzQ3YTVlOThmNzExZmIz
MGYyOGIwHhcNMjUwOTA3MDkwMDI2WhcNMjUwOTA4MDkwMDI2WjAzMTEwLwYDVQQD
EygyMDkxYzM0ZGRiMDlmODk3YTRkNjY5YTEwYmJjYzBlZTgzOWIwMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XSVdoPVQ5iTTGwmDxLhSmNEdsn5
FpJ4idhHUwXfr2R7czRmudWDyB9/j+ohFooMgCnImu7PZ7wYc9hl5M9+/8I6QP5v
k6Y0p8NvH9dA4lb6HicDHq92tHuWzdz+KfffrahzqxuddwdlvkR9jYcTjTFtONxs
pqlj/9CMZeKcfeH0QOg3MNaqxBh8JOyVs2CEdexgKSq5vKwqOnaOLgbd9fuz/sBP
nXiczbyJtly+cm6xK5iN3V8eDSExoZ67pc0zf+rnv3qloR+bXvWpfnlDyjZWsAGS
3uh+Z5LyfWSPNiJAozTcum3xi2VWnE3d0TkuvrotWW12aKh7iZms9bBj/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCRw03bCfiXpNZpoQu8wO6DmwCLMB8GA1UdIwQY
MBaAFBaxmLbuOvaN68I0el6Y9xH7MPKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDct
NDQ4MmFkYTIzMmUzLzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDctNDQ4MmFkYTIzMmUz
LzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeyzdjtv
pFSAaIYmgCr7XsV38hd6pFD96Yh+8Fcnb1yhfEOdXRFChRyy3rP96ZEZrDoSrAew
DiyHWliyj1gnXjOjhhBS1aptgkD9oOmkPvgWky7HKqL4/v0+hQIYmMWstTw35eux
SxxYEtknoBbEYfRDzqHPZEHbvan5SUtB94qd+xS967KqX01OeQ7WDYV3fiS44+Bt
/3NwGlRUJGQSHEGxWFUSOqyYH8gnwspqPF0EJl8vWdjVL6qYm1qAg/U0p1rNkQj9
UDEtY1w06lgPi0tk/Q2fO74DXOOkTYulpwiLmW8NpANGm2GPUe2lm5f4tpCmlXaE
4I2GcS5hHolezw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:38 2025 by rpki-client