Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
File: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json)
Hash identifier: JjAVXTKr5je96b38u4PVSGRa2+QjClhqwoYfsYd4ry8=
Subject key identifier: FF:91:74:D8:75:66:71:EF:F8:DA:89:C9:07:32:FE:8F:0A:B0:0A:44
Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
Certificate issuer: /CN=171bfdd42fa9484f56e189ba683d5188c524083b
Certificate serial: 0199228CAE828715AC6C07300FEBD69700EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
Manifest number: D8
Signing time: Sun 07 Sep 2025 05:01:08 +0000
Manifest this update: Sun 07 Sep 2025 05:01:08 +0000
Manifest next update: Mon 08 Sep 2025 05:01:08 +0000
Files and hashes: 1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: Xo5yJAR5TVm2hN178WUDJawoFHu4PMu+IevAwZ/IjAc=)
2: TRbKL4kGxrCFAvUXltN0ocBpT58.roa (hash: oZP4etk1n3bpFlXee7D7+3mgIQiNQb5oae2tqJgBRbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ae:82:87:15:ac:6c:07:30:0f:eb:d6:97:00:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b
Validity
Not Before: Sep 7 05:01:08 2025 GMT
Not After : Sep 8 05:01:08 2025 GMT
Subject: CN=ff9174d8756671eff8da89c90732fe8f0ab00a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:2c:cb:6b:95:b2:8a:79:95:28:c0:0b:5a:
0f:b4:bd:39:f4:bd:6a:57:63:0d:b8:98:ff:f0:d8:
6b:ab:b5:dc:7d:63:73:27:90:d8:83:54:21:6c:1d:
94:45:ff:c0:fa:65:be:f5:7d:86:2a:b9:c5:93:c4:
85:1e:15:de:a8:01:fe:92:87:33:42:90:69:ae:cf:
73:2e:7d:6e:c9:ec:c7:7f:6c:fe:55:41:97:e3:5a:
2a:c3:af:5c:36:a3:cf:b3:6f:c9:f9:d6:0b:36:a3:
34:03:2f:6d:9c:b7:22:bf:9b:d8:b3:7b:88:7a:db:
bf:ef:3b:0c:ee:cc:42:35:4a:c2:32:af:ae:e4:63:
ca:a6:39:0a:70:b2:28:11:a2:5c:16:28:51:23:ea:
28:73:a0:c3:06:cd:7e:6a:29:a5:24:00:2f:1a:b6:
f2:bf:2b:1a:df:6f:8f:3e:e7:b7:7d:32:1e:87:42:
30:23:a4:7d:ec:a1:ab:f2:cd:d0:05:9d:99:ac:10:
18:6e:ff:a4:b0:cc:47:39:86:a2:c6:e1:67:27:48:
af:91:e7:ac:57:c3:b2:91:e9:cb:eb:4b:b0:5a:cf:
26:01:34:54:c1:38:22:45:b4:d2:0c:21:95:10:1a:
b0:cd:57:61:92:78:aa:6e:52:ba:b1:d4:4b:ed:e9:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:74:D8:75:66:71:EF:F8:DA:89:C9:07:32:FE:8F:0A:B0:0A:44
X509v3 Authority Key Identifier:
keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0c:6f:f6:ed:a3:23:75:f0:19:9d:9b:92:8f:f5:d2:5e:15:
d5:af:f9:3e:b0:99:a7:eb:da:4b:14:33:4b:b0:d7:7d:83:2c:
1b:ba:7f:6a:66:a8:d3:2a:25:fd:fd:dd:04:db:71:cb:dc:86:
af:36:49:dd:83:ae:f3:fa:b4:43:4a:85:14:0e:f4:2f:fd:1e:
17:32:76:1d:6b:c4:4d:88:0d:61:f1:15:4c:bb:4f:c5:3c:69:
3d:43:38:44:de:db:f2:2f:48:41:64:a7:3f:b3:79:26:ce:58:
e0:df:96:81:63:10:4a:ea:a2:7d:67:45:b4:ba:1d:8f:46:b1:
68:4e:02:ba:f2:85:26:8f:80:3c:53:fe:87:83:ca:b7:00:08:
18:df:11:d1:f4:46:f6:62:fe:20:b2:18:53:1e:36:2e:40:33:
68:4d:f8:cc:35:3e:e8:86:89:72:36:b8:07:a7:82:79:1e:52:
63:b7:f0:fd:43:b5:00:0c:a7:a4:d4:63:11:1b:51:01:43:06:
f0:87:2a:0e:be:51:94:e4:90:f0:a8:10:c5:48:02:0c:c0:a7:
2b:95:93:f8:19:4b:fa:1e:23:6a:71:e2:bc:3c:40:05:c7:b8:
01:27:d3:50:d6:da:db:0f:a2:2c:8e:35:74:fc:70:e3:9c:7b:
16:ff:35:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijK6ChxWsbAcwD+vWlwDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MWJmZGQ0MmZhOTQ4NGY1NmUxODliYTY4M2Q1MTg4YzUy
NDA4M2IwHhcNMjUwOTA3MDUwMTA4WhcNMjUwOTA4MDUwMTA4WjAzMTEwLwYDVQQD
EyhmZjkxNzRkODc1NjY3MWVmZjhkYTg5YzkwNzMyZmU4ZjBhYjAwYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jEsy2uVsop5lSjAC1oPtL059L1q
V2MNuJj/8Nhrq7XcfWNzJ5DYg1QhbB2URf/A+mW+9X2GKrnFk8SFHhXeqAH+kocz
QpBprs9zLn1uyezHf2z+VUGX41oqw69cNqPPs2/J+dYLNqM0Ay9tnLciv5vYs3uI
etu/7zsM7sxCNUrCMq+u5GPKpjkKcLIoEaJcFihRI+ooc6DDBs1+aimlJAAvGrby
vysa32+PPue3fTIeh0IwI6R97KGr8s3QBZ2ZrBAYbv+ksMxHOYaixuFnJ0ivkees
V8OykenL60uwWs8mATRUwTgiRbTSDCGVEBqwzVdhkniqblK6sdRL7enazQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+RdNh1ZnHv+NqJyQcy/o8KsApEMB8GA1UdIwQY
MBaAFBcb/dQvqUhPVuGJumg9UYjFJAg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2Yt
YjRkOTY0Nzc2Yzg1LzEvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2YtYjRkOTY0Nzc2Yzg1
LzEvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAxv9u2j
I3XwGZ2bko/10l4V1a/5PrCZp+vaSxQzS7DXfYMsG7p/amao0yol/f3dBNtxy9yG
rzZJ3YOu8/q0Q0qFFA70L/0eFzJ2HWvETYgNYfEVTLtPxTxpPUM4RN7b8i9IQWSn
P7N5Js5Y4N+WgWMQSuqifWdFtLodj0axaE4CuvKFJo+APFP+h4PKtwAIGN8R0fRG
9mL+ILIYUx42LkAzaE34zDU+6IaJcja4B6eCeR5SY7fw/UO1AAynpNRjERtRAUMG
8IcqDr5RlOSQ8KgQxUgCDMCnK5WT+BlL+h4janHivDxABce4ASfTUNba2w+iLI41
dPxw45x7Fv817A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:51 2025 by rpki-client