Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: oexKOhuccRCUEw2ofu/nIy8NmsZMx0LV2Juznx0xhls=
Subject key identifier: DF:0E:B5:02:23:FA:BA:BA:FB:E5:68:F7:75:30:77:C3:51:CF:72:E8
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 019930479FD98C4A02CF84CA738FC02B30CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 1680
Signing time: Tue 09 Sep 2025 21:00:24 +0000
Manifest this update: Tue 09 Sep 2025 21:00:24 +0000
Manifest next update: Wed 10 Sep 2025 21:00:24 +0000
Files and hashes: 1: JN5O0QCPrYg2gGsd5bY4WvuMm88.roa (hash: Fx9qqqMuryeKb6+Rb+Dr8zIFkW7rIV44uKPsq4V2Qsk=)
2: bAMnl2_6RRTmNV4zQKgmKBPIhlw.roa (hash: V9YqmjnltEXUALOTq/OVrSw9uYwMaY1gDtJwBPznHa8=)
3: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: ymii6U7EVhrefc8Q00bmuFSSfVnvN/EkPPyxkY5xLCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:9f:d9:8c:4a:02:cf:84:ca:73:8f:c0:2b:30:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Sep 9 21:00:24 2025 GMT
Not After : Sep 10 21:00:24 2025 GMT
Subject: CN=df0eb50223fababafbe568f7753077c351cf72e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:7c:b9:d5:50:f1:83:96:8a:29:06:61:7b:
c9:34:27:82:51:38:7c:fe:4a:39:ab:ee:2d:f5:26:
68:c3:7b:63:7d:14:9e:4a:17:44:fe:82:42:26:4c:
51:52:08:11:72:36:6f:71:02:2d:c3:52:28:5f:13:
6f:48:46:6a:93:43:33:df:48:aa:4d:b9:78:bb:c5:
93:4e:6d:8f:18:8f:c3:15:bb:b3:3e:bd:84:41:5f:
74:80:6f:12:92:49:72:3e:4a:9f:32:3b:b6:10:f5:
f8:c9:02:76:6f:09:7f:fb:16:6d:0c:6e:90:c4:89:
c5:11:66:54:30:1b:91:f4:25:78:63:f9:cb:2b:41:
ce:56:66:0d:6f:09:d3:32:ff:fd:2b:84:e8:b8:0b:
ca:bc:83:3a:d2:03:3e:ab:9e:98:a7:bc:38:7d:56:
f5:52:a3:24:42:f9:8a:dd:5a:4f:bc:cb:f4:20:e7:
a2:81:8d:73:56:9c:9a:2e:92:ae:7b:90:b0:55:d6:
e3:53:9a:91:93:93:b5:e0:60:71:e8:01:b6:ef:27:
f9:58:60:20:65:47:8e:ed:ad:6f:c6:42:8f:63:11:
69:62:8a:08:39:c6:a6:90:67:3e:84:54:11:f0:05:
92:f7:67:64:65:30:00:78:a6:08:e6:eb:53:c9:de:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0E:B5:02:23:FA:BA:BA:FB:E5:68:F7:75:30:77:C3:51:CF:72:E8
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c8:e7:a6:5b:5b:47:28:56:52:ff:ae:60:78:4c:ca:5f:3f:
ed:76:bc:93:f2:28:cf:a1:0f:05:15:60:6e:e5:c7:25:40:0d:
33:54:3d:c0:c7:e0:1e:92:9a:1d:2e:27:ec:e8:5f:06:34:f0:
76:95:fc:db:90:75:e7:cb:78:1c:72:f8:50:e3:d7:2c:24:9c:
d6:9f:03:ed:55:24:3e:52:72:c7:34:4e:d5:4d:50:dd:2c:c8:
50:e6:1f:25:4a:28:a7:fc:bf:c5:e1:84:07:54:f1:c4:29:17:
cc:25:b5:93:44:5d:9d:68:48:1c:03:51:d7:91:fa:1a:e6:7d:
d1:bc:85:72:3d:32:56:dd:f7:d1:26:b7:d2:d4:f3:1e:f3:20:
ad:dc:1f:e0:35:07:a6:b9:96:ef:53:21:ad:ae:f7:dc:a4:74:
b3:fd:ad:08:95:e1:a6:c7:bc:79:5f:aa:ca:0e:6c:a4:6d:2d:
07:0b:db:7d:45:1a:b3:88:c5:8e:ed:d9:5b:d1:78:8c:8b:6e:
64:1f:64:ef:2e:8e:b2:28:10:4a:a9:05:78:b6:2a:0f:37:2f:
ac:4a:76:67:a3:5c:67:65:13:6f:6b:63:89:bb:e3:3a:c0:27:
95:e1:56:34:7f:c8:df:3c:f7:71:64:2e:c2:1c:96:42:c9:c0:
d3:58:cb:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwR5/ZjEoCz4TKc4/AKzDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYmI4ODhmMmI5OWRlOTk3MmUyNDQ2ZWJhMDU4YWI4ZTJj
ZDdiM2YwHhcNMjUwOTA5MjEwMDI0WhcNMjUwOTEwMjEwMDI0WjAzMTEwLwYDVQQD
EyhkZjBlYjUwMjIzZmFiYWJhZmJlNTY4Zjc3NTMwNzdjMzUxY2Y3MmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/R8udVQ8YOWiikGYXvJNCeCUTh8
/ko5q+4t9SZow3tjfRSeShdE/oJCJkxRUggRcjZvcQItw1IoXxNvSEZqk0Mz30iq
Tbl4u8WTTm2PGI/DFbuzPr2EQV90gG8SkklyPkqfMju2EPX4yQJ2bwl/+xZtDG6Q
xInFEWZUMBuR9CV4Y/nLK0HOVmYNbwnTMv/9K4TouAvKvIM60gM+q56Yp7w4fVb1
UqMkQvmK3VpPvMv0IOeigY1zVpyaLpKue5CwVdbjU5qRk5O14GBx6AG27yf5WGAg
ZUeO7a1vxkKPYxFpYooIOcamkGc+hFQR8AWS92dkZTAAeKYI5utTyd4DjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8OtQIj+rq6++Vo93Uwd8NRz3LoMB8GA1UdIwQY
MBaAFH67iI8rmd6ZcuJEbroFirjizXs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJ1SWp5dVozcGx5NGtSdXVnV0t1T0xOZXo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMWIzNGEtZjM4OC00ZGRkLTkyY2Qt
ZTFjMGE0ZDA0OTE3LzEvZnJ1SWp5dVozcGx5NGtSdXVnV0t1T0xOZXo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lMWIzNGEtZjM4OC00ZGRkLTkyY2QtZTFjMGE0ZDA0OTE3
LzEvZnJ1SWp5dVozcGx5NGtSdXVnV0t1T0xOZXo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8jnpltb
RyhWUv+uYHhMyl8/7Xa8k/Ioz6EPBRVgbuXHJUANM1Q9wMfgHpKaHS4n7OhfBjTw
dpX825B158t4HHL4UOPXLCSc1p8D7VUkPlJyxzRO1U1Q3SzIUOYfJUoop/y/xeGE
B1TxxCkXzCW1k0RdnWhIHANR15H6GuZ90byFcj0yVt330Sa30tTzHvMgrdwf4DUH
prmW71Mhra733KR0s/2tCJXhpse8eV+qyg5spG0tBwvbfUUas4jFju3ZW9F4jItu
ZB9k7y6OsigQSqkFeLYqDzcvrEp2Z6NcZ2UTb2tjibvjOsAnleFWNH/I3zz3cWQu
whyWQsnA01jLyw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:41:57 2025 by rpki-client