Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File: FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier: ZuxIpb5L3cwslhcMtZXeEKkQ76P+dOonQAu9lC48F4A=
Subject key identifier: AA:20:57:68:0D:E6:39:66:16:FF:C0:03:3E:CA:67:9C:C6:45:8C:8C
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial: 01993680B0C5AA08F15589E4CD5E0425500C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 02:00:27 +0000
Manifest this update: Thu 11 Sep 2025 02:00:27 +0000
Manifest next update: Fri 12 Sep 2025 02:00:27 +0000
Files and hashes: 1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: FY08HaqNN2EFXy/f8WQ6eREABGZ8edPp7/3KfH+/Lqs=)
2: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:b0:c5:aa:08:f1:55:89:e4:cd:5e:04:25:50:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Validity
Not Before: Sep 11 02:00:27 2025 GMT
Not After : Sep 12 02:00:27 2025 GMT
Subject: CN=aa2057680de6396616ffc0033eca679cc6458c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:1a:b1:ba:ef:e3:b1:09:fb:26:28:2d:3a:
c6:64:13:6f:35:b6:81:e2:52:4b:36:d2:66:90:e1:
13:b1:ef:9f:c9:9e:a9:b6:e3:e2:83:b3:85:63:96:
69:a7:69:5e:85:6d:1b:be:c8:df:35:4a:21:0d:84:
61:cb:bf:f3:da:45:09:67:73:3e:10:b8:6f:dc:e0:
a5:4b:4b:cc:e1:a1:23:da:43:94:98:8a:0e:db:91:
42:12:c5:64:1c:1e:a0:4f:b9:99:80:6f:9d:36:93:
e8:ae:3a:92:bb:f9:4b:ce:6c:5a:ba:cf:2e:b3:85:
74:63:24:a3:2f:84:f2:6a:e5:ca:11:fa:58:bf:aa:
3c:d5:3e:4a:d0:b6:6e:45:fd:30:ea:e9:b8:49:81:
9f:0f:3a:18:8f:51:72:21:25:37:c6:f6:44:13:5b:
d0:52:84:2c:67:73:8c:51:3c:df:df:fb:0f:7c:c7:
c2:a0:2d:70:10:2c:bd:3d:a8:3d:ff:70:8b:68:69:
2d:42:c7:66:f3:77:c1:de:e0:b0:4f:b2:d7:cd:26:
51:2b:52:a6:df:eb:4e:37:fe:5b:d7:a6:fc:a6:c7:
a6:d8:76:e5:b9:60:6c:3b:ce:ab:5b:4f:7f:a1:4c:
09:7e:a6:e7:74:c7:a6:d4:60:b1:06:22:a6:dc:73:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:20:57:68:0D:E6:39:66:16:FF:C0:03:3E:CA:67:9C:C6:45:8C:8C
X509v3 Authority Key Identifier:
keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:38:50:fe:2f:3b:87:54:fd:10:0b:65:b5:5a:e4:16:65:1a:
9c:44:fb:53:a9:81:1a:7b:61:3d:da:7d:6d:d4:a5:7e:5a:ce:
8a:78:f9:b7:b0:1f:36:39:ad:9e:c9:c6:b5:10:52:28:4e:e3:
91:fb:3e:a6:67:cf:d3:ef:2d:6f:6f:76:0a:d3:1d:02:ef:cf:
a7:73:7d:98:59:37:fa:85:85:73:bc:89:b3:1c:7d:e5:36:16:
ac:9a:f9:a4:4e:95:3f:32:73:cc:f7:20:c8:b9:af:c2:7d:be:
dc:db:51:3d:2d:7d:4f:5f:d7:5c:5c:cc:1f:32:e1:ad:69:e3:
b4:97:9e:ef:2e:f2:de:40:82:fd:62:9a:38:7b:83:8f:fe:b3:
21:e5:44:6a:2b:1a:20:15:d9:ee:d9:f1:b8:bb:4e:35:6e:6f:
eb:16:20:a4:ef:c6:4a:7e:d1:c0:c2:a3:25:40:80:a6:9f:2f:
2c:25:ab:45:36:5b:d1:06:06:2c:b2:48:c9:31:37:e5:ad:b9:
45:c1:3d:db:4d:b9:0e:47:3b:e3:0b:cd:ba:37:08:03:e5:31:
59:98:80:3f:a3:34:30:3a:ca:33:87:66:da:d4:44:c3:80:ea:
c1:2d:5f:dd:58:26:4b:11:2e:37:9b:e1:1d:af:b0:18:fe:54:
ab:cf:1d:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2gLDFqgjxVYnkzV4EJVAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MDRlMThlODYxNjcwNWVjMGYyOTBlNTdjYTgyOWE4MmY1
Zjk2YzIwHhcNMjUwOTExMDIwMDI3WhcNMjUwOTEyMDIwMDI3WjAzMTEwLwYDVQQD
EyhhYTIwNTc2ODBkZTYzOTY2MTZmZmMwMDMzZWNhNjc5Y2M2NDU4YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iwasbrv47EJ+yYoLTrGZBNvNbaB
4lJLNtJmkOETse+fyZ6ptuPig7OFY5Zpp2lehW0bvsjfNUohDYRhy7/z2kUJZ3M+
ELhv3OClS0vM4aEj2kOUmIoO25FCEsVkHB6gT7mZgG+dNpPorjqSu/lLzmxaus8u
s4V0YySjL4TyauXKEfpYv6o81T5K0LZuRf0w6um4SYGfDzoYj1FyISU3xvZEE1vQ
UoQsZ3OMUTzf3/sPfMfCoC1wECy9Pag9/3CLaGktQsdm83fB3uCwT7LXzSZRK1Km
3+tON/5b16b8psem2HbluWBsO86rW09/oUwJfqbndMem1GCxBiKm3HNT6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKogV2gN5jlmFv/AAz7KZ5zGRYyMMB8GA1UdIwQY
MBaAFBQE4Y6GFnBewPKQ5XyoKagvX5bCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEt
ZTM2ZThkMjkzYWUwLzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEtZTM2ZThkMjkzYWUw
LzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWThQ/i87
h1T9EAtltVrkFmUanET7U6mBGnthPdp9bdSlflrOinj5t7AfNjmtnsnGtRBSKE7j
kfs+pmfP0+8tb292CtMdAu/Pp3N9mFk3+oWFc7yJsxx95TYWrJr5pE6VPzJzzPcg
yLmvwn2+3NtRPS19T1/XXFzMHzLhrWnjtJee7y7y3kCC/WKaOHuDj/6zIeVEaisa
IBXZ7tnxuLtONW5v6xYgpO/GSn7RwMKjJUCApp8vLCWrRTZb0QYGLLJIyTE35a25
RcE92025Dkc74wvNujcIA+UxWZiAP6M0MDrKM4dm2tREw4DqwS1f3VgmSxEuN5vh
Ha+wGP5Uq88d/Q==
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:43:52 2025 by rpki-client