
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
File: fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json)
Hash identifier: Yq+p5PmBr0WF7hUF1dTVbIVnBs8LmXSsBrgo2br6axg=
Subject key identifier: 60:F3:BE:06:2B:45:0E:02:5D:F6:53:78:D9:62:32:94:18:9B:80:9E
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Certificate issuer: /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial: 0199240CD2C2A015DE338A884E5A399D2EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 12:00:43 +0000
Manifest this update: Sun 07 Sep 2025 12:00:43 +0000
Manifest next update: Mon 08 Sep 2025 12:00:43 +0000
Files and hashes: 1: 8vkkegr96IBMHB6BFhag_SmFnOI.roa (hash: h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=)
2: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: xQILx4cDxsVIX6FycSSvVf/AC+X8o8pPc9pyDPfAVoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:d2:c2:a0:15:de:33:8a:88:4e:5a:39:9d:2e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
Validity
Not Before: Sep 7 12:00:43 2025 GMT
Not After : Sep 8 12:00:43 2025 GMT
Subject: CN=60f3be062b450e025df65378d9623294189b809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:dc:06:b0:7e:e6:3a:3b:f9:f0:c0:2e:9f:
70:2e:99:83:15:b2:4f:bf:2f:a8:ae:c2:5b:dc:d8:
42:24:ef:29:43:8d:cd:54:75:2d:48:74:59:60:8b:
0f:f3:48:0d:67:e4:48:09:ac:02:a1:67:2b:03:59:
b1:2c:6e:9d:64:6e:15:af:64:76:52:34:69:fb:79:
99:58:46:a8:2c:85:b3:ea:bb:5c:e3:5c:c6:71:d0:
33:a3:4b:76:1e:40:06:e3:4d:c5:b3:27:56:98:96:
2b:fc:9f:68:33:3a:3e:67:de:cb:b5:6a:9d:46:b4:
ac:a6:4f:2e:da:54:20:c5:7d:02:6a:57:7b:c1:e2:
b2:b5:f9:bd:76:45:34:98:00:1d:a0:3c:64:dc:1a:
26:c5:ca:07:1e:47:84:cf:e0:37:42:fe:d3:81:d3:
ef:65:df:2e:88:74:21:f9:3b:44:21:1d:00:52:9b:
54:4a:a2:a5:9f:38:3b:87:e7:1e:51:5b:2c:38:a6:
0c:7e:f1:a1:59:6e:a5:bb:ef:07:06:33:97:90:b8:
ad:e6:b7:a2:fd:25:6b:fe:9a:c9:51:11:d8:d8:9a:
33:fe:91:f4:85:78:18:76:25:ac:69:ea:ca:3c:de:
5d:f8:b5:14:b8:1a:28:d2:95:72:08:cb:c9:52:92:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:BE:06:2B:45:0E:02:5D:F6:53:78:D9:62:32:94:18:9B:80:9E
X509v3 Authority Key Identifier:
keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2e:9b:f4:ac:f3:56:3a:1c:12:07:2d:f4:00:bc:7e:48:30:
4e:c1:73:6f:1b:78:ab:31:06:64:48:93:6f:f6:32:10:e4:0c:
8e:7f:b7:71:6c:8d:58:54:ec:cb:bb:90:d8:30:a0:b0:cb:db:
85:8d:da:b9:36:6f:27:3b:1e:e0:ab:74:05:1b:49:65:ca:ba:
0c:02:ac:a5:6f:e2:7d:4c:18:73:b6:a0:f4:d2:b8:96:eb:30:
5f:35:b4:b4:8c:e9:24:e3:ba:ac:37:d4:e4:b2:d0:79:b6:d5:
ee:28:b4:b3:d5:a0:b7:82:6f:f0:48:fa:64:09:4a:10:47:77:
af:78:a5:9f:a9:a3:24:ec:21:b5:37:21:f8:03:62:aa:7a:e9:
af:fa:b7:19:8f:d4:b7:db:3b:a6:7d:3e:c5:06:3b:5c:41:ea:
e6:49:e7:87:5f:47:7d:de:ae:de:a8:15:97:52:32:50:45:3f:
83:a8:4c:bb:68:27:6a:13:79:3f:84:cf:b5:4d:6a:02:2d:a6:
e7:57:3e:29:67:1b:0f:8c:95:27:8b:31:c5:84:b4:af:c4:9d:
3e:63:37:da:1a:3b:f6:d5:f3:8a:a3:5f:df:97:a7:1b:4a:ab:
d6:b2:c6:84:2b:c0:46:c5:0f:9d:fb:88:37:fc:1c:da:9a:63:
7b:09:45:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDNLCoBXeM4qITlo5nS7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWMyNzliMDUwMTczMDY5OGEzMGJjZGNlYTNhZTQ3N2M5
NTczMzEwHhcNMjUwOTA3MTIwMDQzWhcNMjUwOTA4MTIwMDQzWjAzMTEwLwYDVQQD
Eyg2MGYzYmUwNjJiNDUwZTAyNWRmNjUzNzhkOTYyMzI5NDE4OWI4MDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6jcBrB+5jo7+fDALp9wLpmDFbJP
vy+orsJb3NhCJO8pQ43NVHUtSHRZYIsP80gNZ+RICawCoWcrA1mxLG6dZG4Vr2R2
UjRp+3mZWEaoLIWz6rtc41zGcdAzo0t2HkAG403FsydWmJYr/J9oMzo+Z97LtWqd
RrSspk8u2lQgxX0Cald7weKytfm9dkU0mAAdoDxk3BomxcoHHkeEz+A3Qv7TgdPv
Zd8uiHQh+TtEIR0AUptUSqKlnzg7h+ceUVssOKYMfvGhWW6lu+8HBjOXkLit5rei
/SVr/prJURHY2Joz/pH0hXgYdiWsaerKPN5d+LUUuBoo0pVyCMvJUpKeYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDzvgYrRQ4CXfZTeNliMpQYm4CeMB8GA1UdIwQY
MBaAFH3sJ5sFAXMGmKMLzc6jrkd8lXMxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQt
ZDg5ZTY0MTE4M2YzLzEvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQtZDg5ZTY0MTE4M2Yz
LzEvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvC6b9Kzz
VjocEgct9AC8fkgwTsFzbxt4qzEGZEiTb/YyEOQMjn+3cWyNWFTsy7uQ2DCgsMvb
hY3auTZvJzse4Kt0BRtJZcq6DAKspW/ifUwYc7ag9NK4luswXzW0tIzpJOO6rDfU
5LLQebbV7ii0s9Wgt4Jv8Ej6ZAlKEEd3r3iln6mjJOwhtTch+ANiqnrpr/q3GY/U
t9s7pn0+xQY7XEHq5knnh19Hfd6u3qgVl1IyUEU/g6hMu2gnahN5P4TPtU1qAi2m
51c+KWcbD4yVJ4sxxYS0r8SdPmM32ho79tXziqNf35enG0qr1rLGhCvARsUPnfuI
N/wc2ppjewlFYA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:24 2025 by rpki-client