Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: qgzRXYm1WCcQnDrzAyTXcG+5vSnHWd8wE5bXL0b4VXQ=
Subject key identifier: E8:16:76:B4:4D:F0:04:A0:24:74:42:69:92:F0:9D:8C:34:21:80:5B
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 0199270DD5529AC88816C929FAAF8EB566FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 076E
Signing time: Mon 08 Sep 2025 02:00:41 +0000
Manifest this update: Mon 08 Sep 2025 02:00:41 +0000
Manifest next update: Tue 09 Sep 2025 02:00:41 +0000
Files and hashes: 1: 02srA_dodlsqHDgp--vASVvWX9E.roa (hash: lJ1KGWWna7XFX1YELq/QOjPK38+hDLl/0ZeJxdIW2VA=)
2: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: S5iR1rq8aoYIza5xAkoEQaFylzIAIaGecaMy1SMyp9g=)
3: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (hash: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=)
4: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (hash: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:0d:d5:52:9a:c8:88:16:c9:29:fa:af:8e:b5:66:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Sep 8 02:00:41 2025 GMT
Not After : Sep 9 02:00:41 2025 GMT
Subject: CN=e81676b44df004a02474426992f09d8c3421805b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:0b:f1:bf:9f:41:34:82:3a:81:b9:33:cc:
bd:93:74:98:29:40:ff:52:56:64:a3:e8:7b:e1:8a:
23:6e:d0:c3:ce:ca:3e:19:5a:db:a5:62:d9:0f:6b:
03:2c:7e:f7:e1:d7:83:c8:68:15:73:31:e6:ca:ae:
2f:5a:44:34:73:76:eb:b5:ad:8d:0c:10:e0:4e:9f:
dc:f1:d0:8f:0a:c1:1c:57:a7:b1:cb:44:37:49:18:
00:19:76:fe:c2:3d:ef:a4:9b:b7:f3:3f:1d:be:cd:
f9:51:fd:e4:ed:0b:bd:e6:38:19:03:b5:d3:ae:cf:
98:23:d2:ba:2f:7f:eb:32:3f:d3:74:e5:d7:8e:c5:
e1:d5:cb:16:4d:ce:59:cf:10:ec:3a:6a:6f:ad:77:
e6:db:84:e0:0e:23:ca:5e:07:fd:95:f3:11:1a:f8:
cf:eb:5c:c2:fd:a8:f8:8f:94:44:d9:84:0c:76:a7:
fe:3d:b3:be:56:26:cb:8b:a6:27:bd:dc:ab:5d:e9:
5c:cf:50:0d:a7:f6:e0:37:94:cf:5b:8c:fa:02:40:
12:97:2d:cd:d2:0d:4f:7f:dc:17:23:72:ac:82:57:
42:b5:34:ab:39:32:48:a8:68:34:d6:6c:f0:e3:a1:
bf:68:ef:9d:87:dd:72:07:fe:b5:f8:39:51:19:10:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:16:76:B4:4D:F0:04:A0:24:74:42:69:92:F0:9D:8C:34:21:80:5B
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4e:ac:2f:41:1b:6d:98:1a:46:0c:ef:a5:cc:da:8e:71:73:
68:8e:97:c6:fe:17:1a:6a:d6:05:3e:3a:b2:31:c6:92:e7:8e:
14:da:ef:65:1a:e9:70:72:7b:b3:d9:46:6e:91:36:81:5f:e1:
06:73:94:45:c2:f4:2b:f4:b0:d9:37:c6:fd:b9:e7:f6:e5:a0:
27:e0:4c:1c:9d:32:a0:ef:59:a5:24:55:a5:9f:4f:d9:30:c1:
43:28:25:40:8a:4f:18:14:31:be:04:a0:27:30:c3:a6:1a:1b:
3e:b1:70:4b:58:ca:5f:7d:f9:02:a8:a5:78:9b:d7:94:a9:30:
5c:d0:55:d5:87:d9:3b:d5:4f:04:16:29:ee:05:d1:44:2a:0d:
1a:53:5a:6f:d2:32:6f:b1:ff:8c:22:97:1e:aa:b8:06:f5:05:
65:0c:1c:78:90:5e:3e:f7:fa:4d:f5:41:b9:16:ca:84:07:16:
1b:e6:21:93:18:ae:23:16:b1:08:bc:7f:01:1b:02:66:03:f0:
55:82:3b:96:b8:72:ba:f9:0e:4e:82:f5:df:25:fa:49:67:31:
b7:05:99:80:52:41:f5:70:9e:11:e7:ed:a8:8e:4d:b5:43:39:
44:bc:99:0a:5d:73:96:57:a4:c9:08:58:0c:8c:97:a3:28:f6:
96:d7:5a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknDdVSmsiIFskp+q+OtWb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0
MzdiOTQwHhcNMjUwOTA4MDIwMDQxWhcNMjUwOTA5MDIwMDQxWjAzMTEwLwYDVQQD
EyhlODE2NzZiNDRkZjAwNGEwMjQ3NDQyNjk5MmYwOWQ4YzM0MjE4MDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCcL8b+fQTSCOoG5M8y9k3SYKUD/
UlZko+h74YojbtDDzso+GVrbpWLZD2sDLH734deDyGgVczHmyq4vWkQ0c3brta2N
DBDgTp/c8dCPCsEcV6exy0Q3SRgAGXb+wj3vpJu38z8dvs35Uf3k7Qu95jgZA7XT
rs+YI9K6L3/rMj/TdOXXjsXh1csWTc5ZzxDsOmpvrXfm24TgDiPKXgf9lfMRGvjP
61zC/aj4j5RE2YQMdqf+PbO+VibLi6YnvdyrXelcz1ANp/bgN5TPW4z6AkASly3N
0g1Pf9wXI3KsgldCtTSrOTJIqGg01mzw46G/aO+dh91yB/61+DlRGRBOgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgWdrRN8ASgJHRCaZLwnYw0IYBbMB8GA1UdIwQY
MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt
NTgwNWQzZjNkYmIyLzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy
LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS06sL0Eb
bZgaRgzvpczajnFzaI6Xxv4XGmrWBT46sjHGkueOFNrvZRrpcHJ7s9lGbpE2gV/h
BnOURcL0K/Sw2TfG/bnn9uWgJ+BMHJ0yoO9ZpSRVpZ9P2TDBQyglQIpPGBQxvgSg
JzDDphobPrFwS1jKX335AqileJvXlKkwXNBV1YfZO9VPBBYp7gXRRCoNGlNab9Iy
b7H/jCKXHqq4BvUFZQwceJBePvf6TfVBuRbKhAcWG+YhkxiuIxaxCLx/ARsCZgPw
VYI7lrhyuvkOToL13yX6SWcxtwWZgFJB9XCeEeftqI5NtUM5RLyZCl1zllekyQhY
DIyXoyj2ltdaQg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 03:29:24 2025 by rpki-client