Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
File: fhN6p6PGSUQ0z09AqLSOz8Agye8.mft (raw, json)
Hash identifier: rcXRabmBPOM71PdLKGp4hEqhA01V8UpJrW5LoaN2yGU=
Subject key identifier: 8D:03:F6:C7:C8:ED:99:B9:D3:10:1A:8C:0C:7C:3F:F3:68:D9:37:CB
Authority key identifier: 7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
Certificate issuer: /CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Certificate serial: 0199228C36DDFF64BF86051DA9133F5135D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
Manifest number: 59
Signing time: Sun 07 Sep 2025 05:00:38 +0000
Manifest this update: Sun 07 Sep 2025 05:00:38 +0000
Manifest next update: Mon 08 Sep 2025 05:00:38 +0000
Files and hashes: 1: OILyzQ2UmvS21gSFd565SbxH7mA.roa (hash: 9fyLmCcJiT605kvUMhZI3DGLYcwb/Ju1g++2lmYXkfY=)
2: fhN6p6PGSUQ0z09AqLSOz8Agye8.crl (hash: bt9bJLfkQCJs6TLGfQDekyr8h4yTRNm/ZtMJlVSOGTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:36:dd:ff:64:bf:86:05:1d:a9:13:3f:51:35:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Validity
Not Before: Sep 7 05:00:38 2025 GMT
Not After : Sep 8 05:00:38 2025 GMT
Subject: CN=8d03f6c7c8ed99b9d3101a8c0c7c3ff368d937cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:85:79:86:9f:cc:15:ce:c6:be:26:13:db:
33:2f:63:32:5e:75:55:28:ef:13:16:22:46:43:e6:
24:cf:05:1d:ac:76:8f:91:6f:53:30:1b:26:b0:43:
92:bf:11:29:dd:a2:92:65:5e:79:4f:5b:c6:d2:28:
67:65:bb:ae:c7:bb:e3:91:c0:3a:d1:2b:a9:98:16:
44:6e:8f:5a:4d:b0:cf:d3:0b:cf:0e:cd:60:c1:e9:
f5:2c:c8:20:37:4e:98:cc:01:fc:c0:a6:d2:f2:f2:
a6:2b:a4:c6:bd:81:a4:b6:c3:3f:aa:4d:d2:28:44:
0b:8c:69:6f:e0:0f:cf:df:a9:b3:78:fa:0c:1b:9d:
28:ec:eb:96:0d:41:38:e2:74:ad:0d:21:24:89:64:
48:9e:f3:4e:48:23:f8:19:84:92:18:52:44:20:7e:
a6:e2:74:38:a0:40:ab:e5:0b:21:c2:fb:d6:0a:23:
b7:a7:a7:16:4c:e7:7d:fd:f5:c8:92:31:b7:49:4c:
92:66:9e:63:7a:72:cc:3c:fc:46:49:97:a5:cb:bb:
14:78:5a:0b:a0:fd:8c:72:30:bb:dc:cd:db:cb:77:
9d:87:60:3d:e1:a5:0a:a9:2c:85:b8:1d:4d:3f:19:
90:18:00:ce:98:68:ee:81:cd:1d:92:06:09:bf:e4:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:F6:C7:C8:ED:99:B9:D3:10:1A:8C:0C:7C:3F:F3:68:D9:37:CB
X509v3 Authority Key Identifier:
keyid:7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e8:e6:5c:2f:bb:53:04:27:a7:65:32:d2:cb:3b:9a:9c:b7:
8e:30:9e:b6:4b:c9:c3:9f:36:bb:5c:59:79:db:40:3c:b6:f5:
e8:79:80:b2:e5:2d:29:54:26:05:56:84:0b:c1:c3:9a:a5:cc:
4d:7c:1b:41:40:32:dd:0e:45:95:e4:d5:16:07:78:dc:e8:5b:
dc:d8:45:62:af:af:81:4f:12:4c:2f:62:7f:50:69:ce:ca:8c:
e6:80:f4:f6:03:6b:ac:3b:c4:39:1e:2b:2c:7e:d9:82:a3:74:
84:d8:78:0b:18:7e:68:2b:eb:81:61:5b:54:95:cd:51:33:fe:
23:81:7c:96:cf:c1:a1:03:d9:38:5a:65:54:12:6b:51:d4:e9:
04:b1:a4:12:f7:23:ac:a0:b5:ab:23:a5:70:e5:66:0d:c3:79:
1c:f2:90:0a:f8:b4:07:71:47:22:d9:49:6d:ee:3c:bb:43:75:
8c:a3:fc:46:3e:d3:8e:fa:9a:9b:66:81:d6:a2:eb:94:09:09:
1e:1e:17:b6:a3:b6:a3:9f:d4:fd:f9:87:e8:b8:b9:66:da:36:
83:d2:69:da:a9:4f:ae:a2:ed:1a:c5:5e:25:0a:88:c8:e9:12:
fd:bd:a0:e0:76:af:ab:d2:ec:da:6f:be:2b:95:2a:16:f5:04:
5e:c9:c2:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijDbd/2S/hgUdqRM/UTXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTM3YWE3YTNjNjQ5NDQzNGNmNGY0MGE4YjQ4ZWNmYzAy
MGM5ZWYwHhcNMjUwOTA3MDUwMDM4WhcNMjUwOTA4MDUwMDM4WjAzMTEwLwYDVQQD
Eyg4ZDAzZjZjN2M4ZWQ5OWI5ZDMxMDFhOGMwYzdjM2ZmMzY4ZDkzN2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDWFeYafzBXOxr4mE9szL2MyXnVV
KO8TFiJGQ+YkzwUdrHaPkW9TMBsmsEOSvxEp3aKSZV55T1vG0ihnZbuux7vjkcA6
0SupmBZEbo9aTbDP0wvPDs1gwen1LMggN06YzAH8wKbS8vKmK6TGvYGktsM/qk3S
KEQLjGlv4A/P36mzePoMG50o7OuWDUE44nStDSEkiWRInvNOSCP4GYSSGFJEIH6m
4nQ4oECr5QshwvvWCiO3p6cWTOd9/fXIkjG3SUySZp5jenLMPPxGSZely7sUeFoL
oP2McjC73M3by3edh2A94aUKqSyFuB1NPxmQGADOmGjugc0dkgYJv+T64QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0D9sfI7Zm50xAajAx8P/No2TfLMB8GA1UdIwQY
MBaAFH4TeqejxklENM9PQKi0js/AIMnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhONnA2UEdTVVEwejA5QXFMU096OEFneWU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yZjRhNDEtOWYzMC00MjhlLWFjZmYt
MzM2M2RmMDM5NWMxLzEvZmhONnA2UEdTVVEwejA5QXFMU096OEFneWU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yZjRhNDEtOWYzMC00MjhlLWFjZmYtMzM2M2RmMDM5NWMx
LzEvZmhONnA2UEdTVVEwejA5QXFMU096OEFneWU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOjmXC+7
UwQnp2Uy0ss7mpy3jjCetkvJw582u1xZedtAPLb16HmAsuUtKVQmBVaEC8HDmqXM
TXwbQUAy3Q5FleTVFgd43Ohb3NhFYq+vgU8STC9if1BpzsqM5oD09gNrrDvEOR4r
LH7ZgqN0hNh4Cxh+aCvrgWFbVJXNUTP+I4F8ls/BoQPZOFplVBJrUdTpBLGkEvcj
rKC1qyOlcOVmDcN5HPKQCvi0B3FHItlJbe48u0N1jKP8Rj7Tjvqam2aB1qLrlAkJ
Hh4XtqO2o5/U/fmH6Li5Zto2g9Jp2qlPrqLtGsVeJQqIyOkS/b2g4Havq9Ls2m++
K5UqFvUEXsnCTw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:34 2025 by rpki-client