Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: 4oPdoWP93/mhptYDM1hFV7oujfMI39n6nzBYSEs2wZ4=
Subject key identifier: 11:C2:47:25:95:26:BD:8F:EF:EB:CF:C0:06:CE:24:66:5E:4C:69:5F
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 01992B21602AADCF6A4F0FFB47715EDC936F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 164A
Signing time: Mon 08 Sep 2025 21:00:31 +0000
Manifest this update: Mon 08 Sep 2025 21:00:31 +0000
Manifest next update: Tue 09 Sep 2025 21:00:31 +0000
Files and hashes: 1: 2cqLG7f7M7EO1CExAEwed3q2RJY.roa (hash: oMyZToCAGoMS3fuIPl6elQvL2EBYTw46vFWwPyR2dhM=)
2: 44aHSTc_N_J7ymJFhCAeUzS4V0M.roa (hash: k12ZQud9YaZ6rTtvVFGbQETqfgsqw1EgkhzhgzETi5U=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: x3BBPiwcBxKy0pOuT+Uzh51J90KYJEJkW8OGBc93ryM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:21:60:2a:ad:cf:6a:4f:0f:fb:47:71:5e:dc:93:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Sep 8 21:00:31 2025 GMT
Not After : Sep 9 21:00:31 2025 GMT
Subject: CN=11c247259526bd8fefebcfc006ce24665e4c695f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:a9:dc:b2:88:64:91:61:8c:ce:36:91:6a:
d6:ad:77:18:38:d6:a3:f1:c4:b5:61:1e:7a:39:c9:
62:08:51:f9:25:89:44:2a:02:e9:ab:00:21:4d:bd:
b3:dd:bd:4f:09:00:cb:ab:1b:a7:6e:16:bb:37:68:
fa:0c:3e:8a:2f:d4:84:f6:1e:00:0b:59:4b:10:be:
1d:e6:d5:f1:22:93:72:0d:bc:a9:ba:8d:61:99:9d:
df:35:10:ca:64:b8:f2:a2:42:15:82:51:19:30:ce:
65:9e:38:e1:10:e6:fd:17:6f:c2:a7:1c:6e:3b:5f:
44:ea:aa:2c:41:e2:a4:60:9e:46:12:36:92:6c:88:
df:ca:fb:4c:fd:a3:f4:6e:3f:1e:21:02:6f:53:e0:
6f:b9:8b:09:42:1e:2f:63:56:52:bb:13:8f:b6:13:
7e:93:50:a4:7f:16:33:f2:77:3f:5b:74:07:6f:19:
24:fe:b6:8d:30:75:e9:1a:54:c3:b3:d0:d2:f6:76:
b2:68:71:2c:92:80:40:24:f9:9f:72:02:71:42:f6:
24:a8:0a:ea:bb:ef:88:54:e0:c4:36:ee:ce:31:b6:
4f:7a:2e:c4:9e:b3:87:f2:bf:74:a7:d1:96:24:61:
5e:c4:b7:17:de:5e:43:e6:bd:a6:17:b7:cc:64:59:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C2:47:25:95:26:BD:8F:EF:EB:CF:C0:06:CE:24:66:5E:4C:69:5F
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b5:ad:42:36:8a:ad:2a:7d:4e:14:c3:13:61:ee:9e:fe:19:
4f:00:4e:b0:5a:46:5a:c5:f4:84:6a:bf:c0:93:fa:c3:c7:15:
9b:96:b6:eb:70:23:4f:5c:00:a8:85:a7:3a:41:8b:4f:38:1a:
58:f6:ff:0f:bf:aa:b4:cd:e8:d5:47:1b:4b:95:08:c0:10:fa:
24:06:09:db:11:62:8c:b7:83:36:06:61:c6:35:0b:60:50:e1:
82:0a:ad:e3:76:1e:55:44:73:4e:a2:97:d9:3a:ba:01:87:e9:
a3:46:de:0b:71:f7:b8:c7:82:cd:ec:aa:51:2b:25:cc:cc:22:
8a:05:84:04:67:6c:90:02:f2:4e:09:f3:41:a3:44:5c:f3:3d:
90:a8:fd:59:38:f2:4a:72:6f:ea:03:00:32:f5:fc:b3:de:11:
88:e2:2e:c0:58:5e:54:e4:27:4a:81:d8:33:92:a1:e6:74:cc:
76:ce:c1:b4:dd:69:4f:8a:62:d0:bc:2e:8e:72:d5:c9:5e:ba:
93:52:18:a2:ee:ac:e1:06:69:0b:37:80:1d:d9:86:1d:86:7b:
cd:9a:39:23:64:ca:1a:56:f0:c0:39:9c:1b:2e:71:1a:36:47:
23:c2:76:7a:a4:84:58:12:82:9b:2a:05:87:ef:45:e6:68:bd:
c9:58:4f:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrIWAqrc9qTw/7R3Fe3JNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjUwOTA4MjEwMDMxWhcNMjUwOTA5MjEwMDMxWjAzMTEwLwYDVQQD
EygxMWMyNDcyNTk1MjZiZDhmZWZlYmNmYzAwNmNlMjQ2NjVlNGM2OTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFep3LKIZJFhjM42kWrWrXcYONaj
8cS1YR56OcliCFH5JYlEKgLpqwAhTb2z3b1PCQDLqxunbha7N2j6DD6KL9SE9h4A
C1lLEL4d5tXxIpNyDbypuo1hmZ3fNRDKZLjyokIVglEZMM5lnjjhEOb9F2/Cpxxu
O19E6qosQeKkYJ5GEjaSbIjfyvtM/aP0bj8eIQJvU+BvuYsJQh4vY1ZSuxOPthN+
k1CkfxYz8nc/W3QHbxkk/raNMHXpGlTDs9DS9nayaHEskoBAJPmfcgJxQvYkqArq
u++IVODENu7OMbZPei7EnrOH8r90p9GWJGFexLcX3l5D5r2mF7fMZFmm6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHCRyWVJr2P7+vPwAbOJGZeTGlfMB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7WtQjaK
rSp9ThTDE2Hunv4ZTwBOsFpGWsX0hGq/wJP6w8cVm5a263AjT1wAqIWnOkGLTzga
WPb/D7+qtM3o1UcbS5UIwBD6JAYJ2xFijLeDNgZhxjULYFDhggqt43YeVURzTqKX
2Tq6AYfpo0beC3H3uMeCzeyqUSslzMwiigWEBGdskALyTgnzQaNEXPM9kKj9WTjy
SnJv6gMAMvX8s94RiOIuwFheVOQnSoHYM5Kh5nTMds7BtN1pT4pi0LwujnLVyV66
k1IYou6s4QZpCzeAHdmGHYZ7zZo5I2TKGlbwwDmcGy5xGjZHI8J2eqSEWBKCmyoF
h+9F5mi9yVhPkg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 03:02:55 2025 by rpki-client