Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier: /SsAWkabEqAAPPatR+le5dwAMC47UzpfyExFMc0k3D4=
Subject key identifier: DF:26:C9:1E:7C:49:01:9A:1F:0F:89:1F:95:5C:3F:55:BF:98:94:24
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial: 01992367C908196277B190E52774A7D6E5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number: 5A
Signing time: Sun 07 Sep 2025 09:00:28 +0000
Manifest this update: Sun 07 Sep 2025 09:00:28 +0000
Manifest next update: Mon 08 Sep 2025 09:00:28 +0000
Files and hashes: 1: MXRadGpzqEbp0mkxJfqHUigmWBA.roa (hash: wm6CRKGDQ4Q1PS4u4levZbaZ8tcUlI9RmOi9JQKCpTM=)
2: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: VpWiAP0zuk30dQEw4lsXIN2T7hq6ful9z7wZKZlUwWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c9:08:19:62:77:b1:90:e5:27:74:a7:d6:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Validity
Not Before: Sep 7 09:00:28 2025 GMT
Not After : Sep 8 09:00:28 2025 GMT
Subject: CN=df26c91e7c49019a1f0f891f955c3f55bf989424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:bc:d5:d3:06:f8:ea:0a:63:cd:44:dd:95:
63:c7:ee:5a:ba:21:59:4e:dc:58:d9:79:0e:b6:83:
43:e8:8c:3c:4e:21:6e:13:e8:8f:34:6a:03:26:62:
2b:9e:93:ed:c5:bd:26:df:8e:50:52:ca:76:03:17:
6b:93:f4:53:03:11:84:69:a6:25:a7:d7:45:26:35:
f6:cd:28:2d:ab:33:f3:50:95:3e:ef:eb:40:c0:f6:
23:31:5c:ee:92:eb:ec:b7:47:a2:4f:2c:8e:4c:cc:
11:4c:b1:bf:41:8f:b6:27:d6:3f:60:e7:4c:c3:49:
53:ce:7f:e2:8a:a8:e3:42:2c:3a:3e:b7:1d:11:da:
7e:9c:e8:2d:14:69:aa:6d:ad:7f:4e:59:26:30:3c:
cf:de:07:a9:0c:93:fb:76:6a:4b:04:bd:04:8a:2e:
f4:9b:cd:fd:e0:95:eb:6f:15:9f:40:9b:ef:5d:0c:
a4:10:93:3b:df:0e:e4:9f:38:0c:94:28:db:38:ed:
75:bf:f9:7e:6d:6c:84:88:af:69:b0:b2:2e:30:6d:
81:bd:10:71:44:24:78:17:4b:d8:25:04:a2:b3:9b:
d7:7d:64:b9:4b:df:fe:b2:35:29:0a:c2:04:51:9e:
8a:7a:cd:6a:fe:3e:12:45:69:c9:52:05:f0:dc:df:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:C9:1E:7C:49:01:9A:1F:0F:89:1F:95:5C:3F:55:BF:98:94:24
X509v3 Authority Key Identifier:
keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:75:88:fc:83:1c:93:3e:91:e9:01:5d:5c:64:2b:70:1f:2e:
38:06:dd:69:26:0f:53:ed:4b:4a:f6:6b:52:18:73:bb:22:db:
63:69:e3:9f:0e:48:c5:30:75:06:e8:05:d4:4c:4a:16:24:37:
7a:35:b6:a4:e4:94:d5:61:4a:af:55:54:fd:66:1b:69:15:7f:
d2:ec:5a:9b:90:91:32:f1:06:39:7b:20:5e:50:d9:a7:1d:6d:
38:75:24:e6:3d:31:79:9d:66:79:0e:09:f7:3e:4a:9a:6b:33:
dc:43:95:cc:8b:9c:b5:b7:5e:c4:62:ef:ba:fd:8c:b3:00:16:
fb:37:21:42:d0:f9:67:17:fe:cd:10:82:d6:ac:17:94:35:d1:
34:6d:e3:c1:43:6f:eb:48:d1:21:10:55:31:46:c9:5c:c5:b7:
e5:a8:4f:2e:30:83:7e:1c:62:18:1c:cb:ed:87:51:59:e2:18:
7e:9f:ff:45:1e:d1:b3:64:1c:94:fc:c2:9d:b5:5e:78:ad:70:
71:9d:4c:a6:f7:86:4d:7c:25:d0:0d:20:fa:91:dd:fe:a1:d7:
30:8a:fc:41:da:dc:fb:d8:0b:b3:c9:7d:c6:3a:2b:c1:3c:a0:
fb:3a:63:12:23:cf:fc:11:65:5a:f9:bc:a8:29:fe:8a:57:1e:
b9:5a:98:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjZ8kIGWJ3sZDlJ3Sn1uXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZDFiYzcwMDkwNWQxYWM2ZDc3MzNhZWJjMzI2M2U2YWU3
NmZhOTcwHhcNMjUwOTA3MDkwMDI4WhcNMjUwOTA4MDkwMDI4WjAzMTEwLwYDVQQD
EyhkZjI2YzkxZTdjNDkwMTlhMWYwZjg5MWY5NTVjM2Y1NWJmOTg5NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtme81dMG+OoKY81E3ZVjx+5auiFZ
TtxY2XkOtoND6Iw8TiFuE+iPNGoDJmIrnpPtxb0m345QUsp2Axdrk/RTAxGEaaYl
p9dFJjX2zSgtqzPzUJU+7+tAwPYjMVzukuvst0eiTyyOTMwRTLG/QY+2J9Y/YOdM
w0lTzn/iiqjjQiw6PrcdEdp+nOgtFGmqba1/TlkmMDzP3gepDJP7dmpLBL0Eii70
m8394JXrbxWfQJvvXQykEJM73w7knzgMlCjbOO11v/l+bWyEiK9psLIuMG2BvRBx
RCR4F0vYJQSis5vXfWS5S9/+sjUpCsIEUZ6Kes1q/j4SRWnJUgXw3N8gKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8myR58SQGaHw+JH5VcP1W/mJQkMB8GA1UdIwQY
MBaAFHzRvHAJBdGsbXczrrwyY+audvqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYt
ZmNlOWUyYmY0ZWY5LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYtZmNlOWUyYmY0ZWY5
LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3WI/IMc
kz6R6QFdXGQrcB8uOAbdaSYPU+1LSvZrUhhzuyLbY2njnw5IxTB1BugF1ExKFiQ3
ejW2pOSU1WFKr1VU/WYbaRV/0uxam5CRMvEGOXsgXlDZpx1tOHUk5j0xeZ1meQ4J
9z5Kmmsz3EOVzIuctbdexGLvuv2MswAW+zchQtD5Zxf+zRCC1qwXlDXRNG3jwUNv
60jRIRBVMUbJXMW35ahPLjCDfhxiGBzL7YdRWeIYfp//RR7Rs2QclPzCnbVeeK1w
cZ1MpveGTXwl0A0g+pHd/qHXMIr8Qdrc+9gLs8l9xjorwTyg+zpjEiPP/BFlWvm8
qCn+ilceuVqYBA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:26 2025 by rpki-client