Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: aT5nrHfn1ruPUcNyWEK7K/C/OfVPZlir08cgGJgsbtg=
Subject key identifier: 1E:88:D9:58:64:9C:0E:DA:13:60:0B:63:92:9F:24:A6:C7:E2:AD:62
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 0199221E62EEE44F797ACE1CA991F204B2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:00:40 +0000
Manifest this update: Sun 07 Sep 2025 03:00:40 +0000
Manifest next update: Mon 08 Sep 2025 03:00:40 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: YCcm5FsqSn8Vi8Phe7xWNMeJBYtI4k2AYgYqr/hwK90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:62:ee:e4:4f:79:7a:ce:1c:a9:91:f2:04:b2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Sep 7 03:00:40 2025 GMT
Not After : Sep 8 03:00:40 2025 GMT
Subject: CN=1e88d958649c0eda13600b63929f24a6c7e2ad62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:b3:fa:9f:25:7b:56:17:99:3b:e5:ef:15:
02:3a:44:c8:a3:76:fd:43:41:17:52:35:14:9a:30:
58:92:b6:d3:15:19:f7:c3:82:d6:39:93:ab:a5:04:
78:bf:c0:11:d9:51:99:46:3a:8c:df:5b:23:d9:6d:
22:12:9a:b5:91:9c:6a:33:10:5c:15:b2:6b:a5:df:
e1:97:07:78:a5:f9:1f:c7:25:8b:7a:bd:1d:9d:86:
38:7e:8c:79:f2:d2:fd:25:2c:f7:58:95:3b:89:7b:
a8:af:76:a3:44:a7:66:8e:de:9f:b2:47:d5:14:2c:
7e:7b:5f:95:c8:48:76:d8:1d:ab:a6:d1:84:55:23:
a1:ad:3c:d8:c9:c5:0b:87:a6:a5:f4:d0:4f:6d:76:
77:34:20:77:ef:ef:29:86:0f:85:a7:7b:de:ce:d4:
dd:f3:3a:0e:ca:43:86:75:89:eb:13:9b:ae:46:a4:
fe:87:67:2f:20:6e:bb:5e:3a:5f:bf:65:2c:5a:fb:
60:ce:7f:ac:a1:95:76:28:18:08:9a:54:e7:2b:2f:
7e:c9:74:af:42:5b:19:ab:6e:52:e9:94:17:d6:5f:
fd:fb:48:96:aa:45:67:ba:b6:23:13:3c:55:22:46:
a7:3f:57:11:9d:49:d0:77:73:0c:3f:c8:03:08:ac:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:D9:58:64:9C:0E:DA:13:60:0B:63:92:9F:24:A6:C7:E2:AD:62
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e1:f0:0d:16:bf:6d:ba:c2:62:8e:2b:3e:ce:58:37:f0:a0:
6c:5f:7a:12:9c:76:58:83:4a:e1:da:26:80:d0:45:03:b0:38:
f0:d9:f4:6c:3a:04:fc:51:47:a9:c8:10:a8:46:cd:a6:50:5c:
d5:8e:99:be:bf:cf:d4:3e:e4:86:19:8d:a8:1c:13:12:5e:27:
a7:97:05:f8:42:9b:07:bd:74:98:d4:87:a7:2e:13:09:8b:18:
6b:f8:1e:1f:e6:29:0a:d6:38:71:5f:c4:00:52:39:32:8e:a6:
fe:ba:63:4e:36:96:1e:d7:9f:ea:80:e9:46:a0:ee:ec:2f:87:
f5:88:35:b0:e7:0a:7d:35:ce:fd:ba:ac:47:20:1d:7f:de:a4:
64:3c:f2:64:d1:8c:05:25:6d:cf:b7:dd:15:26:d2:70:ae:71:
09:a7:db:b4:50:4f:fa:95:19:76:4b:22:63:33:a5:47:3e:ed:
51:ee:78:66:1e:f4:29:81:97:0b:c4:66:f0:d0:20:57:91:cc:
65:eb:69:37:4b:26:c4:bb:79:a5:de:4e:d0:8f:6f:98:06:9a:
0e:cf:f4:60:0c:71:bd:e5:8f:e5:37:47:47:31:28:21:14:d8:
b9:ae:d3:a7:cf:45:4f:c8:5b:06:d2:5b:63:f7:e8:0b:8d:a0:
95:a9:73:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHmLu5E95es4cqZHyBLLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDJhOTYxYjAzNzVkNzIxOTFiZDk3MDgxNWQ2YjE1ZjQy
N2QwNzMwHhcNMjUwOTA3MDMwMDQwWhcNMjUwOTA4MDMwMDQwWjAzMTEwLwYDVQQD
EygxZTg4ZDk1ODY0OWMwZWRhMTM2MDBiNjM5MjlmMjRhNmM3ZTJhZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnSz+p8le1YXmTvl7xUCOkTIo3b9
Q0EXUjUUmjBYkrbTFRn3w4LWOZOrpQR4v8AR2VGZRjqM31sj2W0iEpq1kZxqMxBc
FbJrpd/hlwd4pfkfxyWLer0dnYY4fox58tL9JSz3WJU7iXuor3ajRKdmjt6fskfV
FCx+e1+VyEh22B2rptGEVSOhrTzYycULh6al9NBPbXZ3NCB37+8phg+Fp3veztTd
8zoOykOGdYnrE5uuRqT+h2cvIG67Xjpfv2UsWvtgzn+soZV2KBgImlTnKy9+yXSv
QlsZq25S6ZQX1l/9+0iWqkVnurYjEzxVIkanP1cRnUnQd3MMP8gDCKyMWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6I2VhknA7aE2ALY5KfJKbH4q1iMB8GA1UdIwQY
MBaAFH4CqWGwN11yGRvZcIFdaxX0J9BzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQt
Y2M0N2MxZGUwMWJkLzEvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQtY2M0N2MxZGUwMWJk
LzEvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruHwDRa/
bbrCYo4rPs5YN/CgbF96Epx2WINK4domgNBFA7A48Nn0bDoE/FFHqcgQqEbNplBc
1Y6Zvr/P1D7khhmNqBwTEl4np5cF+EKbB710mNSHpy4TCYsYa/geH+YpCtY4cV/E
AFI5Mo6m/rpjTjaWHtef6oDpRqDu7C+H9Yg1sOcKfTXO/bqsRyAdf96kZDzyZNGM
BSVtz7fdFSbScK5xCafbtFBP+pUZdksiYzOlRz7tUe54Zh70KYGXC8Rm8NAgV5HM
ZetpN0smxLt5pd5O0I9vmAaaDs/0YAxxveWP5TdHRzEoIRTYua7Tp89FT8hbBtJb
Y/foC42glalzpw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:47 2025 by rpki-client