Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: O5CiDn4gvK5We82It4Fhmud/0rOuazRIA8d5MkLMKSE=
Subject key identifier: 67:AF:41:17:11:43:26:E8:82:39:2B:83:E3:1A:90:60:81:50:D9:26
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 01994E52A274A7527C377312028CCF8FBBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 05C8
Signing time: Mon 15 Sep 2025 17:01:02 +0000
Manifest this update: Mon 15 Sep 2025 17:01:02 +0000
Manifest next update: Tue 16 Sep 2025 17:01:02 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: R1B1cqKFHtGdOAYn6gV3NPezbeDFOX0+EdAh6Wafj8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:52:a2:74:a7:52:7c:37:73:12:02:8c:cf:8f:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Sep 15 17:01:02 2025 GMT
Not After : Sep 16 17:01:02 2025 GMT
Subject: CN=67af4117114326e882392b83e31a90608150d926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:89:86:82:a2:af:32:09:56:99:b1:aa:45:e5:
3a:8d:48:f7:67:0a:2a:12:47:f3:23:f5:63:8f:4f:
03:a6:e9:df:9b:21:3b:a4:9b:d7:b1:79:85:f8:cf:
ce:1b:49:09:e6:2f:dd:d0:27:f4:df:0a:01:ea:3a:
0b:f5:e1:33:a2:f6:57:8f:2c:50:d3:e5:60:c6:e3:
21:47:ac:96:7b:e8:1a:05:c1:c4:33:ec:f5:02:2a:
4a:0a:f6:ee:3d:e1:8d:ec:00:2e:f9:23:51:28:b6:
f0:4e:e7:8f:1c:14:ad:0b:f0:64:92:30:b4:df:47:
4a:60:69:c1:43:1d:74:99:0f:73:15:1b:19:21:24:
a0:62:f2:55:fc:52:95:f6:8c:20:e8:4a:be:fc:27:
06:6c:2e:6c:ef:ad:70:ca:72:94:1d:63:9c:9a:fe:
f2:cd:9b:ef:ca:7f:97:9b:2b:1b:5e:ae:46:54:59:
f8:fc:ce:36:df:25:eb:2f:43:89:9f:62:72:44:cd:
3f:71:d3:28:a3:6a:a4:c1:80:47:c9:59:32:e0:90:
09:87:bd:b3:26:29:5b:18:41:1d:cc:53:51:a2:9a:
10:dc:f4:69:c3:1c:ce:2a:b9:d3:5d:33:e6:da:60:
ef:47:77:b9:60:13:2f:bb:c7:a1:be:5d:2b:45:7b:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AF:41:17:11:43:26:E8:82:39:2B:83:E3:1A:90:60:81:50:D9:26
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:1a:d4:fe:4f:7d:97:bb:90:4b:15:80:1d:bf:04:b2:dd:
b4:0e:0a:30:2d:51:a2:80:b6:66:b2:66:a7:12:d9:2f:06:74:
93:6f:50:9c:10:a9:64:e0:d4:ba:7a:e1:05:69:35:51:92:75:
f6:52:67:d9:94:78:55:fc:7f:6e:5f:0e:bc:a4:8f:c1:e1:ec:
a0:30:eb:eb:99:b4:eb:33:70:23:a6:c1:94:9b:f9:ac:96:bd:
e5:99:be:7d:e6:93:9d:8a:70:2e:2b:6c:c6:87:5c:71:56:4f:
a3:c1:3c:36:38:65:1b:67:f1:30:b8:73:c1:bb:04:0e:9c:f5:
3b:91:9f:33:21:c3:e1:66:47:9a:de:da:d3:bd:88:6d:40:88:
f2:6b:75:34:f9:c0:f8:21:13:07:3e:7e:5b:2e:ef:af:a4:37:
b4:b4:4d:74:a2:89:2b:8c:bf:e3:40:c7:35:51:3e:96:ed:02:
dc:a9:3f:29:b0:b0:3d:0d:85:17:9d:29:28:28:c2:f5:ef:cf:
fd:90:ec:2d:92:17:75:2b:0d:94:83:27:ff:cc:a8:14:d5:60:
ff:f5:74:45:68:ee:6c:f6:81:56:9a:c4:c2:23:3a:98:fc:77:
9d:a0:21:cb:c3:22:1a:d0:3c:88:07:64:41:35:cb:a1:8a:8a:
3e:59:8b:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlOUqJ0p1J8N3MSAozPj7v5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5
YmE5ZjEwHhcNMjUwOTE1MTcwMTAyWhcNMjUwOTE2MTcwMTAyWjAzMTEwLwYDVQQD
Eyg2N2FmNDExNzExNDMyNmU4ODIzOTJiODNlMzFhOTA2MDgxNTBkOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiImGgqKvMglWmbGqReU6jUj3Zwoq
EkfzI/Vjj08DpunfmyE7pJvXsXmF+M/OG0kJ5i/d0Cf03woB6joL9eEzovZXjyxQ
0+VgxuMhR6yWe+gaBcHEM+z1AipKCvbuPeGN7AAu+SNRKLbwTuePHBStC/BkkjC0
30dKYGnBQx10mQ9zFRsZISSgYvJV/FKV9owg6Eq+/CcGbC5s761wynKUHWOcmv7y
zZvvyn+XmysbXq5GVFn4/M423yXrL0OJn2JyRM0/cdMoo2qkwYBHyVky4JAJh72z
JilbGEEdzFNRopoQ3PRpwxzOKrnTXTPm2mDvR3e5YBMvu8ehvl0rRXsIQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGevQRcRQybogjkrg+MakGCBUNkmMB8GA1UdIwQY
MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt
NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy
LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXf0a1P5P
fZe7kEsVgB2/BLLdtA4KMC1RooC2ZrJmpxLZLwZ0k29QnBCpZODUunrhBWk1UZJ1
9lJn2ZR4Vfx/bl8OvKSPweHsoDDr65m06zNwI6bBlJv5rJa95Zm+feaTnYpwLits
xodccVZPo8E8NjhlG2fxMLhzwbsEDpz1O5GfMyHD4WZHmt7a072IbUCI8mt1NPnA
+CETBz5+Wy7vr6Q3tLRNdKKJK4y/40DHNVE+lu0C3Kk/KbCwPQ2FF50pKCjC9e/P
/ZDsLZIXdSsNlIMn/8yoFNVg//V0RWjubPaBVprEwiM6mPx3naAhy8MiGtA8iAdk
QTXLoYqKPlmLUA==
-----END CERTIFICATE-----
Generated at Mon Sep 15 19:54:11 2025 by rpki-client