Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
File: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft (raw, json)
Hash identifier: ozCyubZpaI5gDpcnbWzzI3TjdTfIC3UadWxAzBhZSzc=
Subject key identifier: 5F:FA:3E:96:99:F2:78:E5:89:72:6A:C4:4F:EA:B5:6F:01:26:0E:6E
Authority key identifier: 7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
Certificate issuer: /CN=7db8248601e33b83c01405f9be14793614859bd6
Certificate serial: 01992255DF4988D43A6808CD9243DE16FA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
Manifest number: 31
Signing time: Sun 07 Sep 2025 04:01:17 +0000
Manifest this update: Sun 07 Sep 2025 04:01:17 +0000
Manifest next update: Mon 08 Sep 2025 04:01:17 +0000
Files and hashes: 1: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl (hash: C1Wx5mRh9GFvtQJPMwaO0cQYepHeEH3qrsNMY3+hiDI=)
2: nRkMhAwrEmIGFSo5KtkPI4Qo5Co.roa (hash: DqkhFi8/nJkoAICivrur3pXP8/0mP1960uQN7oDPzao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:df:49:88:d4:3a:68:08:cd:92:43:de:16:fa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db8248601e33b83c01405f9be14793614859bd6
Validity
Not Before: Sep 7 04:01:17 2025 GMT
Not After : Sep 8 04:01:17 2025 GMT
Subject: CN=5ffa3e9699f278e589726ac44feab56f01260e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:6d:b9:b5:14:05:84:00:06:ba:db:b0:d0:
5d:a9:ed:f2:02:58:12:b2:5f:78:e2:72:9b:c9:4f:
b6:f4:9b:ab:9d:ba:26:fd:45:9d:4f:d8:de:97:2b:
48:c7:e1:50:b9:db:88:b8:d0:ef:a4:fd:33:fa:8b:
5d:5e:a4:42:84:7b:27:51:9e:66:f2:7f:04:dc:11:
6c:d9:c8:2b:85:4f:b0:b3:7c:86:f7:f7:00:b9:8b:
2a:82:08:f4:20:97:c4:11:41:82:65:2a:cd:95:92:
94:07:18:2f:1c:8d:c5:d9:a8:f5:f6:f6:63:07:85:
e4:be:bf:6f:b5:7e:9a:61:fe:fd:ea:f7:68:47:a2:
f2:79:88:02:86:42:2c:ed:45:90:5e:a6:18:d3:56:
7c:a9:e9:12:4e:c5:61:d1:98:25:c1:79:84:d8:d8:
93:f9:47:db:c2:bc:1c:f0:aa:c4:6b:05:01:bb:4f:
b7:9b:32:2e:84:d0:dd:99:ed:e0:35:6c:38:d8:c6:
b0:c1:8f:a3:55:a4:8f:bd:8d:dc:db:4d:5b:3d:be:
b7:8e:6f:ae:bd:c9:15:ff:a2:b7:8a:aa:b0:bd:92:
cd:f9:98:1e:c8:13:84:a5:2b:b0:93:08:7d:00:11:
29:4f:cb:bc:c8:61:3a:37:61:ea:80:0f:40:b6:d3:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:3E:96:99:F2:78:E5:89:72:6A:C4:4F:EA:B5:6F:01:26:0E:6E
X509v3 Authority Key Identifier:
keyid:7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3b:e7:e8:ea:ec:b2:4b:8b:97:3b:a7:d2:04:df:38:46:76:
17:ce:cf:7f:d5:4d:96:41:57:b0:1d:6c:e3:2d:c9:67:42:43:
63:09:ca:0b:69:9a:82:62:0e:aa:be:48:1d:7c:24:52:8b:4b:
c4:90:27:52:05:86:e1:a6:10:89:38:8c:8f:61:c0:22:fb:ea:
39:59:14:ae:02:09:46:45:1d:78:e8:d1:be:4c:e2:6b:7b:69:
92:ce:be:41:fb:c7:41:c0:14:a7:3e:a4:6a:89:40:ac:7c:15:
ae:bc:3c:2b:ab:32:9f:92:77:c6:d6:46:c0:92:e9:f4:99:91:
a2:15:8d:67:40:ea:15:e3:99:79:40:c2:a4:38:0d:f8:d1:36:
9f:30:dd:26:87:58:cb:3a:7e:9c:fd:71:36:5a:97:2c:44:26:
ef:8d:f7:30:82:7e:32:0e:27:b3:49:d5:f5:94:40:86:8a:88:
77:9d:fc:fd:8b:e1:99:a8:53:6b:54:7f:e4:b4:69:ce:96:1f:
64:d6:2d:bf:7c:fe:dc:3c:dc:7a:54:6f:04:2d:6b:cc:f7:ac:
c5:57:6f:37:b4:65:b1:d0:2b:0b:86:8b:18:98:be:7c:76:44:
00:04:23:fd:a1:80:86:23:bb:39:de:3b:85:d4:f0:b0:ac:86:
f9:53:6b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVd9JiNQ6aAjNkkPeFvqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYjgyNDg2MDFlMzNiODNjMDE0MDVmOWJlMTQ3OTM2MTQ4
NTliZDYwHhcNMjUwOTA3MDQwMTE3WhcNMjUwOTA4MDQwMTE3WjAzMTEwLwYDVQQD
Eyg1ZmZhM2U5Njk5ZjI3OGU1ODk3MjZhYzQ0ZmVhYjU2ZjAxMjYwZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNltubUUBYQABrrbsNBdqe3yAlgS
sl944nKbyU+29Jurnbom/UWdT9jelytIx+FQuduIuNDvpP0z+otdXqRChHsnUZ5m
8n8E3BFs2cgrhU+ws3yG9/cAuYsqggj0IJfEEUGCZSrNlZKUBxgvHI3F2aj19vZj
B4Xkvr9vtX6aYf796vdoR6LyeYgChkIs7UWQXqYY01Z8qekSTsVh0ZglwXmE2NiT
+Ufbwrwc8KrEawUBu0+3mzIuhNDdme3gNWw42MawwY+jVaSPvY3c201bPb63jm+u
vckV/6K3iqqwvZLN+ZgeyBOEpSuwkwh9ABEpT8u8yGE6N2HqgA9AttPDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/6PpaZ8njliXJqxE/qtW8BJg5uMB8GA1UdIwQY
MBaAFH24JIYB4zuDwBQF+b4UeTYUhZvWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJna2hnSGpPNFBBRkFYNXZoUjVOaFNGbTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84NmViODEtZjM2Mi00Zjc2LTgzYTUt
MGUyZGY5Njk1NTkyLzEvZmJna2hnSGpPNFBBRkFYNXZoUjVOaFNGbTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84NmViODEtZjM2Mi00Zjc2LTgzYTUtMGUyZGY5Njk1NTky
LzEvZmJna2hnSGpPNFBBRkFYNXZoUjVOaFNGbTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTvn6Ors
skuLlzun0gTfOEZ2F87Pf9VNlkFXsB1s4y3JZ0JDYwnKC2magmIOqr5IHXwkUotL
xJAnUgWG4aYQiTiMj2HAIvvqOVkUrgIJRkUdeOjRvkzia3tpks6+QfvHQcAUpz6k
aolArHwVrrw8K6syn5J3xtZGwJLp9JmRohWNZ0DqFeOZeUDCpDgN+NE2nzDdJodY
yzp+nP1xNlqXLEQm7433MIJ+Mg4ns0nV9ZRAhoqId538/YvhmahTa1R/5LRpzpYf
ZNYtv3z+3DzcelRvBC1rzPesxVdvN7RlsdArC4aLGJi+fHZEAAQj/aGAhiO7Od47
hdTwsKyG+VNr4Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:24 2025 by rpki-client