Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: 0Uj4R1/0/AX/lPsgZ3JDUjDjmPWzJwNqx81rYGPLsVw=
Subject key identifier: 4F:CC:89:EE:66:38:12:69:2C:4D:20:5B:5D:76:DF:25:AC:A0:AD:B4
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 01992C6B60EEC58EF84CFFEA2517E2DA896E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0AE5
Signing time: Tue 09 Sep 2025 03:00:58 +0000
Manifest this update: Tue 09 Sep 2025 03:00:58 +0000
Manifest next update: Wed 10 Sep 2025 03:00:58 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: upHF5UgBjVo0yIjcVMJTMxqaxlrqMgRm5WAbmLLJPU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:60:ee:c5:8e:f8:4c:ff:ea:25:17:e2:da:89:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Sep 9 03:00:58 2025 GMT
Not After : Sep 10 03:00:58 2025 GMT
Subject: CN=4fcc89ee663812692c4d205b5d76df25aca0adb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:ac:e3:64:dc:96:87:44:6b:eb:ca:5a:e0:
d4:81:c0:94:94:f5:bf:50:f1:91:9a:e5:7c:b3:6c:
af:a7:f0:56:c8:8d:3b:48:aa:1a:91:4a:80:ca:f3:
08:80:dd:e5:c8:fc:74:4a:ab:f4:c1:62:42:68:1f:
cb:33:35:26:ab:a3:1c:78:6c:7c:39:53:45:22:61:
a8:1e:da:72:1b:b4:67:d1:8c:3f:65:81:36:11:00:
8c:80:da:d2:85:57:0f:48:39:c3:d9:b1:11:09:2b:
d9:7b:d2:ec:37:73:93:0b:4e:01:fc:37:14:76:50:
80:79:0f:36:2c:a3:97:1b:15:19:ad:61:53:01:a7:
d9:f4:ad:2f:8d:49:a9:1a:aa:36:66:9d:69:a5:4e:
ff:72:0d:b3:8b:50:cd:98:99:e4:c8:e2:04:4d:48:
64:fb:cf:ca:2a:42:b4:75:35:c1:ee:61:e2:a6:bd:
b3:d4:78:95:20:4e:03:fc:4e:92:16:5d:39:60:53:
a6:be:5a:8b:2a:2c:c5:92:54:d5:57:be:f8:0b:5c:
f3:c1:74:fa:a8:82:5a:60:52:ef:b3:df:bc:d8:df:
3d:04:67:6b:01:68:8f:68:42:19:ba:54:ba:20:df:
5e:33:09:43:26:f9:2d:e0:e7:d4:44:0d:9c:a2:bf:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CC:89:EE:66:38:12:69:2C:4D:20:5B:5D:76:DF:25:AC:A0:AD:B4
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ca:16:65:f6:ee:b6:45:1a:38:2f:a4:99:57:b4:83:87:c5:
8f:40:c4:19:09:a1:3d:af:5c:78:4f:00:57:4a:f5:be:56:84:
13:5e:0d:74:ae:4d:b4:64:0b:3b:e1:f3:67:7d:8d:a8:b5:7d:
29:1b:48:9d:01:83:4c:6b:58:de:53:76:86:aa:77:79:8f:de:
c1:77:d9:a9:0d:3d:a2:1a:f6:db:64:63:59:23:dd:c2:72:5b:
8f:b3:da:2c:db:c3:2e:7e:e8:4c:0c:8d:1b:02:41:27:da:ee:
33:ad:cf:e6:2b:5d:cd:a0:8f:23:8c:5b:f9:48:a1:79:76:5c:
b1:86:39:b8:6c:d4:08:63:a9:4d:cf:84:58:60:9f:4c:18:53:
72:dc:9e:8e:a2:7e:d0:41:d1:f9:a8:35:eb:d5:27:52:cf:ac:
95:a4:5e:21:e0:38:5e:c7:dd:14:7b:67:4e:5a:47:d9:70:d2:
a5:88:e9:6e:96:35:fc:95:a3:87:1f:4f:46:4b:dc:f8:6d:bd:
76:29:32:34:da:b4:10:e9:fd:2f:f3:24:5e:a2:c5:fa:ca:33:
6e:92:a7:e9:a9:5d:00:98:0e:04:f6:e3:9e:99:ff:e8:07:8d:
d9:be:35:df:02:ac:b6:51:6c:1a:7b:24:f7:ed:e0:a4:62:08:
a4:af:3a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksa2DuxY74TP/qJRfi2oluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTY4MDI4ZWMwZGFiNjY4YTY3ZDViZjZmNTM1OGNhYWJl
MzM3YTgwHhcNMjUwOTA5MDMwMDU4WhcNMjUwOTEwMDMwMDU4WjAzMTEwLwYDVQQD
Eyg0ZmNjODllZTY2MzgxMjY5MmM0ZDIwNWI1ZDc2ZGYyNWFjYTBhZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnWs42TclodEa+vKWuDUgcCUlPW/
UPGRmuV8s2yvp/BWyI07SKoakUqAyvMIgN3lyPx0Sqv0wWJCaB/LMzUmq6MceGx8
OVNFImGoHtpyG7Rn0Yw/ZYE2EQCMgNrShVcPSDnD2bERCSvZe9LsN3OTC04B/DcU
dlCAeQ82LKOXGxUZrWFTAafZ9K0vjUmpGqo2Zp1ppU7/cg2zi1DNmJnkyOIETUhk
+8/KKkK0dTXB7mHipr2z1HiVIE4D/E6SFl05YFOmvlqLKizFklTVV774C1zzwXT6
qIJaYFLvs9+82N89BGdrAWiPaEIZulS6IN9eMwlDJvkt4OfURA2cor/FsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/Mie5mOBJpLE0gW1123yWsoK20MB8GA1UdIwQY
MBaAFH8WgCjsDatmimfVv29TWMqr4zeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUt
N2ZhZGY1MGEyZTM3LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUtN2ZhZGY1MGEyZTM3
LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMoWZfbu
tkUaOC+kmVe0g4fFj0DEGQmhPa9ceE8AV0r1vlaEE14NdK5NtGQLO+HzZ32NqLV9
KRtInQGDTGtY3lN2hqp3eY/ewXfZqQ09ohr222RjWSPdwnJbj7PaLNvDLn7oTAyN
GwJBJ9ruM63P5itdzaCPI4xb+UiheXZcsYY5uGzUCGOpTc+EWGCfTBhTctyejqJ+
0EHR+ag169UnUs+slaReIeA4XsfdFHtnTlpH2XDSpYjpbpY1/JWjhx9PRkvc+G29
dikyNNq0EOn9L/MkXqLF+sozbpKn6aldAJgOBPbjnpn/6AeN2b413wKstlFsGnsk
9+3gpGIIpK86tw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:58:09 2025 by rpki-client