Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
File: fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json)
Hash identifier: p7OdT58Ofu1b3RD2L0BRgYa+m5YxQ5ibDZLKeoM4img=
Subject key identifier: E7:E1:6C:3A:F0:CB:C8:79:3B:0F:9E:14:BE:41:1F:95:85:E1:78:AC
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial: 019922FA72F3212311A2C3CEB30507995964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:02 +0000
Manifest this update: Sun 07 Sep 2025 07:01:02 +0000
Manifest next update: Mon 08 Sep 2025 07:01:02 +0000
Files and hashes: 1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=)
2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: HgfVvgahiUgjD2qFuRdZwtlV+8UD6tNtZtjub4BFaV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:72:f3:21:23:11:a2:c3:ce:b3:05:07:99:59:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
Validity
Not Before: Sep 7 07:01:02 2025 GMT
Not After : Sep 8 07:01:02 2025 GMT
Subject: CN=e7e16c3af0cbc8793b0f9e14be411f9585e178ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:6d:e1:c5:a3:f6:09:aa:69:86:c6:c7:11:
7c:70:c8:af:ec:fd:88:8f:90:95:3a:b9:5b:1c:22:
32:26:51:56:9f:9c:40:ee:30:2a:14:7e:60:3a:c8:
5c:a6:dc:c4:c8:c6:eb:03:c5:12:b8:92:cd:ec:e7:
d8:de:4f:9b:15:78:e3:6e:da:0e:e6:c8:8f:4e:9e:
6e:95:c3:bd:c2:03:88:e2:51:b2:75:17:ca:e7:02:
f6:74:cb:ef:ba:49:ab:dc:d2:62:8f:f9:ab:b9:f0:
5a:50:7f:14:12:04:4b:47:bc:c3:80:1b:82:b8:49:
4b:9d:dd:82:3e:c8:85:b7:5e:77:c6:11:09:11:a8:
0a:aa:82:f9:f3:86:d6:e7:30:dd:b1:8a:ab:ef:21:
a8:00:3c:bc:53:f1:87:a4:55:e2:e3:54:38:6d:2b:
44:94:0f:c0:90:af:c7:13:d4:9a:fb:6e:d3:b0:c9:
dd:3d:d2:29:8d:15:ec:95:1a:b8:4d:b0:69:68:a7:
fe:a9:aa:11:80:73:1b:75:a3:1e:c2:ff:48:c6:26:
09:9f:41:ea:f0:ea:fe:1c:7b:1d:40:a7:df:39:cc:
3a:f6:3b:e2:28:48:8c:5f:cf:48:3a:30:63:3e:5c:
aa:b3:51:7b:e2:e8:02:01:8e:53:b0:1b:f1:95:b5:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E1:6C:3A:F0:CB:C8:79:3B:0F:9E:14:BE:41:1F:95:85:E1:78:AC
X509v3 Authority Key Identifier:
keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:57:9c:1e:4f:cb:d6:21:13:50:5c:ca:3f:f2:af:ae:72:b6:
e7:d7:bd:1c:ce:ec:2e:56:82:06:6d:01:14:53:f6:db:fc:07:
10:a0:d1:b1:56:5e:7e:32:bc:b5:63:b2:63:0c:1d:e6:3c:91:
bd:f3:1d:fc:15:e2:a5:92:19:e2:e4:d5:3e:79:c2:55:80:58:
6c:0a:be:d8:eb:98:79:b2:d2:6e:f7:02:3c:f7:50:e9:64:af:
b4:33:73:e0:a0:ef:61:1a:d6:0f:5d:ed:ba:23:fb:f0:8f:d6:
cf:44:9b:44:0a:19:07:d1:69:00:cb:51:6f:16:3c:dc:5d:5a:
19:5e:2f:86:cc:7d:95:f9:9d:e0:c7:86:c4:64:51:3e:a1:9a:
f7:d6:da:6e:9f:6a:e0:0d:6d:3e:be:52:5c:cf:b3:41:fa:a3:
5d:ac:88:1e:73:06:75:d8:5a:70:f7:9a:c0:98:20:13:9d:77:
5a:97:8a:1f:2d:fc:13:aa:6a:53:67:95:4f:72:69:a3:24:2d:
aa:09:26:12:64:33:f2:44:92:06:db:46:29:d9:8e:fd:56:08:
02:84:dd:74:a3:2c:a3:c3:3f:18:0a:b0:7d:d8:ed:e8:f3:9f:
7e:4f:f3:c3:f9:0d:02:c9:05:02:ca:a1:8d:4a:e5:3d:69:c5:
a2:f1:6e:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+nLzISMRosPOswUHmVlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGY4MDkxMzFlZTU2NTMxOTM5ZDA1ZjYwNzI3MWJkZjAx
ZDE5YjUwHhcNMjUwOTA3MDcwMTAyWhcNMjUwOTA4MDcwMTAyWjAzMTEwLwYDVQQD
EyhlN2UxNmMzYWYwY2JjODc5M2IwZjllMTRiZTQxMWY5NTg1ZTE3OGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TFt4cWj9gmqaYbGxxF8cMiv7P2I
j5CVOrlbHCIyJlFWn5xA7jAqFH5gOshcptzEyMbrA8USuJLN7OfY3k+bFXjjbtoO
5siPTp5ulcO9wgOI4lGydRfK5wL2dMvvukmr3NJij/mrufBaUH8UEgRLR7zDgBuC
uElLnd2CPsiFt153xhEJEagKqoL584bW5zDdsYqr7yGoADy8U/GHpFXi41Q4bStE
lA/AkK/HE9Sa+27TsMndPdIpjRXslRq4TbBpaKf+qaoRgHMbdaMewv9IxiYJn0Hq
8Or+HHsdQKffOcw69jviKEiMX89IOjBjPlyqs1F74ugCAY5TsBvxlbXlYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfhbDrwy8h5Ow+eFL5BH5WF4XisMB8GA1UdIwQY
MBaAFH3fgJEx7lZTGTnQX2Bycb3wHRm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEt
Yjk0ZWI5ZTZiOWViLzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEtYjk0ZWI5ZTZiOWVi
LzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFecHk/L
1iETUFzKP/KvrnK259e9HM7sLlaCBm0BFFP22/wHEKDRsVZefjK8tWOyYwwd5jyR
vfMd/BXipZIZ4uTVPnnCVYBYbAq+2OuYebLSbvcCPPdQ6WSvtDNz4KDvYRrWD13t
uiP78I/Wz0SbRAoZB9FpAMtRbxY83F1aGV4vhsx9lfmd4MeGxGRRPqGa99babp9q
4A1tPr5SXM+zQfqjXayIHnMGddhacPeawJggE513WpeKHy38E6pqU2eVT3JpoyQt
qgkmEmQz8kSSBttGKdmO/VYIAoTddKMso8M/GAqwfdjt6POffk/zw/kNAskFAsqh
jUrlPWnFovFuqg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:01 2025 by rpki-client