Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: Z8ln0abVEkebRAbrcw3KJ1JTrPHeURwaCpOvRiiAFkA=
Subject key identifier: B5:3A:FD:C6:14:F6:C0:5D:7D:10:28:96:D0:1C:DD:43:3C:39:80:52
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 0198D583E6AB7A0B473BAAFA674357CFB5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 0674
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: PXHqcgE1ZV74HflYmkYPZnsH3xTmzToX3u6Ua8mHyu0=)
2: gZtu_mvpfnIEYpfX3O3Zhm8l3oY.roa (hash: eNPnQnlHd8yy83e7BBZ3vW4/qWGTiwqTNCUFgABwjBU=)
3: tJp6RAZ2Y3Z3o2R75yur_W5Ex-w.roa (hash: GGPR+7RZv9vuHEdD+t//WBPxSiCJToRwFhnk1FKFqWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e6:ab:7a:0b:47:3b:aa:fa:67:43:57:cf:b5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=b53afdc614f6c05d7d102896d01cdd433c398052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:8e:3c:2f:0f:fc:1e:5f:35:d7:d9:c4:81:
57:eb:a4:0c:19:ea:9f:58:92:ab:47:4e:32:9b:18:
c6:ab:67:8c:a8:04:51:39:1b:2c:1e:da:3f:7a:e7:
dc:12:66:3a:bf:63:ef:d6:26:87:f9:71:ee:34:53:
18:03:4b:19:00:a3:3d:fa:71:70:72:0f:7e:3c:a0:
2b:22:86:0e:a2:22:80:b5:44:1c:c3:1a:a6:18:f4:
87:bd:be:83:ff:26:33:b1:bb:68:0f:2e:eb:9b:4d:
04:7a:66:06:98:51:2f:e7:1d:45:84:5e:62:2a:86:
c9:5d:b0:29:52:21:02:8e:15:01:37:3e:37:90:dc:
8e:38:21:79:2c:40:ab:65:4c:73:7b:b6:a4:71:5b:
55:a0:29:f0:f2:fd:e8:b0:3d:df:0b:56:54:a0:95:
50:27:11:c2:f3:f5:f8:d9:33:3c:2f:16:95:95:53:
f6:ed:a0:18:6c:98:8e:ba:d0:53:b5:19:9f:2c:a0:
1c:15:e4:f7:47:30:d0:d5:9d:bb:89:b4:41:31:92:
7e:62:8d:0d:15:2a:18:78:1d:58:e5:fb:a5:32:68:
11:a3:ac:7b:9e:3a:46:6d:87:a2:6a:50:aa:62:a9:
e4:47:d1:b0:2d:c2:6f:a1:41:3a:e9:75:6e:ed:73:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:FD:C6:14:F6:C0:5D:7D:10:28:96:D0:1C:DD:43:3C:39:80:52
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ba:f0:80:d8:f5:8c:44:85:90:10:7e:3e:f2:61:a8:57:9a:
08:39:c2:67:e2:8d:1a:3d:3a:fe:91:cf:36:ae:2f:06:c7:15:
40:e8:f5:07:b4:0a:7e:0c:93:f1:76:40:17:5a:a7:4d:5f:59:
5c:5d:4f:c3:5c:d9:57:a9:1d:bb:48:a3:75:e3:c2:75:fe:a6:
59:68:78:6e:99:4f:8c:a0:46:b8:2f:1d:cc:da:00:73:ad:54:
96:20:6d:18:3f:30:85:76:e1:77:8f:32:6f:5b:09:ba:dc:c0:
e9:12:9a:d5:50:97:9d:b9:ef:ec:da:02:9c:c4:38:32:ca:c8:
2d:cb:43:95:57:ac:59:26:aa:91:38:0c:d2:25:a5:97:0f:97:
5e:bf:2c:c2:7c:70:d0:a9:25:32:49:f4:9d:36:3f:d9:d6:c4:
9b:17:89:9b:70:4e:b7:21:6c:0a:7c:4f:d9:68:59:c8:65:7c:
56:c0:aa:b0:4d:fc:92:c4:3e:12:89:9c:e1:08:d9:4f:35:a9:
19:d3:3d:4e:e8:ff:25:00:ac:61:c3:1a:43:4d:a4:c9:18:42:
03:4c:a4:a1:4f:99:96:ea:44:74:9f:0b:40:8a:22:7f:ab:a5:
11:a3:23:ee:3d:5c:b6:a7:37:85:c3:49:6a:eb:6c:4f:48:43:
8f:20:a1:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+aregtHO6r6Z0NXz7X0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTE0MzI5YjZjMWU2OTUwMTFhODI0MDZmN2FmNDhmNGJi
MTBhZDQwHhcNMjUwODIzMDYwMDQ3WhcNMjUwODI0MDYwMDQ3WjAzMTEwLwYDVQQD
EyhiNTNhZmRjNjE0ZjZjMDVkN2QxMDI4OTZkMDFjZGQ0MzNjMzk4MDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0myOPC8P/B5fNdfZxIFX66QMGeqf
WJKrR04ymxjGq2eMqARRORssHto/eufcEmY6v2Pv1iaH+XHuNFMYA0sZAKM9+nFw
cg9+PKArIoYOoiKAtUQcwxqmGPSHvb6D/yYzsbtoDy7rm00EemYGmFEv5x1FhF5i
KobJXbApUiECjhUBNz43kNyOOCF5LECrZUxze7akcVtVoCnw8v3osD3fC1ZUoJVQ
JxHC8/X42TM8LxaVlVP27aAYbJiOutBTtRmfLKAcFeT3RzDQ1Z27ibRBMZJ+Yo0N
FSoYeB1Y5fulMmgRo6x7njpGbYeialCqYqnkR9GwLcJvoUE66XVu7XNG7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU6/cYU9sBdfRAoltAc3UM8OYBSMB8GA1UdIwQY
MBaAFD/hQym2weaVARqCQG969I9LsQrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQt
YzNkNTdlMjM4N2NhLzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQtYzNkNTdlMjM4N2Nh
LzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7rwgNj1
jESFkBB+PvJhqFeaCDnCZ+KNGj06/pHPNq4vBscVQOj1B7QKfgyT8XZAF1qnTV9Z
XF1Pw1zZV6kdu0ijdePCdf6mWWh4bplPjKBGuC8dzNoAc61UliBtGD8whXbhd48y
b1sJutzA6RKa1VCXnbnv7NoCnMQ4MsrILctDlVesWSaqkTgM0iWllw+XXr8swnxw
0KklMkn0nTY/2dbEmxeJm3BOtyFsCnxP2WhZyGV8VsCqsE38ksQ+Eomc4QjZTzWp
GdM9Tuj/JQCsYcMaQ02kyRhCA0ykoU+ZlupEdJ8LQIoif6ulEaMj7j1ctqc3hcNJ
autsT0hDjyChWw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:51 2025 by rpki-client