Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File: fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier: s2SDsJR1HtteowBRtARzv0NMzLKjlnleubc7jUBv1kQ=
Subject key identifier: CB:88:D0:C0:EA:1F:B3:FE:02:78:F7:6E:6C:CC:1C:5F:89:8A:81:80
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial: 0197C5017DA9E5E59601CB1611C00B8A480F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number: 1480
Signing time: Tue 01 Jul 2025 08:01:38 +0000
Manifest this update: Tue 01 Jul 2025 08:01:38 +0000
Manifest next update: Wed 02 Jul 2025 08:01:38 +0000
Files and hashes: 1: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (hash: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=)
2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: GULMFK3lwYwCCEcnT77Y9OKgGXhprTOIksFZSXeeK+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:7d:a9:e5:e5:96:01:cb:16:11:c0:0b:8a:48:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Validity
Not Before: Jul 1 08:01:38 2025 GMT
Not After : Jul 2 08:01:38 2025 GMT
Subject: CN=cb88d0c0ea1fb3fe0278f76e6ccc1c5f898a8180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:47:aa:4c:e2:4c:34:fe:c8:cf:bc:31:1e:
0d:6d:03:ee:02:1b:11:8d:0b:8f:22:83:ef:72:5e:
c8:03:86:a5:21:fa:cd:57:24:8c:71:a5:41:20:20:
4f:ac:0b:48:02:73:e4:ed:87:f8:29:fd:4c:1b:4f:
6f:3a:15:74:dc:b1:8f:a6:dd:11:6c:26:53:77:e1:
1d:43:45:a7:47:27:2f:0a:f5:88:79:7f:29:f0:8b:
e8:81:dd:43:27:fe:b7:92:53:e1:16:ca:7c:e5:91:
3b:82:5b:7b:75:0e:0d:95:f8:af:de:33:b7:43:e7:
51:dc:53:a1:d3:1d:25:80:99:3c:a3:ce:c6:cd:4c:
c7:2a:97:67:24:6e:10:b6:b5:22:ad:6f:d1:6f:e3:
fb:54:19:23:58:f3:2e:73:68:80:59:59:b9:f9:d9:
d9:3d:7f:c2:a3:8c:70:7b:1c:bf:4e:ca:fa:03:2f:
78:29:68:75:72:b8:f6:9d:73:d4:41:8f:87:b3:9c:
1e:8c:19:87:d3:f2:d8:e3:20:fb:1d:31:af:48:a3:
2f:f1:8e:7b:40:33:63:bc:fb:8a:1a:e3:92:5a:90:
3b:a7:3b:50:de:90:cf:90:2d:2c:49:62:e1:e4:e7:
ef:13:b5:22:c5:0b:1f:50:b2:0f:91:05:50:61:b9:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:D0:C0:EA:1F:B3:FE:02:78:F7:6E:6C:CC:1C:5F:89:8A:81:80
X509v3 Authority Key Identifier:
keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:b4:75:f8:b1:8c:d5:ee:9b:ad:59:ee:12:8f:f2:e1:8b:
39:3e:7e:d3:3b:c7:8a:01:18:96:ee:83:8c:f5:6c:39:8a:6a:
c9:ad:f8:b0:a9:9c:7d:3d:15:07:6d:ea:74:21:71:86:fb:7b:
f2:f1:2a:92:bd:a2:2a:11:fc:77:fb:12:a2:90:17:0e:86:ac:
ae:fd:f6:50:41:a8:cd:08:09:2a:90:9a:d4:05:e1:6f:cc:02:
41:6f:86:5f:d5:7f:92:c5:a0:2f:0f:ae:54:89:52:78:60:62:
21:26:38:52:0b:a9:e1:60:32:92:13:8b:5f:ad:d8:fc:82:51:
d3:69:2e:1f:61:c6:16:26:7a:49:3a:94:cd:36:5e:e1:b8:fe:
52:db:6c:06:b8:30:8e:93:7d:84:bc:6e:1f:58:3d:49:a6:c6:
20:93:e1:84:93:e5:1a:d2:ef:35:0b:d3:8c:56:d1:8d:51:a2:
fb:4d:2c:30:3c:c4:d4:c5:07:42:b3:0e:e4:77:3d:b4:24:db:
d8:20:d1:d9:a6:d2:39:cc:0a:18:08:8f:52:a2:06:d4:c5:c6:
eb:9a:29:1b:86:cb:5e:f8:b5:b5:04:4e:07:66:0f:b1:0b:e2:
ea:b5:44:46:5f:b9:b7:3b:6a:93:a0:1a:16:39:48:93:2e:9c:
57:f4:97:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFAX2p5eWWAcsWEcALikgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjdjZmQ2Yzg4MjZhNjdmNjQyYTM3M2QxMzE5NTUzMDhk
OWMxY2EwHhcNMjUwNzAxMDgwMTM4WhcNMjUwNzAyMDgwMTM4WjAzMTEwLwYDVQQD
EyhjYjg4ZDBjMGVhMWZiM2ZlMDI3OGY3NmU2Y2NjMWM1Zjg5OGE4MTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HNHqkziTDT+yM+8MR4NbQPuAhsR
jQuPIoPvcl7IA4alIfrNVySMcaVBICBPrAtIAnPk7Yf4Kf1MG09vOhV03LGPpt0R
bCZTd+EdQ0WnRycvCvWIeX8p8Ivogd1DJ/63klPhFsp85ZE7glt7dQ4Nlfiv3jO3
Q+dR3FOh0x0lgJk8o87GzUzHKpdnJG4QtrUirW/Rb+P7VBkjWPMuc2iAWVm5+dnZ
PX/Co4xwexy/Tsr6Ay94KWh1crj2nXPUQY+Hs5wejBmH0/LY4yD7HTGvSKMv8Y57
QDNjvPuKGuOSWpA7pztQ3pDPkC0sSWLh5OfvE7UixQsfULIPkQVQYbmMuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuI0MDqH7P+Anj3bmzMHF+JioGAMB8GA1UdIwQY
MBaAFH33z9bIgmpn9kKjc9ExlVMI2cHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAt
YmYxYzVjYzM2YjY2LzEvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAtYmYxYzVjYzM2YjY2
LzEvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQm0dfix
jNXum61Z7hKP8uGLOT5+0zvHigEYlu6DjPVsOYpqya34sKmcfT0VB23qdCFxhvt7
8vEqkr2iKhH8d/sSopAXDoasrv32UEGozQgJKpCa1AXhb8wCQW+GX9V/ksWgLw+u
VIlSeGBiISY4Ugup4WAykhOLX63Y/IJR02kuH2HGFiZ6STqUzTZe4bj+UttsBrgw
jpN9hLxuH1g9SabGIJPhhJPlGtLvNQvTjFbRjVGi+00sMDzE1MUHQrMO5Hc9tCTb
2CDR2abSOcwKGAiPUqIG1MXG65opG4bLXvi1tQROB2YPsQvi6rVERl+5tztqk6Aa
FjlIky6cV/SXuA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:10:29 2025 by rpki-client