Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: S+eeTK9174l674O+ZbDw1LSVKTUWL/o3KOoZKnnBAi4=
Subject key identifier: 7A:71:A4:85:9D:47:0D:40:8B:E9:4A:9F:A1:4F:04:7D:6E:14:99:24
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 0199FC584ED4C1ECDDD441C40A7F814985E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 0FE2
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: C0UCHHFHldsZPpibP52IUvKoQC91pUrWx/2zOltLJKU=)
2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4e:d4:c1:ec:dd:d4:41:c4:0a:7f:81:49:85:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=7a71a4859d470d408be94a9fa14f047d6e149924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:c8:48:bf:59:c8:bb:78:47:ff:98:98:d4:
5f:47:02:ed:64:22:96:d2:59:f2:6e:ed:ef:33:ca:
b7:32:f9:08:85:14:24:1e:cf:e6:9f:b8:31:20:6a:
45:89:26:ae:fc:cd:c4:f5:cd:cc:e9:e0:42:6f:37:
a5:3e:52:81:05:e8:05:44:dd:ae:1f:66:c1:2a:8c:
ce:52:6a:0a:d1:31:c2:12:8f:7d:21:31:86:d2:7b:
cd:b1:1a:00:dc:3d:e4:2e:b6:dd:8d:f5:cc:54:89:
71:2d:eb:ea:79:da:0f:da:b2:8d:75:73:4d:00:21:
c8:df:37:55:2a:2c:67:09:27:eb:66:b7:bb:9c:5c:
90:b0:4d:3b:ca:b0:b2:48:49:25:84:ee:db:5d:b4:
65:38:4c:4d:2a:ab:0d:84:e7:7b:4a:ec:ea:62:15:
51:e1:00:26:d4:d7:c8:8f:71:56:1f:b0:82:f9:ec:
0e:d7:f6:da:20:ac:08:a2:f7:5d:dc:80:15:40:32:
72:e1:59:4d:26:50:71:67:0d:12:cb:c3:0e:38:c2:
b7:8e:df:88:a1:0c:75:c0:d5:1e:1b:5f:5b:fd:14:
62:97:51:26:c0:89:c1:c5:d9:72:2d:fb:ec:83:3c:
f0:b6:f6:8e:f1:8b:47:81:d6:db:90:2e:80:b4:31:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:71:A4:85:9D:47:0D:40:8B:E9:4A:9F:A1:4F:04:7D:6E:14:99:24
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4a:61:a3:08:55:1c:83:0d:79:b5:e3:9e:0c:d5:67:23:d0:
2b:f2:01:97:f9:91:81:4f:bd:1b:0d:c8:b6:f4:2d:09:a2:81:
bd:7a:bb:63:20:4f:b0:f7:a0:73:a0:c2:2c:17:98:b8:3b:49:
f3:77:5c:fa:b4:d2:54:c1:08:1a:14:d3:2f:e7:1f:63:ca:a1:
5e:6b:62:4f:62:e9:e1:6d:fd:3d:23:96:a3:c2:a8:8c:8c:a9:
cc:f1:6a:01:8f:cf:f2:02:22:f2:84:99:c8:b3:ff:63:19:ce:
64:c2:76:c2:e8:ac:21:11:ba:f7:3f:bd:db:36:9d:61:4b:02:
bb:ca:81:b4:73:0d:f1:7d:70:49:e7:bd:56:97:7e:d7:a3:2a:
19:1a:25:0c:d7:d2:e0:5f:f2:d1:5f:bc:94:f2:ba:45:24:0a:
b8:ed:ea:43:26:44:95:76:91:4b:01:13:71:91:87:06:1c:aa:
d7:73:f3:ea:03:89:46:34:97:46:24:49:20:69:6c:21:c8:3f:
b2:61:aa:76:b9:aa:87:40:6d:1b:fd:84:13:24:bd:b2:8d:b7:
41:7d:9f:f0:4a:02:59:09:4a:0f:b3:8f:a3:66:d2:52:a5:4d:
47:da:0b:ae:d3:03:69:8a:28:fd:8c:e0:a5:74:26:21:70:a7:
9b:16:a1:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WE7Uwezd1EHECn+BSYXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2NiMjk3OGJiNTRlYjU1N2NhZTNmZmIzNWU0NmFjNGQ1
YzIyYmYwHhcNMjUxMDE5MTIwMTA5WhcNMjUxMDIwMTIwMTA5WjAzMTEwLwYDVQQD
Eyg3YTcxYTQ4NTlkNDcwZDQwOGJlOTRhOWZhMTRmMDQ3ZDZlMTQ5OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0PISL9ZyLt4R/+YmNRfRwLtZCKW
0lnybu3vM8q3MvkIhRQkHs/mn7gxIGpFiSau/M3E9c3M6eBCbzelPlKBBegFRN2u
H2bBKozOUmoK0THCEo99ITGG0nvNsRoA3D3kLrbdjfXMVIlxLevqedoP2rKNdXNN
ACHI3zdVKixnCSfrZre7nFyQsE07yrCySEklhO7bXbRlOExNKqsNhOd7SuzqYhVR
4QAm1NfIj3FWH7CC+ewO1/baIKwIovdd3IAVQDJy4VlNJlBxZw0Sy8MOOMK3jt+I
oQx1wNUeG19b/RRil1EmwInBxdlyLfvsgzzwtvaO8YtHgdbbkC6AtDHi8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpxpIWdRw1Ai+lKn6FPBH1uFJkkMB8GA1UdIwQY
MBaAFH18speLtU61V8rj/7NeRqxNXCK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5Mzct
MjRjM2Q5ZTI1NDAxLzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5MzctMjRjM2Q5ZTI1NDAx
LzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkphowhV
HIMNebXjngzVZyPQK/IBl/mRgU+9Gw3ItvQtCaKBvXq7YyBPsPegc6DCLBeYuDtJ
83dc+rTSVMEIGhTTL+cfY8qhXmtiT2Lp4W39PSOWo8KojIypzPFqAY/P8gIi8oSZ
yLP/YxnOZMJ2wuisIRG69z+92zadYUsCu8qBtHMN8X1wSee9Vpd+16MqGRolDNfS
4F/y0V+8lPK6RSQKuO3qQyZElXaRSwETcZGHBhyq13Pz6gOJRjSXRiRJIGlsIcg/
smGqdrmqh0BtG/2EEyS9so23QX2f8EoCWQlKD7OPo2bSUqVNR9oLrtMDaYoo/Yzg
pXQmIXCnmxah7g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:49 2025 by rpki-client