Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: 01lyfDhVahPM4E/cAS3GOrucMd/qtbbMw7sgzqQ4pos=
Subject key identifier: 22:81:F6:82:54:05:2A:22:A0:C7:8F:4A:B3:A4:84:38:E9:E5:ED:E1
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 0198D54EA0004952EBD31D707E87515D854F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: quWY7RNGumXAgpeuXAJf8FJs124ECFz71a3pi83HVrA=)
2: oc8JdJXemfH1vBBwa9gjuC7ZzP8.roa (hash: uxtVzPlkNCLudyDBzCoWRWmDXs6tfGV7X2Z5QJKK/Eg=)
3: r4X2HvAwh5ygol1cL2nGNDVz3U4.roa (hash: 7aCXdpb3SzbFP3HJ9KQNb5y78LcqzI5vEIV6FBttc2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a0:00:49:52:eb:d3:1d:70:7e:87:51:5d:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=2281f68254052a22a0c78f4ab3a48438e9e5ede1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:70:de:2b:f6:00:ac:ea:26:f8:c4:71:9a:
3f:95:53:a5:e5:8b:79:40:dd:1c:33:a1:08:4e:0f:
e6:20:54:86:98:7a:29:3e:b0:bb:9b:07:1e:8c:2b:
df:6b:a0:f8:51:6a:3d:67:c6:b4:e1:ec:c8:97:0f:
57:14:4c:20:83:a4:d3:a2:44:c6:90:be:1e:8c:b1:
a0:bc:71:d0:69:c2:cf:87:e7:51:cd:83:50:9b:8d:
39:96:1e:3a:ab:95:57:9c:93:29:6e:bb:3b:af:9a:
aa:2d:75:17:62:2a:57:a0:15:49:75:a7:7a:b8:65:
4a:0c:af:8a:fc:a2:dd:3b:57:e9:16:d7:2b:a9:92:
a7:fa:3c:f1:95:d3:97:fb:34:ab:bd:5d:cd:0b:72:
b9:1e:ad:50:bc:74:38:ae:b6:65:30:cd:c5:0a:a8:
ef:45:99:27:cc:e0:85:7c:6d:32:59:9e:15:35:ac:
ff:3f:38:c8:db:31:d2:2c:da:99:3c:3f:76:72:15:
b4:5f:e2:93:33:2f:39:e3:f1:7f:06:f6:34:10:6e:
f1:f3:95:f7:26:80:1f:0e:ac:57:48:ca:5d:9f:0c:
ee:27:f9:6a:8f:8c:59:de:bb:6c:7d:cc:29:0d:31:
82:11:56:03:12:15:50:36:c1:46:59:f8:65:6b:44:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:81:F6:82:54:05:2A:22:A0:C7:8F:4A:B3:A4:84:38:E9:E5:ED:E1
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:60:59:57:0f:3a:79:ea:e6:89:13:02:3a:79:30:e0:2c:b4:
41:78:50:77:5f:98:ac:47:12:72:7e:3f:14:e3:22:3e:42:88:
48:38:00:da:5d:6d:87:df:21:97:5c:2c:44:c8:3a:30:e7:9c:
22:a3:27:c7:9e:55:d8:8c:19:48:85:3e:bc:1b:95:62:9a:e2:
01:26:4b:b4:8c:10:34:1a:88:f0:a6:5a:b3:24:53:d8:aa:1a:
b9:a9:a8:23:84:d3:57:b1:e1:b2:26:5c:1e:e7:c1:d5:2e:c5:
47:52:23:8b:49:cc:56:0e:28:ae:2f:ee:c0:f0:df:3a:21:04:
e2:77:4c:cb:25:b8:3e:f2:0c:63:fd:5f:06:fb:50:40:54:bd:
59:56:97:2a:99:8e:64:82:a6:ea:59:f5:35:7c:47:52:04:80:
ba:62:bf:9a:d6:db:21:39:3c:3b:4a:a9:bc:58:64:d2:e1:f6:
21:ae:eb:f7:29:ae:3c:02:a3:97:7a:27:b6:51:60:2f:b0:2c:
b1:5c:9e:6e:1a:8f:ac:a9:95:08:28:22:0d:b4:f2:ec:2f:0b:
98:30:ab:b6:35:b6:fd:b9:cb:eb:ab:da:e1:43:4b:29:39:8d:
33:8c:2f:3d:17:04:c9:95:cb:9b:4d:5f:54:ab:ef:0a:dd:7f:
8e:87:6d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqAASVLr0x1wfodRXYVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz
ZTM4NjkwHhcNMjUwODIzMDUwMjM2WhcNMjUwODI0MDUwMjM2WjAzMTEwLwYDVQQD
EygyMjgxZjY4MjU0MDUyYTIyYTBjNzhmNGFiM2E0ODQzOGU5ZTVlZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzThw3iv2AKzqJvjEcZo/lVOl5Yt5
QN0cM6EITg/mIFSGmHopPrC7mwcejCvfa6D4UWo9Z8a04ezIlw9XFEwgg6TTokTG
kL4ejLGgvHHQacLPh+dRzYNQm405lh46q5VXnJMpbrs7r5qqLXUXYipXoBVJdad6
uGVKDK+K/KLdO1fpFtcrqZKn+jzxldOX+zSrvV3NC3K5Hq1QvHQ4rrZlMM3FCqjv
RZknzOCFfG0yWZ4VNaz/PzjI2zHSLNqZPD92chW0X+KTMy854/F/BvY0EG7x85X3
JoAfDqxXSMpdnwzuJ/lqj4xZ3rtsfcwpDTGCEVYDEhVQNsFGWfhla0TsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKB9oJUBSoioMePSrOkhDjp5e3hMB8GA1UdIwQY
MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt
NTQ4NTY4MmEwNWY1LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1
LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmBZVw86
eermiRMCOnkw4Cy0QXhQd1+YrEcScn4/FOMiPkKISDgA2l1th98hl1wsRMg6MOec
IqMnx55V2IwZSIU+vBuVYpriASZLtIwQNBqI8KZasyRT2KoauamoI4TTV7HhsiZc
HufB1S7FR1Iji0nMVg4ori/uwPDfOiEE4ndMyyW4PvIMY/1fBvtQQFS9WVaXKpmO
ZIKm6ln1NXxHUgSAumK/mtbbITk8O0qpvFhk0uH2Ia7r9ymuPAKjl3ontlFgL7As
sVyebhqPrKmVCCgiDbTy7C8LmDCrtjW2/bnL66va4UNLKTmNM4wvPRcEyZXLm01f
VKvvCt1/jodtrQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:26 2025 by rpki-client