Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier: 5c3rj8Sb/nKxhzL4uRgMNNpVk6eNrwKXh4tBalEv+78=
Subject key identifier: 39:A1:9E:C5:49:9D:AF:8F:12:47:02:37:58:29:F1:4D:74:9C:1B:BD
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 0197B6A0970B5C856842583E0E948B252213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number: 0FB8
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=)
2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: 7JPRyT960EMiR9EsT7F3G3hm9cqFs3xhCrMQbjEFC2g=)
3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=)
4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=)
5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:97:0b:5c:85:68:42:58:3e:0e:94:8b:25:22:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=39a19ec5499daf8f124702375829f14d749c1bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:72:af:04:b4:8e:6f:2a:af:d6:e9:bd:e5:
75:b3:80:d1:99:07:6c:34:30:dd:3a:e2:33:4c:7d:
45:11:a1:82:e7:fb:9d:5f:5a:77:03:7e:59:15:40:
32:ff:95:30:ec:7b:58:65:8a:a7:91:e9:e7:09:a7:
e4:fe:27:ef:59:90:40:4c:b3:07:12:c8:e7:b1:48:
a8:0b:6d:70:ea:72:a8:45:19:f8:72:08:7a:a4:dc:
36:f1:f6:55:8f:43:ee:51:71:0f:77:5d:a5:af:ed:
df:6a:1b:3e:cb:2d:d2:60:4b:50:64:3b:d8:2d:de:
88:35:52:40:55:f7:87:8f:31:20:33:4c:69:36:23:
2f:ec:7c:ff:02:71:57:22:75:ea:ee:79:4e:71:53:
9d:1c:32:46:28:ed:1a:52:a2:21:da:e1:a0:ce:77:
a3:f0:7c:54:9c:65:c4:6f:4a:1f:33:38:19:31:3b:
51:ab:4d:7d:73:b2:9b:a2:0c:c0:ab:59:94:59:4f:
dd:35:49:61:69:f8:9a:67:a9:5a:0c:95:09:b7:64:
9b:b4:20:53:88:f4:3d:9e:da:ed:62:43:8b:a6:b4:
89:42:ab:c7:cb:c2:c3:28:4e:31:ba:f1:28:7e:81:
6d:39:f1:fc:33:a6:f1:2a:c4:fc:9c:bc:8b:b0:90:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:9E:C5:49:9D:AF:8F:12:47:02:37:58:29:F1:4D:74:9C:1B:BD
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c9:fa:1b:e2:f1:3c:60:72:6f:16:f5:74:cf:77:66:98:12:
6d:4d:d5:9b:14:51:c3:d3:97:1e:31:88:36:e6:7f:41:66:61:
4a:52:79:a2:67:cd:0d:a3:65:a7:2e:78:32:47:9c:30:aa:e2:
b1:61:f5:ac:54:6a:1f:26:21:c1:7e:70:df:02:5d:2d:3a:9f:
d3:49:2d:1c:7f:23:40:cf:6d:d6:be:6f:c2:fa:ed:05:8a:10:
7f:42:9f:91:0c:82:29:40:80:1e:ae:cb:e3:69:64:07:80:fb:
bf:c6:6d:08:5f:c4:4f:1f:35:b2:32:a4:25:96:f6:3a:c3:97:
d5:eb:09:9e:44:5c:a1:a3:6b:e6:73:ec:53:22:8d:bb:58:1a:
82:a6:26:f4:14:63:30:e0:51:1a:4d:2b:08:b9:8a:20:94:da:
0c:01:06:01:e8:f1:db:db:a3:ed:4a:1e:ba:d8:b8:86:d3:9a:
74:80:b4:cc:35:21:63:ef:dd:75:21:fd:06:d1:69:3a:1d:4b:
36:79:8f:92:12:3b:d7:45:1e:64:6c:b7:96:ac:59:35:3f:9a:
3d:d1:3c:8f:70:bf:ba:84:8d:1f:f3:e0:5d:f1:98:87:31:79:
fa:37:a7:90:81:20:d7:eb:78:4b:e9:b6:ba:ba:f8:26:b0:16:
9f:ba:27:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oJcLXIVoQlg+DpSLJSITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3
ODdmYmMwHhcNMjUwNjI4MTMwMTA2WhcNMjUwNjI5MTMwMTA2WjAzMTEwLwYDVQQD
EygzOWExOWVjNTQ5OWRhZjhmMTI0NzAyMzc1ODI5ZjE0ZDc0OWMxYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy9yrwS0jm8qr9bpveV1s4DRmQds
NDDdOuIzTH1FEaGC5/udX1p3A35ZFUAy/5Uw7HtYZYqnkennCafk/ifvWZBATLMH
EsjnsUioC21w6nKoRRn4cgh6pNw28fZVj0PuUXEPd12lr+3fahs+yy3SYEtQZDvY
Ld6INVJAVfeHjzEgM0xpNiMv7Hz/AnFXInXq7nlOcVOdHDJGKO0aUqIh2uGgznej
8HxUnGXEb0ofMzgZMTtRq019c7KbogzAq1mUWU/dNUlhafiaZ6laDJUJt2SbtCBT
iPQ9ntrtYkOLprSJQqvHy8LDKE4xuvEofoFtOfH8M6bxKsT8nLyLsJDJ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmhnsVJna+PEkcCN1gp8U10nBu9MB8GA1UdIwQY
MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt
OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5
LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisn6G+Lx
PGBybxb1dM93ZpgSbU3VmxRRw9OXHjGINuZ/QWZhSlJ5omfNDaNlpy54MkecMKri
sWH1rFRqHyYhwX5w3wJdLTqf00ktHH8jQM9t1r5vwvrtBYoQf0KfkQyCKUCAHq7L
42lkB4D7v8ZtCF/ETx81sjKkJZb2OsOX1esJnkRcoaNr5nPsUyKNu1gagqYm9BRj
MOBRGk0rCLmKIJTaDAEGAejx29uj7Uoeuti4htOadIC0zDUhY+/ddSH9BtFpOh1L
NnmPkhI710UeZGy3lqxZNT+aPdE8j3C/uoSNH/PgXfGYhzF5+jenkIEg1+t4S+m2
urr4JrAWn7on+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:32 2025 by rpki-client