Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: 3MgkLkFkTh42HTQ1ufazmPtznM+ngy8JQZQYAHtqFSM=
Subject key identifier: C1:F1:F6:5B:2A:A5:7C:33:54:0D:60:15:64:E0:A7:0B:E2:49:0B:7D
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 0198D515A72C8EEC3F7725A749E36DBE753A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 148F
Signing time: Sat 23 Aug 2025 04:00:22 +0000
Manifest this update: Sat 23 Aug 2025 04:00:22 +0000
Manifest next update: Sun 24 Aug 2025 04:00:22 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: 9sQXFr5ciZZQDuezp3rmk1vGzId/sCgcrVle61Fg60w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a7:2c:8e:ec:3f:77:25:a7:49:e3:6d:be:75:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Aug 23 04:00:22 2025 GMT
Not After : Aug 24 04:00:22 2025 GMT
Subject: CN=c1f1f65b2aa57c33540d601564e0a70be2490b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:84:de:37:22:80:b0:25:90:6b:b7:e1:e4:
48:18:ca:c6:fd:fd:42:4d:3a:6d:5b:8c:82:0c:73:
38:07:2f:7d:3f:b2:2e:19:3b:87:04:3c:aa:27:57:
d5:97:c1:41:47:d4:c8:b6:f6:bd:a1:be:5b:d6:2d:
8b:07:7e:e4:82:0c:2b:ba:f7:ee:2d:10:3b:2d:5f:
bd:8d:22:f8:59:d5:ca:e1:1d:4b:b1:12:ab:c8:f8:
fb:db:22:83:a0:3a:0a:f0:90:9f:62:0c:dc:55:48:
fa:49:3e:09:3c:f5:53:b4:93:4f:85:e8:d7:5b:87:
bc:bc:c8:0a:a8:89:c7:d4:b0:15:df:9e:40:38:a6:
92:cd:3d:62:5e:89:86:5b:f5:d6:a1:3c:e7:b5:6f:
a8:64:4d:f9:89:d9:73:48:1d:d8:0b:bb:7e:c1:39:
fe:a4:cb:bc:3f:dd:91:82:41:07:8e:b4:97:e2:07:
f1:a9:70:bb:05:41:c8:5a:cf:7a:4a:df:09:00:42:
bd:84:c4:36:f9:09:2b:54:6a:1b:22:7c:78:19:ba:
73:3b:ee:ae:12:53:1d:76:10:d7:5f:f1:af:40:02:
67:1e:08:f7:2c:84:8a:93:1c:cc:cf:d2:3e:cc:09:
28:79:56:b2:6e:f2:fe:71:56:af:dd:a9:bc:d6:5e:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:F6:5B:2A:A5:7C:33:54:0D:60:15:64:E0:A7:0B:E2:49:0B:7D
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:88:60:43:3c:15:63:56:dc:20:64:28:a9:eb:5b:df:7f:9b:
5f:02:8d:41:29:1e:3f:41:c7:82:4d:3b:51:fb:1d:c6:df:76:
5d:05:d1:05:f7:f2:4d:0b:3e:07:c5:55:70:b7:df:4b:96:52:
d2:65:94:dc:12:98:bb:43:45:e8:d7:25:02:6f:3c:71:89:2b:
9c:9a:62:0c:6a:b0:02:a7:f5:ec:53:7d:2d:8b:c9:42:43:72:
37:7d:72:d5:a9:9c:9b:27:07:dd:c4:96:6e:bf:4e:1d:98:58:
8d:cc:e8:b5:3d:31:f7:0d:35:ab:ae:11:02:a7:57:54:81:b5:
74:91:75:ae:9c:2b:c1:9b:b8:32:d0:ce:65:c9:22:97:87:51:
0e:34:75:a5:78:f6:90:b1:90:48:81:62:46:5f:97:b7:07:21:
1a:2c:26:65:a1:07:b6:89:96:47:73:0e:ec:44:74:e9:bb:b0:
1a:a1:d4:b5:5d:d7:79:21:84:45:73:c1:76:60:08:36:7f:14:
fe:79:41:1f:31:7f:a8:e6:d4:9a:e0:12:23:ba:2b:09:d1:c1:
0c:fe:03:e5:f0:d5:5e:d0:a5:d8:03:1b:a8:d5:ad:91:ca:59:
9d:32:82:cc:cb:b4:03:c2:0c:c6:8b:53:bc:ec:02:ac:94:03:
0c:78:93:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFacsjuw/dyWnSeNtvnU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YjZmOTc3MmE4ZGUyYTAyYWY2MWE0ZWE2MjdkM2U1MWQ4
NGY5YmQwHhcNMjUwODIzMDQwMDIyWhcNMjUwODI0MDQwMDIyWjAzMTEwLwYDVQQD
EyhjMWYxZjY1YjJhYTU3YzMzNTQwZDYwMTU2NGUwYTcwYmUyNDkwYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5OE3jcigLAlkGu34eRIGMrG/f1C
TTptW4yCDHM4By99P7IuGTuHBDyqJ1fVl8FBR9TItva9ob5b1i2LB37kggwruvfu
LRA7LV+9jSL4WdXK4R1LsRKryPj72yKDoDoK8JCfYgzcVUj6ST4JPPVTtJNPhejX
W4e8vMgKqInH1LAV355AOKaSzT1iXomGW/XWoTzntW+oZE35idlzSB3YC7t+wTn+
pMu8P92RgkEHjrSX4gfxqXC7BUHIWs96St8JAEK9hMQ2+QkrVGobInx4GbpzO+6u
ElMddhDXX/GvQAJnHgj3LISKkxzMz9I+zAkoeVaybvL+cVav3am81l497wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHx9lsqpXwzVA1gFWTgpwviSQt9MB8GA1UdIwQY
MBaAFBW2+XcqjeKgKvYaTqYn0+UdhPm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYt
ZTU3OWUyYWFmOWVhLzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYtZTU3OWUyYWFmOWVh
LzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4hgQzwV
Y1bcIGQoqetb33+bXwKNQSkeP0HHgk07Ufsdxt92XQXRBffyTQs+B8VVcLffS5ZS
0mWU3BKYu0NF6NclAm88cYkrnJpiDGqwAqf17FN9LYvJQkNyN31y1amcmycH3cSW
br9OHZhYjczotT0x9w01q64RAqdXVIG1dJF1rpwrwZu4MtDOZckil4dRDjR1pXj2
kLGQSIFiRl+XtwchGiwmZaEHtomWR3MO7ER06buwGqHUtV3XeSGERXPBdmAINn8U
/nlBHzF/qObUmuASI7orCdHBDP4D5fDVXtCl2AMbqNWtkcpZnTKCzMu0A8IMxotT
vOwCrJQDDHiT0w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:39:56 2025 by rpki-client