
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: biqerbuYtIHgNB6uAv8K6Wp1pQ7zeLg68r2cWHS4Krs=
Subject key identifier: 25:2F:6D:7A:9A:10:38:1B:24:83:E1:BF:B8:61:E5:E8:C8:EE:81:2A
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 0197B8FD0639C6E21894C44CEF177626F383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 00:01:19 +0000
Manifest this update: Sun 29 Jun 2025 00:01:19 +0000
Manifest next update: Mon 30 Jun 2025 00:01:19 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: JV7p98TMxRK7UAW+jg86pJk0ra3he0sH2cmTPApIGLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:06:39:c6:e2:18:94:c4:4c:ef:17:76:26:f3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Jun 29 00:01:19 2025 GMT
Not After : Jun 30 00:01:19 2025 GMT
Subject: CN=252f6d7a9a10381b2483e1bfb861e5e8c8ee812a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:24:3b:bc:af:ff:42:af:7e:0b:08:8f:b1:
70:bb:1d:16:f5:1f:96:20:68:01:1c:dc:55:1b:9e:
ca:26:42:bb:13:f3:74:6d:b9:31:50:52:40:7c:04:
86:fd:9e:da:65:71:3d:d5:ec:a5:7e:ad:66:cf:6d:
09:a3:bf:2c:34:76:94:40:02:bd:8e:8e:86:df:f3:
66:1e:4d:75:48:70:2c:68:64:65:61:27:06:64:1a:
1b:b0:a3:95:1d:ae:5c:14:d6:b1:31:0f:4f:28:a9:
2e:83:72:f9:d6:87:9a:0d:34:6c:b1:d3:22:29:1b:
80:ee:6b:50:29:cb:6d:c3:47:6a:59:2f:75:ee:1f:
29:c5:45:69:e0:65:87:e8:76:1e:b4:d6:0e:10:8f:
8e:d1:03:da:29:79:83:a7:f7:df:e0:7a:8d:a2:d8:
d4:af:92:b1:f3:1b:35:d4:56:cf:00:6b:34:f8:e4:
d0:54:ed:cc:85:e3:10:d8:4a:6c:81:bc:7e:db:e0:
dd:48:94:ba:b6:2d:51:28:93:93:e7:c3:8c:09:e0:
42:89:ff:30:ed:eb:45:b9:2f:2a:a0:19:49:bc:64:
fa:e0:b8:f4:9c:9a:fb:fd:8b:02:23:cf:e9:82:e9:
3f:6a:66:c0:85:bb:39:b1:bf:8c:1a:a9:f4:a8:21:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:6D:7A:9A:10:38:1B:24:83:E1:BF:B8:61:E5:E8:C8:EE:81:2A
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:65:9c:3b:45:30:d2:74:2f:5c:00:85:ba:11:4c:f1:a8:22:
6d:43:d7:ee:1c:41:0d:64:33:d6:06:7b:6e:c3:76:36:f6:40:
df:cc:cf:0a:5a:50:bb:f4:1d:61:aa:ce:e9:cd:bf:3a:2b:d0:
3d:e9:2c:e8:d2:96:55:48:6e:b9:1b:a5:bb:f5:b1:5c:5d:bb:
93:4b:db:41:eb:64:ee:6d:26:80:67:4d:74:69:91:30:98:f2:
66:1d:39:f9:4f:29:9b:4a:1e:ae:98:a5:e9:6a:fd:04:cb:a8:
2d:51:9c:63:88:79:3f:42:9d:72:ab:8a:2a:c8:9a:22:09:aa:
1a:4a:92:39:63:e0:de:49:6b:26:8b:20:6b:2f:e2:bd:0f:06:
3d:6d:87:e7:cc:15:f3:22:e2:aa:10:68:fc:54:bd:5b:df:bf:
5f:0a:8e:d3:e3:07:f2:e0:8c:3f:05:bb:1b:f6:19:19:48:8e:
86:b5:f9:93:0f:ff:88:f6:3c:d5:1d:da:e1:77:6a:52:46:e9:
e3:f2:5b:ec:b2:43:88:b9:92:b4:e9:c2:cf:12:4e:d1:c4:f0:
6b:26:f9:3a:ac:f6:c8:58:6b:31:94:fa:46:c8:f6:1b:d7:d0:
85:23:d3:04:ae:8d:5d:03:f6:15:42:1b:9f:e1:3e:17:0c:74:
c2:e4:14:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/QY5xuIYlMRM7xd2JvODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzBhMWU1MGQxYzAwOGUxZmZhZDVmMmY3NTc5ODI5NGQ1
YzRlZDgwHhcNMjUwNjI5MDAwMTE5WhcNMjUwNjMwMDAwMTE5WjAzMTEwLwYDVQQD
EygyNTJmNmQ3YTlhMTAzODFiMjQ4M2UxYmZiODYxZTVlOGM4ZWU4MTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYEkO7yv/0KvfgsIj7Fwux0W9R+W
IGgBHNxVG57KJkK7E/N0bbkxUFJAfASG/Z7aZXE91eylfq1mz20Jo78sNHaUQAK9
jo6G3/NmHk11SHAsaGRlYScGZBobsKOVHa5cFNaxMQ9PKKkug3L51oeaDTRssdMi
KRuA7mtQKcttw0dqWS917h8pxUVp4GWH6HYetNYOEI+O0QPaKXmDp/ff4HqNotjU
r5Kx8xs11FbPAGs0+OTQVO3MheMQ2Epsgbx+2+DdSJS6ti1RKJOT58OMCeBCif8w
7etFuS8qoBlJvGT64Lj0nJr7/YsCI8/pguk/ambAhbs5sb+MGqn0qCGVPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUvbXqaEDgbJIPhv7hh5ejI7oEqMB8GA1UdIwQY
MBaAFH7AoeUNHACOH/rV8vdXmClNXE7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNWQ0MmQtZDYwNy00NWY5LTgwOTkt
MzcyZmY2NjZiZTJlLzEvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mNWQ0MmQtZDYwNy00NWY5LTgwOTktMzcyZmY2NjZiZTJl
LzEvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmWcO0Uw
0nQvXACFuhFM8agibUPX7hxBDWQz1gZ7bsN2NvZA38zPClpQu/QdYarO6c2/OivQ
Peks6NKWVUhuuRulu/WxXF27k0vbQetk7m0mgGdNdGmRMJjyZh05+U8pm0oerpil
6Wr9BMuoLVGcY4h5P0KdcquKKsiaIgmqGkqSOWPg3klrJosgay/ivQ8GPW2H58wV
8yLiqhBo/FS9W9+/XwqO0+MH8uCMPwW7G/YZGUiOhrX5kw//iPY81R3a4XdqUkbp
4/Jb7LJDiLmStOnCzxJO0cTwayb5Oqz2yFhrMZT6Rsj2G9fQhSPTBK6NXQP2FUIb
n+E+Fwx0wuQUZQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:12 2025 by rpki-client