Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: 37PN7zy2SE12ruIh7loVxGuaXaYve3GJ8aILEmFKFo0=
Subject key identifier: 9F:E8:49:3C:ED:1D:18:CD:B3:7B:96:BD:DA:01:70:A9:AB:2C:09:D8
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 0198D4E00D68B442C9FC60DC7BE8FEF74E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0B52
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=)
2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: puHAFx1N+px9Obd8Cn7GvlcVipMdICljGAtTH1s+PpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0d:68:b4:42:c9:fc:60:dc:7b:e8:fe:f7:4e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=9fe8493ced1d18cdb37b96bdda0170a9ab2c09d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:94:ca:bb:2b:32:09:e0:ed:9c:75:aa:4a:
6e:75:29:77:ea:5b:f4:66:6e:29:4f:81:4c:d9:1f:
e2:45:dd:75:d2:ff:e5:bd:47:2b:15:76:92:63:58:
3b:86:c0:f7:16:5f:f8:fb:d7:4f:06:35:59:a6:dc:
c6:68:f1:28:05:e4:09:83:e2:c9:a5:b6:94:11:86:
a6:0a:4e:01:89:2e:ff:27:3f:85:80:51:17:f2:66:
db:b0:9c:0e:f5:4f:33:92:ca:21:bf:d8:07:e9:c3:
71:56:94:8d:f0:f3:fe:a6:8e:8c:90:14:32:ca:0f:
0f:b7:47:a7:d7:80:64:64:78:ea:bc:1a:54:37:b9:
ff:cb:98:db:0a:3c:58:c9:36:1a:0a:34:db:9b:d2:
a9:31:c7:d6:bc:17:aa:3e:bd:91:82:6f:ef:02:0f:
ce:cb:bb:36:3b:6f:a0:46:42:86:ff:9a:24:41:58:
18:50:87:dd:d6:72:66:ef:18:de:60:b8:71:7a:98:
48:46:51:ed:a6:9c:13:a5:57:c8:c1:56:26:2b:54:
d9:51:f1:59:38:e6:f0:94:fd:85:8f:6d:64:5b:85:
0d:49:df:a8:6a:38:8b:95:b2:54:d2:a0:f3:63:12:
52:14:5b:3e:75:d5:f2:9f:c9:95:86:a7:3d:00:55:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:49:3C:ED:1D:18:CD:B3:7B:96:BD:DA:01:70:A9:AB:2C:09:D8
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:18:e5:92:90:94:2b:ac:2e:55:36:a7:83:84:91:12:eb:2f:
34:86:95:fa:51:6c:0a:da:6e:a0:58:73:06:51:c6:6b:1b:bf:
d8:69:45:7f:ca:cf:fa:bb:06:e5:a6:42:db:34:da:46:2a:61:
a5:b8:02:f7:0e:67:ed:b6:73:c7:48:74:e6:b5:d6:cc:e4:b9:
19:58:b1:85:f2:0f:0e:0e:70:fd:06:37:5d:4a:90:56:98:fa:
7b:cf:13:9c:f3:c2:a4:e5:06:c3:ca:90:20:09:3f:9e:45:4f:
f6:d4:43:d0:7c:bf:dd:8a:17:48:40:ee:b7:6f:8b:9e:b0:f5:
16:15:18:88:51:a2:59:ba:3d:ee:b7:e4:d2:10:8f:81:13:ae:
b5:f3:9f:fe:11:6d:0a:62:63:25:5b:02:56:93:b1:ad:b0:6c:
b1:4a:fc:1b:cd:9c:32:c1:75:d4:94:f8:85:6c:f0:52:7e:5d:
68:b2:52:7c:c4:40:5e:54:71:17:7e:5d:ae:ef:38:3b:06:9c:
10:a2:6f:09:7d:ff:2f:c7:cd:57:a8:60:14:14:38:2e:a7:50:
61:81:54:7a:23:2b:65:50:85:42:b6:5e:dc:e7:b7:08:ed:3d:
2c:48:71:84:2b:1e:c3:48:d8:6b:c6:87:92:b8:33:97:6d:52:
96:f6:96:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4A1otELJ/GDce+j+906TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZmIwMTE1YzRhY2RkZDFiNGFkYzQwNzM3ODA3MjZhY2Zj
MDFhZjkwHhcNMjUwODIzMDMwMTQ5WhcNMjUwODI0MDMwMTQ5WjAzMTEwLwYDVQQD
Eyg5ZmU4NDkzY2VkMWQxOGNkYjM3Yjk2YmRkYTAxNzBhOWFiMmMwOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D6UyrsrMgng7Zx1qkpudSl36lv0
Zm4pT4FM2R/iRd110v/lvUcrFXaSY1g7hsD3Fl/4+9dPBjVZptzGaPEoBeQJg+LJ
pbaUEYamCk4BiS7/Jz+FgFEX8mbbsJwO9U8zksohv9gH6cNxVpSN8PP+po6MkBQy
yg8Pt0en14BkZHjqvBpUN7n/y5jbCjxYyTYaCjTbm9KpMcfWvBeqPr2Rgm/vAg/O
y7s2O2+gRkKG/5okQVgYUIfd1nJm7xjeYLhxephIRlHtppwTpVfIwVYmK1TZUfFZ
OObwlP2Fj21kW4UNSd+oajiLlbJU0qDzYxJSFFs+ddXyn8mVhqc9AFX47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/oSTztHRjNs3uWvdoBcKmrLAnYMB8GA1UdIwQY
MBaAFH/7ARXErN3RtK3EBzeAcmrPwBr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYt
Y2JlMDIwNjY1ZWZlLzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYtY2JlMDIwNjY1ZWZl
LzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxjlkpCU
K6wuVTang4SREusvNIaV+lFsCtpuoFhzBlHGaxu/2GlFf8rP+rsG5aZC2zTaRiph
pbgC9w5n7bZzx0h05rXWzOS5GVixhfIPDg5w/QY3XUqQVpj6e88TnPPCpOUGw8qQ
IAk/nkVP9tRD0Hy/3YoXSEDut2+LnrD1FhUYiFGiWbo97rfk0hCPgROutfOf/hFt
CmJjJVsCVpOxrbBssUr8G82cMsF11JT4hWzwUn5daLJSfMRAXlRxF35dru84Owac
EKJvCX3/L8fNV6hgFBQ4LqdQYYFUeiMrZVCFQrZe3Oe3CO09LEhxhCsew0jYa8aH
krgzl21SlvaWOg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:44 2025 by rpki-client