Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: ckffvKMutOCab/9B58SVNpkYE354zox0gEp5XA+lRo4=
Subject key identifier: 91:FC:3A:F2:39:B2:7A:AF:2E:C6:57:43:83:0D:9F:FD:67:86:FA:A9
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 0198D47283FC317D4EEF7A6562919E22B20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 0780
Signing time: Sat 23 Aug 2025 01:02:11 +0000
Manifest this update: Sat 23 Aug 2025 01:02:11 +0000
Manifest next update: Sun 24 Aug 2025 01:02:11 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: m99GNgsHu0SAc/zm0zX0iDKztjxuk9UPEgS6P5ServA=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:83:fc:31:7d:4e:ef:7a:65:62:91:9e:22:b2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Aug 23 01:02:11 2025 GMT
Not After : Aug 24 01:02:11 2025 GMT
Subject: CN=91fc3af239b27aaf2ec65743830d9ffd6786faa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:f4:da:f1:b1:ad:b0:f6:fe:d1:63:32:8d:
a3:cc:68:e8:d0:fb:2c:03:f6:15:21:8f:d7:c0:8c:
91:45:87:fd:eb:4e:dc:1c:bd:2a:36:d1:c0:f4:7b:
3d:39:af:63:0c:6a:0a:49:21:c7:15:4f:34:a2:99:
63:c7:a5:a6:53:8c:f7:ad:09:05:aa:ff:2a:67:2d:
6b:77:84:b5:37:4b:22:b1:dc:cc:f4:f7:e0:8c:cc:
c6:b2:ba:fc:44:94:a6:7a:08:c4:ef:53:33:a2:b8:
53:c2:9c:31:73:38:4a:85:bc:a3:8d:67:3d:8e:16:
3e:cd:cb:19:bc:fd:51:9b:b4:6e:1f:51:61:93:fe:
af:7f:9f:f9:63:6a:0b:f6:02:0a:fc:72:b2:0a:1b:
d7:04:0b:85:9f:7c:89:d5:19:43:a3:f3:c6:38:3d:
38:0d:4e:3d:52:f9:5f:49:35:97:85:91:e6:96:81:
76:ab:4f:08:a1:c1:8a:c5:88:4c:22:ba:73:bb:95:
d8:78:a0:a4:eb:b2:1c:30:5b:c4:b7:80:cc:ad:28:
06:03:74:6f:00:a2:d5:31:f8:0c:2f:e6:03:36:e2:
4e:a7:51:62:62:c1:89:15:45:a3:a3:08:54:6f:f4:
48:5d:54:5d:09:46:2f:f4:a6:40:76:ae:bc:bb:5f:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FC:3A:F2:39:B2:7A:AF:2E:C6:57:43:83:0D:9F:FD:67:86:FA:A9
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d2:60:97:ba:78:71:b1:e6:db:3b:1b:db:f3:c9:e4:58:0b:
5c:8f:dd:62:59:1b:31:30:3e:c9:ec:f7:fe:5e:06:e8:d3:01:
43:3f:84:ac:16:7a:02:14:9b:96:7e:6d:b4:60:2e:7d:92:5f:
b0:51:f5:a4:de:43:c3:e4:b9:42:b4:fa:68:12:73:28:bd:83:
1b:61:14:0e:b1:84:c3:de:99:cc:95:9e:9f:07:bb:7a:e4:0c:
6c:a9:e7:a0:81:1d:0d:25:61:32:c0:9f:c4:60:e0:3e:5d:1d:
6b:7d:00:63:c9:f3:43:5b:1a:53:30:fc:de:cd:64:fa:28:ec:
0f:38:c8:73:67:7c:0b:0e:54:22:66:50:de:7b:53:da:78:30:
2e:d2:5a:15:fb:c1:f8:4f:48:2a:86:03:b7:58:74:ad:25:a8:
26:9e:a9:9e:2b:80:e5:33:ea:a6:8b:d0:c3:33:9e:3d:52:44:
b9:8e:39:39:de:70:0c:e3:e8:ce:4b:4c:83:f7:a3:80:7f:6b:
09:9f:5e:1a:40:36:ce:7d:23:85:2b:7e:a7:4c:a4:60:1f:c2:
e4:4c:c2:c3:4b:b9:9d:ce:e2:08:64:14:80:db:5c:3c:3c:13:
5d:72:38:c2:86:ee:d9:ac:4f:f1:33:fc:d6:5b:9e:f8:47:68:
e8:12:0d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcoP8MX1O73plYpGeIrIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzE1MDA3NGVhNmZkZDFlODRkZDk1ZTBiMDY4MzY0MDdl
OTQxMWIwHhcNMjUwODIzMDEwMjExWhcNMjUwODI0MDEwMjExWjAzMTEwLwYDVQQD
Eyg5MWZjM2FmMjM5YjI3YWFmMmVjNjU3NDM4MzBkOWZmZDY3ODZmYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1b02vGxrbD2/tFjMo2jzGjo0Pss
A/YVIY/XwIyRRYf9607cHL0qNtHA9Hs9Oa9jDGoKSSHHFU80opljx6WmU4z3rQkF
qv8qZy1rd4S1N0sisdzM9PfgjMzGsrr8RJSmegjE71MzorhTwpwxczhKhbyjjWc9
jhY+zcsZvP1Rm7RuH1Fhk/6vf5/5Y2oL9gIK/HKyChvXBAuFn3yJ1RlDo/PGOD04
DU49UvlfSTWXhZHmloF2q08IocGKxYhMIrpzu5XYeKCk67IcMFvEt4DMrSgGA3Rv
AKLVMfgML+YDNuJOp1FiYsGJFUWjowhUb/RIXVRdCUYv9KZAdq68u1+gPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJH8OvI5snqvLsZXQ4MNn/1nhvqpMB8GA1UdIwQY
MBaAFIpxUAdOpv3R6E3ZXgsGg2QH6UEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQt
M2M5M2JiNmNmZWUxLzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQtM2M5M2JiNmNmZWUx
LzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutJgl7p4
cbHm2zsb2/PJ5FgLXI/dYlkbMTA+yez3/l4G6NMBQz+ErBZ6AhSbln5ttGAufZJf
sFH1pN5Dw+S5QrT6aBJzKL2DG2EUDrGEw96ZzJWenwe7euQMbKnnoIEdDSVhMsCf
xGDgPl0da30AY8nzQ1saUzD83s1k+ijsDzjIc2d8Cw5UImZQ3ntT2ngwLtJaFfvB
+E9IKoYDt1h0rSWoJp6pniuA5TPqpovQwzOePVJEuY45Od5wDOPozktMg/ejgH9r
CZ9eGkA2zn0jhSt+p0ykYB/C5EzCw0u5nc7iCGQUgNtcPDwTXXI4wobu2axP8TP8
1lue+Edo6BINsg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:54 2025 by rpki-client