Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: G69BM1qgRmCQIF0UFVFn9vUP9t3faGarMyzxjmRjt5A=
Subject key identifier: 34:AD:DA:4E:C0:A4:C1:8B:D1:5F:13:19:9B:25:97:F7:8A:D1:D2:ED
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 0197B96B064F44F200C7EE92C0B43F09E833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 02:01:28 +0000
Manifest this update: Sun 29 Jun 2025 02:01:28 +0000
Manifest next update: Mon 30 Jun 2025 02:01:28 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: L0YR8B4rANMFlQWgzJ+MvM4ZhHulnZJLMOGFLPFMvcM=)
2: ThZzWFH5INkQ7ymiA_IBq-KPEM4.roa (hash: dM5mDKUs0Ppdg4qZBmK0UY+RheCcm2hY4o7VfDpWvQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:06:4f:44:f2:00:c7:ee:92:c0:b4:3f:09:e8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Jun 29 02:01:28 2025 GMT
Not After : Jun 30 02:01:28 2025 GMT
Subject: CN=34adda4ec0a4c18bd15f13199b2597f78ad1d2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:96:15:20:74:9a:2a:7a:7e:36:c9:67:8c:
d9:c8:0d:20:de:fb:53:35:12:3b:7b:b5:c0:2e:d0:
94:f1:d5:ba:a6:4a:76:b6:c6:7d:0e:11:de:a2:27:
76:9c:91:fc:ae:87:67:3a:5e:d9:44:fe:13:97:dd:
12:75:25:cc:39:8f:20:c0:91:83:8a:15:db:ce:74:
bf:11:97:90:90:5f:7f:9f:dc:ce:33:e5:95:8f:f2:
c1:c4:f2:80:e3:27:a8:d7:19:de:ac:74:4f:01:af:
4f:50:22:30:8b:30:48:61:5d:99:9b:9e:fb:7d:2b:
4a:3c:cb:33:97:70:87:37:a6:d1:ee:01:1d:87:9c:
00:c2:e9:4e:bc:72:fb:2d:01:1c:f1:86:0c:a8:8e:
30:01:b1:f5:28:5d:ad:a7:9b:6f:67:4b:3b:e8:ea:
96:c8:cf:ea:20:9b:e9:f5:05:5f:c2:a0:ea:da:e9:
fa:ae:cb:25:22:e7:88:3f:d6:c6:d3:8b:b5:88:03:
d0:d9:07:00:a8:0d:4e:16:5a:59:f5:11:ec:13:e5:
6e:08:8e:44:75:67:23:55:55:b3:96:9e:7a:9d:61:
1d:13:28:b5:bd:55:11:94:ec:7a:4d:b9:17:cd:71:
b5:39:59:e5:12:0a:8f:e8:5d:6d:39:3b:34:ee:e4:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AD:DA:4E:C0:A4:C1:8B:D1:5F:13:19:9B:25:97:F7:8A:D1:D2:ED
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c0:c6:52:29:91:21:f2:6d:5e:11:09:2f:06:26:ee:33:fc:
45:43:de:04:d4:72:1f:53:65:af:f9:86:eb:03:34:f5:7e:56:
ae:78:b8:c2:53:68:67:fb:16:d5:34:da:37:ee:6b:06:31:1c:
9f:25:c8:31:25:09:3f:22:45:5c:6f:49:59:cc:5a:e5:e4:da:
07:a0:59:b0:51:83:79:8f:cc:1f:a4:03:4c:fe:1f:5c:a2:3a:
56:76:a3:40:90:3d:79:c1:62:58:7c:4e:86:3d:28:de:fe:d0:
21:a0:cd:e8:19:5d:e8:38:62:1f:09:36:e2:8d:a8:63:28:9e:
26:6c:ce:18:82:78:e6:62:ad:29:2a:d3:d9:80:2b:bf:15:0b:
c7:b4:7a:ee:06:b1:52:c1:4a:3a:ed:ae:87:30:f5:b6:2e:ed:
ca:8a:ef:13:f6:77:70:c9:49:fb:0e:b6:32:f4:6c:cb:71:e1:
d7:e6:b6:90:fd:a4:e0:e8:be:c2:95:32:b1:93:bf:5d:84:d4:
b5:34:6c:68:37:49:4c:04:5f:fa:ee:5e:ce:c8:b1:07:82:dc:
ed:9e:f5:dc:3c:5c:22:8a:a3:d4:5d:e7:e1:03:90:41:a3:3c:
34:33:6d:1e:de:14:ad:c7:8b:67:16:d0:61:9d:5d:9e:e1:1d:
1c:d1:0b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5awZPRPIAx+6SwLQ/CegzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZmUwZDAyNGNkZGJhZjg2ODIyOTEyMjE1ODk3MTQ3MmIy
NGNiNGQwHhcNMjUwNjI5MDIwMTI4WhcNMjUwNjMwMDIwMTI4WjAzMTEwLwYDVQQD
EygzNGFkZGE0ZWMwYTRjMThiZDE1ZjEzMTk5YjI1OTdmNzhhZDFkMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SKWFSB0mip6fjbJZ4zZyA0g3vtT
NRI7e7XALtCU8dW6pkp2tsZ9DhHeoid2nJH8rodnOl7ZRP4Tl90SdSXMOY8gwJGD
ihXbznS/EZeQkF9/n9zOM+WVj/LBxPKA4yeo1xnerHRPAa9PUCIwizBIYV2Zm577
fStKPMszl3CHN6bR7gEdh5wAwulOvHL7LQEc8YYMqI4wAbH1KF2tp5tvZ0s76OqW
yM/qIJvp9QVfwqDq2un6rsslIueIP9bG04u1iAPQ2QcAqA1OFlpZ9RHsE+VuCI5E
dWcjVVWzlp56nWEdEyi1vVURlOx6TbkXzXG1OVnlEgqP6F1tOTs07uSxOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSt2k7ApMGL0V8TGZsll/eK0dLtMB8GA1UdIwQY
MBaAFBb+DQJM3br4aCKRIhWJcUcrJMtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYt
NWIyZjkwZGY3OTZkLzEvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYtNWIyZjkwZGY3OTZk
LzEvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsDGUimR
IfJtXhEJLwYm7jP8RUPeBNRyH1Nlr/mG6wM09X5Wrni4wlNoZ/sW1TTaN+5rBjEc
nyXIMSUJPyJFXG9JWcxa5eTaB6BZsFGDeY/MH6QDTP4fXKI6VnajQJA9ecFiWHxO
hj0o3v7QIaDN6Bld6DhiHwk24o2oYyieJmzOGIJ45mKtKSrT2YArvxULx7R67gax
UsFKOu2uhzD1ti7tyorvE/Z3cMlJ+w62MvRsy3Hh1+a2kP2k4Oi+wpUysZO/XYTU
tTRsaDdJTARf+u5ezsixB4Lc7Z713DxcIoqj1F3n4QOQQaM8NDNtHt4UrceLZxbQ
YZ1dnuEdHNELDA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:08:32 2025 by rpki-client