Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: uK7vzqcB06Hng61abf245uQgtYNDRfObcjBDVe2rHZQ=
Subject key identifier: AC:F6:D3:75:41:33:DA:F3:5C:E5:30:EE:DF:8B:D5:75:90:48:06:6B
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 0198D6CD7DA23C51367437A0C8B2C6D865C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:47 +0000
Manifest this update: Sat 23 Aug 2025 12:00:47 +0000
Manifest next update: Sun 24 Aug 2025 12:00:47 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: HuBO98hccTpHuQ5va41nAIhTGPygtY2bZGIaAI3RXB0=)
2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7d:a2:3c:51:36:74:37:a0:c8:b2:c6:d8:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Aug 23 12:00:47 2025 GMT
Not After : Aug 24 12:00:47 2025 GMT
Subject: CN=acf6d3754133daf35ce530eedf8bd5759048066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:18:b7:80:a8:b6:34:e7:4e:40:fc:2b:7f:
6e:98:a7:86:07:ac:69:11:ac:d2:1b:83:7b:38:ed:
69:c0:3a:f4:56:8a:57:50:25:f8:a2:24:c0:c9:4c:
11:d5:54:87:bb:7a:9d:a2:ba:6c:d3:f3:2a:e7:6b:
09:14:b9:b3:ca:b0:39:cb:88:b0:1b:9f:7f:ba:48:
03:b1:09:ed:4a:37:b6:53:d8:92:e2:fb:29:33:d9:
10:95:a2:c3:f7:b6:91:04:4f:cb:35:80:4f:72:49:
1b:50:c0:d7:8a:43:91:44:cb:65:c6:a4:84:99:19:
7b:91:c8:40:e5:e6:be:ad:d0:14:77:42:8f:fd:8c:
e1:40:21:51:6b:21:2d:d1:f3:23:be:9f:f6:d6:7e:
45:83:86:82:21:4f:8b:a2:de:4c:cd:5e:df:2c:01:
3b:0a:25:8e:ad:8d:0b:20:1b:6e:b8:1d:3a:94:0a:
a5:21:d7:be:18:f2:6f:ba:b9:fb:55:a7:37:ec:0f:
8e:07:ab:5f:de:69:4a:c9:28:cc:28:d4:dc:0a:51:
a0:19:20:be:fc:d0:95:06:82:84:00:ef:fa:fc:4f:
8e:db:f3:91:db:a9:ec:4f:af:a0:c1:3b:bf:88:10:
9d:00:0a:7c:5b:ef:79:e2:7c:ee:a3:f0:a1:82:a7:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:D3:75:41:33:DA:F3:5C:E5:30:EE:DF:8B:D5:75:90:48:06:6B
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dd:17:49:60:21:d7:15:05:5b:f2:06:48:bd:48:94:3d:fb:
ec:af:6f:90:1a:d4:5b:e2:02:fb:b0:9e:5e:09:75:d1:54:ec:
7b:ee:05:44:b6:98:c3:8c:5a:0f:8a:a2:56:4c:14:ee:dd:1d:
0a:84:1c:28:a4:02:9d:10:7c:60:24:c0:c4:eb:cf:d3:2a:8a:
65:59:6c:a2:a9:41:58:5d:59:52:d7:48:ca:e4:aa:7a:b8:2f:
a4:74:51:63:26:5a:00:3e:13:ce:9e:f0:c9:6f:4d:5d:df:6c:
f8:f5:21:ac:b2:f9:bc:13:47:62:ef:aa:98:82:77:35:cf:08:
6c:be:6a:96:3e:b4:cb:af:a7:1e:ab:91:1d:55:29:91:01:e2:
38:05:7e:fa:fa:cd:4a:74:f1:70:b5:80:d8:20:83:f6:78:5d:
70:90:94:05:ce:87:cf:65:e7:7b:59:c8:63:87:6e:15:c8:f9:
15:fb:47:57:1e:90:0a:2a:d0:c5:4c:03:59:a3:a9:1b:27:bd:
70:f1:28:b2:14:49:c9:9d:08:ad:74:f8:21:1a:d6:bf:66:fa:
4f:65:f6:34:08:a2:66:1b:45:26:ca:b6:f2:3d:68:53:18:27:
8a:08:50:40:5d:d2:81:b5:ad:b3:1c:3b:d3:de:7b:0a:ba:78:
7c:a2:e5:ab
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjWzX2iPFE2dDegyLLG2GXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZWQ5NDM5YTRlNGIyZDMyZTRiZWU2NDdmM2I2MTA1NWIx
NjllM2QwHhcNMjUwODIzMTIwMDQ3WhcNMjUwODI0MTIwMDQ3WjAzMTEwLwYDVQQD
EyhhY2Y2ZDM3NTQxMzNkYWYzNWNlNTMwZWVkZjhiZDU3NTkwNDgwNjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSkYt4CotjTnTkD8K39umKeGB6xp
EazSG4N7OO1pwDr0VopXUCX4oiTAyUwR1VSHu3qdorps0/Mq52sJFLmzyrA5y4iw
G59/ukgDsQntSje2U9iS4vspM9kQlaLD97aRBE/LNYBPckkbUMDXikORRMtlxqSE
mRl7kchA5ea+rdAUd0KP/YzhQCFRayEt0fMjvp/21n5Fg4aCIU+Lot5MzV7fLAE7
CiWOrY0LIBtuuB06lAqlIde+GPJvurn7Vac37A+OB6tf3mlKySjMKNTcClGgGSC+
/NCVBoKEAO/6/E+O2/OR26nsT6+gwTu/iBCdAAp8W+954nzuo/Chgqez4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKz203VBM9rzXOUw7t+L1XWQSAZrMB8GA1UdIwQY
MBaAFPvtlDmk5LLTLkvuZH87YQVbFp49MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0tMlVPYVRrc3RNdVMtNWtmenRoQlZzV25qMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvZDA3YzA3LWI5NjItNGY0Yi1hM2Ew
LWI1MWIzNWRlZjZkZS8xLzEtLTJVT2FUa3N0TXVTLTVrZnp0aEJWc1duajAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzkwL2QwN2MwNy1iOTYyLTRmNGItYTNhMC1iNTFiMzVkZWY2
ZGUvMS8xLS0yVU9hVGtzdE11Uy01a2Z6dGhCVnNXbmowLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb90X
SWAh1xUFW/IGSL1IlD377K9vkBrUW+IC+7CeXgl10VTse+4FRLaYw4xaD4qiVkwU
7t0dCoQcKKQCnRB8YCTAxOvP0yqKZVlsoqlBWF1ZUtdIyuSqergvpHRRYyZaAD4T
zp7wyW9NXd9s+PUhrLL5vBNHYu+qmIJ3Nc8IbL5qlj60y6+nHquRHVUpkQHiOAV+
+vrNSnTxcLWA2CCD9nhdcJCUBc6Hz2Xne1nIY4duFcj5FftHVx6QCirQxUwDWaOp
Gye9cPEoshRJyZ0IrXT4IRrWv2b6T2X2NAiiZhtFJsq28j1oUxgnighQQF3SgbWt
sxw70957Crp4fKLlqw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:29:06 2025 by rpki-client