Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier: +8WDJUWOyZ/ihp0ifRoln5T9+72dHMNaBrBYDWHYf3w=
Subject key identifier: 83:21:C8:7D:1B:DE:48:D8:AA:EC:3E:A2:CA:D9:02:DE:E5:58:15:63
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 0198D773216FBA973F0DDBEA3F42D348B7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 15:01:43 +0000
Manifest this update: Sat 23 Aug 2025 15:01:43 +0000
Manifest next update: Sun 24 Aug 2025 15:01:43 +0000
Files and hashes: 1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=)
2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: wtTTGoX5l4+eubV+RKRYxexzpvcDGQC9nqGGzUyNoFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:21:6f:ba:97:3f:0d:db:ea:3f:42:d3:48:b7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Aug 23 15:01:43 2025 GMT
Not After : Aug 24 15:01:43 2025 GMT
Subject: CN=8321c87d1bde48d8aaec3ea2cad902dee5581563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:30:d5:62:60:a7:b4:e3:f3:fb:83:3f:7a:
d2:d9:d8:90:cd:f4:16:b5:20:01:bc:07:6b:ce:97:
47:ec:31:81:95:99:a6:e4:e1:89:1b:c1:83:b4:a1:
b2:c2:42:2c:44:01:a1:03:12:ba:fd:dd:75:3d:e5:
7c:a6:a1:8a:1a:02:07:67:15:7a:35:ca:59:cd:ac:
62:4d:46:87:e8:ff:4b:bb:88:b4:f5:c6:1e:87:86:
25:13:cc:86:93:1b:bc:45:fd:4a:84:3e:a6:8a:7e:
f0:6b:5f:f6:7b:69:f5:11:6f:97:6c:97:a7:63:9b:
9c:8a:e4:76:17:33:35:7b:4e:6b:42:1e:92:d3:a1:
0a:88:52:93:ce:a0:c3:5d:e5:95:9b:5c:b0:e8:10:
b6:31:b3:57:18:cb:63:68:68:c8:af:c8:8c:57:a6:
39:53:3c:0a:aa:10:92:60:80:04:76:60:8d:11:7b:
f5:ff:3f:13:55:1f:1b:a8:7d:58:d5:7b:45:71:88:
45:cd:4b:13:9b:3c:db:17:ef:81:8c:78:ba:53:ff:
a3:fa:ed:e4:46:00:c1:8e:89:20:fb:1f:30:72:a6:
ca:05:cf:5b:9a:ce:65:d5:dd:84:84:f9:c7:f0:6b:
3c:e3:f7:df:70:fd:c4:92:68:f8:e9:1f:17:6e:a2:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:C8:7D:1B:DE:48:D8:AA:EC:3E:A2:CA:D9:02:DE:E5:58:15:63
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ed:46:94:09:6f:7d:42:d5:10:04:92:64:62:a5:b7:10:35:
a8:07:0f:66:25:43:d5:a3:1f:f7:9b:50:36:27:ce:ee:71:22:
b7:9d:8f:19:77:2d:a1:de:1f:9d:92:ef:fd:fc:01:6b:a8:4a:
91:71:21:a9:ee:b3:f6:38:f8:eb:36:14:8b:a1:c6:10:c0:41:
b8:32:fc:4a:3d:a4:46:48:23:79:4c:b5:3b:f5:00:90:05:de:
e3:7d:82:c3:fd:5b:c0:27:bb:2c:27:96:21:dc:55:27:f8:90:
1d:06:4c:9e:dd:f7:54:18:46:b4:7a:37:dc:2b:bc:c5:d1:be:
bd:7c:e9:03:8d:4b:d5:c7:44:bb:11:67:58:d0:8d:dc:c5:1e:
ac:74:d3:fd:5d:34:fa:92:9d:3d:ac:ae:3b:7e:6b:3d:1c:78:
82:88:bb:d8:30:36:35:cf:99:95:46:e2:4a:6b:72:9c:91:67:
c3:ad:6d:2c:7f:25:cb:d5:4b:02:fd:fa:c9:4b:96:03:0b:66:
06:32:6a:57:25:b2:6d:4a:5e:71:12:1e:c5:6f:ec:87:11:09:
f7:7c:4a:4c:e8:61:17:ee:ed:0d:b3:90:c4:48:9b:db:b0:35:
28:16:47:e5:f3:8c:f9:e5:6e:b4:41:5d:63:db:d1:01:78:64:
de:83:d8:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXcyFvupc/DdvqP0LTSLffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzYxMGQyMTVkMzg5MTM0MmJjMzI4NzJhNTBmNGQwY2Zh
OWRjOWYwHhcNMjUwODIzMTUwMTQzWhcNMjUwODI0MTUwMTQzWjAzMTEwLwYDVQQD
Eyg4MzIxYzg3ZDFiZGU0OGQ4YWFlYzNlYTJjYWQ5MDJkZWU1NTgxNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Isw1WJgp7Tj8/uDP3rS2diQzfQW
tSABvAdrzpdH7DGBlZmm5OGJG8GDtKGywkIsRAGhAxK6/d11PeV8pqGKGgIHZxV6
NcpZzaxiTUaH6P9Lu4i09cYeh4YlE8yGkxu8Rf1KhD6min7wa1/2e2n1EW+XbJen
Y5uciuR2FzM1e05rQh6S06EKiFKTzqDDXeWVm1yw6BC2MbNXGMtjaGjIr8iMV6Y5
UzwKqhCSYIAEdmCNEXv1/z8TVR8bqH1Y1XtFcYhFzUsTmzzbF++BjHi6U/+j+u3k
RgDBjokg+x8wcqbKBc9bms5l1d2EhPnH8Gs84/ffcP3Ekmj46R8XbqKMYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMhyH0b3kjYquw+osrZAt7lWBVjMB8GA1UdIwQY
MBaAFH7GENIV04kTQrwyhypQ9NDPqdyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2Yt
ZTg1NjYxM2QyYjEwLzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2YtZTg1NjYxM2QyYjEw
LzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe1GlAlv
fULVEASSZGKltxA1qAcPZiVD1aMf95tQNifO7nEit52PGXctod4fnZLv/fwBa6hK
kXEhqe6z9jj46zYUi6HGEMBBuDL8Sj2kRkgjeUy1O/UAkAXe432Cw/1bwCe7LCeW
IdxVJ/iQHQZMnt33VBhGtHo33Cu8xdG+vXzpA41L1cdEuxFnWNCN3MUerHTT/V00
+pKdPayuO35rPRx4goi72DA2Nc+ZlUbiSmtynJFnw61tLH8ly9VLAv36yUuWAwtm
BjJqVyWybUpecRIexW/shxEJ93xKTOhhF+7tDbOQxEib27A1KBZH5fOM+eVutEFd
Y9vRAXhk3oPYtQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:20:41 2025 by rpki-client