Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
File: fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json)
Hash identifier: TVRhhYgy3TWrxTeyBCFXPd6h95CN8ydsWFcNbomfaRM=
Subject key identifier: 8A:8C:50:DA:CB:01:DA:E6:B7:4C:9F:25:BD:17:B2:63:C5:43:54:93
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial: 0197B7B307A16718BFB33008D5D42CC3483C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
Manifest number: 0728
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: SXgs1E2BeubIj2SADSVUYvUfoY+hUvsd3zhcdiSeI+U=)
2: q-UjelWVJEcPadl31G47nebbXb8.roa (hash: 65aJhppjeAJp5scwXUtr/SDly2MObd0FzMz5wed2pGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:07:a1:67:18:bf:b3:30:08:d5:d4:2c:c3:48:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=8a8c50dacb01dae6b74c9f25bd17b263c5435493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:49:59:13:d5:0f:84:12:f0:26:02:4b:32:
d5:76:c8:4f:07:f4:eb:b0:9d:23:2e:e7:7a:77:f2:
59:de:52:58:d5:a9:02:72:37:2b:3a:e2:e9:d9:1a:
dd:25:3a:16:25:1a:9c:a5:b1:29:0f:97:da:ec:cf:
1a:61:f2:6c:f8:b8:0d:3c:20:48:7e:8d:6f:61:ac:
79:6b:38:c7:e8:8e:07:9d:ff:97:6e:b6:d3:ea:7c:
e8:f8:32:9f:cd:84:f7:e9:0b:02:ac:be:90:ec:98:
1f:d1:02:0e:3c:82:e8:08:00:4c:c0:b1:8d:18:ca:
56:05:67:6b:0c:46:63:30:eb:f6:e8:16:bb:ec:5f:
83:6f:77:78:64:c5:b6:29:11:a1:97:97:b2:93:0f:
03:c1:ee:7b:31:2a:44:03:c3:89:53:97:37:18:7f:
ba:82:56:c3:fb:35:8d:62:86:5f:5b:d7:ce:7a:6c:
87:af:00:86:21:3a:aa:ae:e3:75:38:e2:2d:02:02:
28:84:e1:a2:6d:7c:4f:45:28:d0:78:e7:e9:2b:37:
7a:4a:64:90:07:15:8b:1f:4a:36:fd:16:7b:75:17:
cd:29:f8:14:13:96:ed:a9:ec:fa:ab:31:c3:cb:ad:
5d:82:38:e4:1b:65:99:21:29:80:7a:e4:f2:e6:74:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8C:50:DA:CB:01:DA:E6:B7:4C:9F:25:BD:17:B2:63:C5:43:54:93
X509v3 Authority Key Identifier:
keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ea:3e:7b:c2:76:79:db:da:54:54:90:12:15:95:a1:88:08:
44:92:f2:4d:45:3e:1a:dc:f4:7d:ed:b5:34:c6:65:6c:6d:c1:
3a:fc:32:91:c2:c1:ab:41:87:04:af:47:10:bf:fe:be:ef:27:
37:8d:eb:d8:4e:94:7c:fa:e5:fb:d9:6a:e4:84:1c:49:e6:55:
bb:18:da:b4:15:2f:a7:b0:01:ad:e8:1a:69:5d:72:d9:ea:5f:
4d:42:fa:b3:13:e5:83:a2:7c:aa:a7:ea:a8:f1:83:45:8d:72:
69:13:87:37:01:51:31:19:23:98:89:1e:b1:aa:19:8f:f1:c7:
7d:03:27:75:a6:06:df:50:49:e2:43:28:6f:cb:84:18:85:7f:
bb:88:23:be:c8:e7:39:cb:d9:89:1b:dd:f0:f2:48:bf:79:72:
86:40:8e:da:e6:bd:7e:91:61:36:a8:b2:84:5b:f1:cd:02:21:
cd:14:dd:20:68:78:d7:a4:50:7a:c2:c9:e9:3b:f7:2e:09:5c:
c1:2b:6c:ab:34:70:32:b6:03:96:78:a1:86:51:e0:62:4c:fd:
08:00:71:fe:8a:86:a0:76:d2:8c:f0:d2:7e:c5:a8:01:68:53:
3b:4d:62:97:b4:60:e3:98:c1:09:7a:d1:87:99:ec:b9:8a:24:
27:ca:4e:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swehZxi/szAI1dQsw0g8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNWRiYjBiOWUzNTM4MTg1ZjNlNmQ2ZTNjN2RhMmY4OTIy
YzhjZTAwHhcNMjUwNjI4MTgwMDUyWhcNMjUwNjI5MTgwMDUyWjAzMTEwLwYDVQQD
Eyg4YThjNTBkYWNiMDFkYWU2Yjc0YzlmMjViZDE3YjI2M2M1NDM1NDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvNJWRPVD4QS8CYCSzLVdshPB/Tr
sJ0jLud6d/JZ3lJY1akCcjcrOuLp2RrdJToWJRqcpbEpD5fa7M8aYfJs+LgNPCBI
fo1vYax5azjH6I4Hnf+XbrbT6nzo+DKfzYT36QsCrL6Q7Jgf0QIOPILoCABMwLGN
GMpWBWdrDEZjMOv26Ba77F+Db3d4ZMW2KRGhl5eykw8Dwe57MSpEA8OJU5c3GH+6
glbD+zWNYoZfW9fOemyHrwCGITqqruN1OOItAgIohOGibXxPRSjQeOfpKzd6SmSQ
BxWLH0o2/RZ7dRfNKfgUE5btqez6qzHDy61dgjjkG2WZISmAeuTy5nRmKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqMUNrLAdrmt0yfJb0XsmPFQ1STMB8GA1UdIwQY
MBaAFHxduwueNTgYXz5tbjx9oviSLIzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lODEyMGMtNzQ1MS00NWFlLTg5YjAt
NzVmNmU1MjkxODZmLzEvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lODEyMGMtNzQ1MS00NWFlLTg5YjAtNzVmNmU1MjkxODZm
LzEvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOo+e8J2
edvaVFSQEhWVoYgIRJLyTUU+Gtz0fe21NMZlbG3BOvwykcLBq0GHBK9HEL/+vu8n
N43r2E6UfPrl+9lq5IQcSeZVuxjatBUvp7ABregaaV1y2epfTUL6sxPlg6J8qqfq
qPGDRY1yaROHNwFRMRkjmIkesaoZj/HHfQMndaYG31BJ4kMob8uEGIV/u4gjvsjn
OcvZiRvd8PJIv3lyhkCO2ua9fpFhNqiyhFvxzQIhzRTdIGh416RQesLJ6Tv3Lglc
wStsqzRwMrYDlnihhlHgYkz9CABx/oqGoHbSjPDSfsWoAWhTO01il7Rg45jBCXrR
h5nsuYokJ8pOKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:11 2025 by rpki-client