Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: ywWJJ5mZ+ktaOq1yz/hh317yZ63bBAbpplRajOKSI4U=
Subject key identifier: 6F:F9:D3:12:14:48:9B:03:F8:0F:B4:0F:5F:07:F7:DB:B1:D2:16:41
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 0198D73B647A08DAFB4E2472C82A9AE10E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:00:50 +0000
Manifest this update: Sat 23 Aug 2025 14:00:50 +0000
Manifest next update: Sun 24 Aug 2025 14:00:50 +0000
Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: srhJr+TieMVE/WvXQJtGFU+i+Dw99ITmz+iyQKizOx0=)
2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:64:7a:08:da:fb:4e:24:72:c8:2a:9a:e1:0e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Aug 23 14:00:50 2025 GMT
Not After : Aug 24 14:00:50 2025 GMT
Subject: CN=6ff9d31214489b03f80fb40f5f07f7dbb1d21641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:58:9a:ac:30:bb:84:fd:ba:22:f8:2c:0d:
59:f1:b3:3f:d9:ba:ba:e7:17:fe:c1:fb:b8:ee:b4:
04:3e:26:d2:37:d8:2f:7d:95:c9:95:1c:6d:dc:1e:
2c:63:54:0a:11:80:ec:f8:c3:21:a4:f8:b4:4a:8a:
34:cb:0d:64:89:b3:7e:34:38:5c:ea:10:2e:3f:ac:
65:4b:1e:84:50:ce:b3:b9:f2:d0:53:bf:a8:f5:83:
68:7a:30:25:32:7d:55:68:18:8c:fb:2d:63:06:8d:
3f:e2:ad:54:1c:39:1a:8f:ea:96:13:ba:58:97:a8:
ce:b2:69:1f:8f:70:67:41:34:8b:93:dd:e7:a6:92:
87:f0:ba:d2:d8:e1:b0:f7:00:08:e8:28:af:35:41:
a2:4c:d4:26:f5:44:d9:4a:a8:10:01:e4:fa:ba:a3:
ab:e7:d9:6a:97:68:ae:a1:4f:d8:76:6a:e0:34:4c:
88:94:5a:12:af:22:84:92:f2:ed:9e:1c:90:82:51:
a0:7e:21:cb:27:e5:d5:ce:3b:19:8d:42:c2:7c:e4:
32:0c:95:e6:37:55:81:44:ad:2e:d8:2f:51:03:a2:
67:f3:1f:37:a1:54:2b:f2:2a:fe:f9:e9:d8:cf:7c:
a0:5b:48:48:ca:48:f7:50:b2:20:cf:bc:8b:d1:a4:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F9:D3:12:14:48:9B:03:F8:0F:B4:0F:5F:07:F7:DB:B1:D2:16:41
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b1:4f:b6:e8:f9:ef:29:d9:c2:71:ed:e9:4d:0d:ff:fa:d9:
84:c6:3e:41:50:f1:ac:f5:1e:b3:f0:9d:49:b9:cd:af:2e:02:
80:38:b0:5f:da:03:72:70:9a:e8:03:92:d5:08:16:24:71:29:
df:e7:02:d1:4c:de:92:a5:f2:15:de:bf:ff:46:58:1b:a3:d5:
85:47:9c:50:fa:8d:13:50:fe:d6:2d:b7:91:11:97:90:e5:3c:
ff:b4:3a:49:bd:ee:61:41:54:48:f1:fb:cb:82:4a:9a:77:78:
d9:25:e5:13:1c:98:a4:5c:0b:19:e9:fd:84:26:12:b5:44:f1:
3d:75:da:16:b0:7d:02:54:66:2c:7d:f3:b1:4d:6e:85:70:68:
eb:e6:46:81:dc:80:2e:7d:4c:73:0d:b3:9c:15:08:f1:d2:9c:
61:0c:38:c4:ff:b1:eb:54:b2:65:3b:8f:78:9d:5c:0f:d0:e1:
12:e5:5a:7d:85:f2:93:ea:a0:b3:e5:3f:20:3b:03:ec:9c:51:
0c:93:d3:89:ad:06:0a:15:13:3b:9f:94:8e:b2:e7:08:6a:a5:
81:b2:f6:82:24:e5:3a:4f:7d:27:65:4d:b7:d3:a7:4c:03:24:
35:02:b8:83:ed:1e:cd:cf:52:7d:0f:b0:13:38:c5:4c:01:48:
12:c7:62:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO2R6CNr7TiRyyCqa4Q5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2JmN2EyYTQzYjE4MGQ3MjJiMzc2MzFlODc5YWZhMWI5
YTVlZGIwHhcNMjUwODIzMTQwMDUwWhcNMjUwODI0MTQwMDUwWjAzMTEwLwYDVQQD
Eyg2ZmY5ZDMxMjE0NDg5YjAzZjgwZmI0MGY1ZjA3ZjdkYmIxZDIxNjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S5Ymqwwu4T9uiL4LA1Z8bM/2bq6
5xf+wfu47rQEPibSN9gvfZXJlRxt3B4sY1QKEYDs+MMhpPi0Soo0yw1kibN+NDhc
6hAuP6xlSx6EUM6zufLQU7+o9YNoejAlMn1VaBiM+y1jBo0/4q1UHDkaj+qWE7pY
l6jOsmkfj3BnQTSLk93nppKH8LrS2OGw9wAI6CivNUGiTNQm9UTZSqgQAeT6uqOr
59lql2iuoU/YdmrgNEyIlFoSryKEkvLtnhyQglGgfiHLJ+XVzjsZjULCfOQyDJXm
N1WBRK0u2C9RA6Jn8x83oVQr8ir++enYz3ygW0hIykj3ULIgz7yL0aS/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/50xIUSJsD+A+0D18H99ux0hZBMB8GA1UdIwQY
MBaAFP3L96KkOxgNcis3Yx6Hmvobml7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUt
ZjU4YTViODhjNzNlLzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUtZjU4YTViODhjNzNl
LzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALFPtuj5
7ynZwnHt6U0N//rZhMY+QVDxrPUes/CdSbnNry4CgDiwX9oDcnCa6AOS1QgWJHEp
3+cC0UzekqXyFd6//0ZYG6PVhUecUPqNE1D+1i23kRGXkOU8/7Q6Sb3uYUFUSPH7
y4JKmnd42SXlExyYpFwLGen9hCYStUTxPXXaFrB9AlRmLH3zsU1uhXBo6+ZGgdyA
Ln1Mcw2znBUI8dKcYQw4xP+x61SyZTuPeJ1cD9DhEuVafYXyk+qgs+U/IDsD7JxR
DJPTia0GChUTO5+UjrLnCGqlgbL2giTlOk99J2VNt9OnTAMkNQK4g+0ezc9SfQ+w
EzjFTAFIEsdiJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:49 2025 by rpki-client