Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: jFukqleJfKpxBuYUNL/uMOPq+n274lIGqcQF6C2QEJ8=
Subject key identifier: C6:6D:54:D6:66:E9:56:E2:AA:90:68:BE:19:0C:3B:25:71:DD:DA:FC
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 0198D5159D03A295E84865802351BA7E301B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:20 +0000
Manifest this update: Sat 23 Aug 2025 04:00:20 +0000
Manifest next update: Sun 24 Aug 2025 04:00:20 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: Doj982nzwaNF99ErR9hBFL1BVdtnubbrC7DLGjO33IQ=)
2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9d:03:a2:95:e8:48:65:80:23:51:ba:7e:30:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Aug 23 04:00:20 2025 GMT
Not After : Aug 24 04:00:20 2025 GMT
Subject: CN=c66d54d666e956e2aa9068be190c3b2571dddafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:4d:95:f3:a1:e0:0d:a1:7e:cd:65:c1:e2:
b5:76:92:f3:db:06:d8:ad:ff:25:97:19:51:10:bf:
42:79:5c:e1:77:16:ca:f3:dd:f4:d8:24:a0:f1:8f:
da:1a:48:6e:28:a9:18:1d:c0:be:fd:e4:46:92:34:
7f:ec:c6:77:85:84:02:38:c9:95:15:d8:3c:1c:98:
1b:f0:9f:63:18:b3:8c:77:b3:b6:72:1f:28:b5:b1:
69:32:84:c1:4d:ed:1f:68:d0:d1:1a:81:c1:83:36:
71:8b:56:c2:2a:93:01:29:3a:2a:14:19:d6:27:ae:
21:ce:80:a7:f0:b9:1f:a5:d2:d5:0c:9f:e6:79:ee:
d7:6f:50:77:84:2b:49:27:5f:c5:8e:90:dc:69:fb:
b3:90:dd:48:51:a5:12:f0:2d:38:8e:08:9c:25:56:
8e:28:b5:85:80:75:63:8c:c6:79:31:e9:f3:b5:bc:
66:76:11:b6:f2:7b:08:8d:84:25:ba:51:9b:2f:c4:
99:d9:1f:93:01:0e:f9:c0:b9:f8:7e:ff:b8:3b:2d:
f8:9e:c3:db:ba:84:32:aa:12:cd:12:9a:3c:fd:8f:
7f:77:3a:ee:c5:42:06:03:2a:ce:fa:0c:a9:4f:0c:
4c:5f:1c:9a:73:a1:4d:fa:3b:7b:f6:91:aa:de:8f:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6D:54:D6:66:E9:56:E2:AA:90:68:BE:19:0C:3B:25:71:DD:DA:FC
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:d5:d8:ae:85:d7:37:6c:7d:6b:0f:2e:c0:b3:f3:3e:a5:
c1:11:fb:64:f2:3a:02:cf:f3:b0:45:7d:e0:d9:5f:36:5d:bd:
c5:e6:a6:89:2b:41:c3:7b:ce:68:30:94:62:e6:df:50:39:45:
a2:6f:83:2f:9c:42:ea:90:fc:4b:47:e6:31:9e:d6:44:63:53:
8f:17:a8:2c:6c:76:b1:e2:45:ca:06:af:03:0b:d3:5e:7d:e9:
18:b5:f3:7a:09:fd:c6:fa:ae:4f:23:38:f7:63:fc:c1:59:3a:
6e:2d:a2:30:45:bd:1b:ce:29:4a:5f:75:02:ce:ce:2e:ac:df:
52:5a:85:db:2e:f9:0b:1f:17:48:ad:0a:c4:e4:e1:a2:14:c6:
48:c4:54:1e:71:32:f8:79:5c:15:bf:c8:d2:06:48:d2:d7:6e:
ec:1e:05:fc:1f:45:bb:46:60:7b:12:92:7a:3a:2e:83:1c:e2:
35:a6:0b:c0:5d:99:ef:d5:61:51:b3:90:c6:cf:da:69:1f:3f:
d4:94:e2:8c:f0:21:39:e4:0b:b2:44:38:00:6d:d1:da:84:f3:
01:76:ca:cf:d2:24:e7:18:da:6f:e9:cf:62:18:11:76:b2:d8:
f2:cd:0f:08:dd:2e:74:2d:5b:c1:84:3f:2f:b5:aa:50:eb:aa:
6c:2f:94:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZ0DopXoSGWAI1G6fjAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTBhMjBlMzBlYzkxNWRlZDFkZjIwMDU1YWY2YjVmMjY2
NzJlYTkwHhcNMjUwODIzMDQwMDIwWhcNMjUwODI0MDQwMDIwWjAzMTEwLwYDVQQD
EyhjNjZkNTRkNjY2ZTk1NmUyYWE5MDY4YmUxOTBjM2IyNTcxZGRkYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteVNlfOh4A2hfs1lweK1dpLz2wbY
rf8llxlREL9CeVzhdxbK89302CSg8Y/aGkhuKKkYHcC+/eRGkjR/7MZ3hYQCOMmV
Fdg8HJgb8J9jGLOMd7O2ch8otbFpMoTBTe0faNDRGoHBgzZxi1bCKpMBKToqFBnW
J64hzoCn8LkfpdLVDJ/mee7Xb1B3hCtJJ1/FjpDcafuzkN1IUaUS8C04jgicJVaO
KLWFgHVjjMZ5MenztbxmdhG28nsIjYQlulGbL8SZ2R+TAQ75wLn4fv+4Oy34nsPb
uoQyqhLNEpo8/Y9/dzruxUIGAyrO+gypTwxMXxyac6FN+jt79pGq3o8QCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZtVNZm6VbiqpBovhkMOyVx3dr8MB8GA1UdIwQY
MBaAFPBQog4w7JFd7R3yAFWva18mZy6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQt
OWQzMTY3ODMxOTM0LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQtOWQzMTY3ODMxOTM0
LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpLV2K6F
1zdsfWsPLsCz8z6lwRH7ZPI6As/zsEV94NlfNl29xeamiStBw3vOaDCUYubfUDlF
om+DL5xC6pD8S0fmMZ7WRGNTjxeoLGx2seJFygavAwvTXn3pGLXzegn9xvquTyM4
92P8wVk6bi2iMEW9G84pSl91As7OLqzfUlqF2y75Cx8XSK0KxOThohTGSMRUHnEy
+HlcFb/I0gZI0tdu7B4F/B9Fu0ZgexKSejougxziNaYLwF2Z79VhUbOQxs/aaR8/
1JTijPAhOeQLskQ4AG3R2oTzAXbKz9Ik5xjab+nPYhgRdrLY8s0PCN0udC1bwYQ/
L7WqUOuqbC+UfA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:01 2025 by rpki-client