Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File: FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier: M7d2assvmW8ffm7U4b5GISl+l2KsYT3e0adbkBOiC7k=
Subject key identifier: 8F:86:CF:27:AE:3A:9D:9A:97:2A:67:36:B6:47:68:62:2E:02:C3:52
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer: /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial: 0198D4A7D2161CF2BDA7F4FF8FC2203483AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number: 1535
Signing time: Sat 23 Aug 2025 02:00:24 +0000
Manifest this update: Sat 23 Aug 2025 02:00:24 +0000
Manifest next update: Sun 24 Aug 2025 02:00:24 +0000
Files and hashes: 1: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: GJ+HtmmidvQ+x2m3ZpRtOtKR88itnylSJXhpIqrD9lQ=)
2: jh-TOxpxIUBWeRHqyE_TsQ3xZPw.roa (hash: h4140lmsN13+jNtLubDuYn8kTL6T4/sAQ4MD0yMdaVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d2:16:1c:f2:bd:a7:f4:ff:8f:c2:20:34:83:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Validity
Not Before: Aug 23 02:00:24 2025 GMT
Not After : Aug 24 02:00:24 2025 GMT
Subject: CN=8f86cf27ae3a9d9a972a6736b64768622e02c352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:77:19:88:f5:0b:4d:ba:6f:a5:c0:4b:24:
b6:fc:ca:2d:a3:8d:9e:a9:c9:fa:4a:27:45:7d:16:
0f:49:ac:21:0f:1a:00:e0:3f:cb:99:59:b6:06:21:
6f:ef:85:81:02:48:c5:91:98:57:16:d1:80:47:65:
8d:ef:b5:2b:fc:c0:2f:d6:bb:7a:4d:cd:61:94:53:
56:1d:65:22:4e:56:b9:bb:8c:65:ac:be:95:b0:d7:
4c:0e:c6:27:4b:2b:a6:f7:19:9e:df:1e:51:13:a7:
55:c9:c9:f5:e1:a8:9a:49:03:50:2d:2b:5e:3c:f8:
e5:54:48:b3:d7:e9:fc:2b:6b:1d:7e:dd:83:e4:cc:
fb:03:28:ca:dc:0f:cf:18:4f:c2:0b:1d:08:d1:fe:
8b:30:71:c9:89:c9:56:79:d0:b8:9b:40:55:36:84:
ac:8d:79:c4:a2:8d:0f:09:b2:77:71:7d:7c:b5:d5:
0d:56:88:e0:5f:98:d8:0c:fe:1a:29:65:6b:aa:cf:
72:69:e9:21:b2:81:8c:5b:ed:cb:a7:54:0a:4d:a8:
42:d6:80:1b:fb:38:3b:7b:69:2e:54:0e:f0:d7:5b:
17:ca:ba:ec:af:97:d7:d7:80:ab:15:c8:51:c5:f5:
e7:a1:e0:cf:39:0d:aa:d7:a7:e7:c2:2c:ec:0a:f7:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:CF:27:AE:3A:9D:9A:97:2A:67:36:B6:47:68:62:2E:02:C3:52
X509v3 Authority Key Identifier:
keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:22:d4:d2:df:cf:f5:4d:3c:78:96:6b:e5:a6:88:a0:91:28:
42:50:08:00:1e:48:b7:89:3d:e8:50:e4:1f:64:2d:26:5a:e0:
e2:ac:a5:b6:66:88:97:04:1f:44:b6:88:78:07:be:db:a1:61:
72:61:fa:a7:7a:99:ce:ac:45:6d:a2:6b:dc:9f:1b:63:f9:8c:
49:ad:e5:30:29:35:b5:37:1d:06:c8:93:be:90:34:5e:4e:ad:
9e:93:c4:8d:12:fc:a6:ba:ae:56:84:a7:7f:93:aa:39:05:a6:
19:27:ef:fd:a9:98:c3:2a:5f:25:2e:e4:ee:85:69:32:55:31:
57:bd:24:48:0c:ed:fc:f2:ae:1f:ea:15:b6:2e:a0:f2:06:50:
a4:59:fa:b3:5b:79:24:a5:62:65:98:66:78:69:17:52:67:87:
7f:b7:cc:05:db:75:07:4a:b2:3c:0a:9e:b8:5c:d7:02:90:20:
42:d6:02:b7:03:b3:cf:ba:e0:23:ef:78:81:a1:4e:b3:3b:1c:
d8:14:fc:0e:02:cc:5b:df:66:78:68:48:d1:3f:b3:7e:8c:32:
4c:1b:9b:74:27:08:87:4a:9e:37:cf:3a:5b:ec:f8:d3:79:9c:
30:7a:fe:2f:cf:9c:f8:32:fa:bd:0d:2e:0d:59:00:5c:39:a0:
f6:3c:f1:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9IWHPK9p/T/j8IgNIOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YjcxODAwZGRkYzQ5N2Y2MGY5ZWRiNzgzM2M5NDk3M2Fi
N2RjMWMwHhcNMjUwODIzMDIwMDI0WhcNMjUwODI0MDIwMDI0WjAzMTEwLwYDVQQD
Eyg4Zjg2Y2YyN2FlM2E5ZDlhOTcyYTY3MzZiNjQ3Njg2MjJlMDJjMzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6d3GYj1C026b6XASyS2/Moto42e
qcn6SidFfRYPSawhDxoA4D/LmVm2BiFv74WBAkjFkZhXFtGAR2WN77Ur/MAv1rt6
Tc1hlFNWHWUiTla5u4xlrL6VsNdMDsYnSyum9xme3x5RE6dVycn14aiaSQNQLSte
PPjlVEiz1+n8K2sdft2D5Mz7AyjK3A/PGE/CCx0I0f6LMHHJiclWedC4m0BVNoSs
jXnEoo0PCbJ3cX18tdUNVojgX5jYDP4aKWVrqs9yaekhsoGMW+3Lp1QKTahC1oAb
+zg7e2kuVA7w11sXyrrsr5fX14CrFchRxfXnoeDPOQ2q16fnwizsCvdiWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+GzyeuOp2alypnNrZHaGIuAsNSMB8GA1UdIwQY
MBaAFBS3GADd3El/YPntt4M8lJc6t9wcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQt
ZGRmMGI4YjA5NjE2LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQtZGRmMGI4YjA5NjE2
LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESLU0t/P
9U08eJZr5aaIoJEoQlAIAB5It4k96FDkH2QtJlrg4qyltmaIlwQfRLaIeAe+26Fh
cmH6p3qZzqxFbaJr3J8bY/mMSa3lMCk1tTcdBsiTvpA0Xk6tnpPEjRL8prquVoSn
f5OqOQWmGSfv/amYwypfJS7k7oVpMlUxV70kSAzt/PKuH+oVti6g8gZQpFn6s1t5
JKViZZhmeGkXUmeHf7fMBdt1B0qyPAqeuFzXApAgQtYCtwOzz7rgI+94gaFOszsc
2BT8DgLMW99meGhI0T+zfowyTBubdCcIh0qeN886W+z403mcMHr+L8+c+DL6vQ0u
DVkAXDmg9jzx/A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:52 2025 by rpki-client