Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
File: fJ1n8CerKw_yajV1FHOa_ogDesk.mft (raw, json)
Hash identifier: ZI8hketLiPAfOiD/htIzqflufPrct8+gVvbk6IUoxmw=
Subject key identifier: 84:2D:DE:26:69:D4:1B:DF:9B:36:61:65:29:C8:D0:E7:51:A0:F8:BF
Authority key identifier: 7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
Certificate issuer: /CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Certificate serial: 0199FCC6D10A60645EF503F3E988208FF15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
Manifest number: 15F9
Signing time: Sun 19 Oct 2025 14:01:51 +0000
Manifest this update: Sun 19 Oct 2025 14:01:51 +0000
Manifest next update: Mon 20 Oct 2025 14:01:51 +0000
Files and hashes: 1: fJ1n8CerKw_yajV1FHOa_ogDesk.crl (hash: DAiCxEFWuSPBzknWHJoCQBlc74LzK6zdNwzOd200R2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:d1:0a:60:64:5e:f5:03:f3:e9:88:20:8f:f1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Validity
Not Before: Oct 19 14:01:51 2025 GMT
Not After : Oct 20 14:01:51 2025 GMT
Subject: CN=842dde2669d41bdf9b36616529c8d0e751a0f8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:61:d1:99:f8:8e:c6:19:48:d5:60:2c:9a:
51:3b:c9:0c:4c:1a:7c:84:9c:59:36:a9:57:e3:ba:
b7:ef:5b:57:86:af:61:55:e3:97:f6:24:28:88:9e:
95:d8:1d:6a:33:da:71:3b:05:cc:77:46:b1:31:d7:
d1:97:a5:6d:a1:4e:20:c9:e0:a7:51:fd:c7:50:db:
eb:c0:3f:90:37:2e:5e:ab:f3:ed:54:07:48:ec:96:
b4:aa:1c:d7:5f:31:8d:50:23:ca:5f:67:c5:85:b9:
47:23:61:01:ef:13:81:a8:96:cd:85:b3:b3:48:99:
c9:c4:92:41:74:52:02:73:a7:12:84:71:72:5c:11:
81:17:d7:85:72:d7:bd:d2:7b:1c:e0:05:35:1d:9e:
ad:7a:ea:a5:61:98:9f:74:34:2b:39:38:be:d8:a7:
00:88:57:fa:cb:d2:80:f6:1e:c5:5a:02:12:05:a7:
87:b3:66:d4:05:3f:54:cb:4b:cc:66:50:23:c2:ce:
1e:15:30:e7:8f:e7:09:cc:7a:d9:3a:61:f4:a8:3e:
eb:29:3e:c3:a1:1f:3e:4c:37:72:c3:72:31:41:25:
e6:96:83:b6:b8:28:c7:60:cd:5d:86:9c:c8:d2:72:
35:78:c3:51:fe:5d:bb:27:6e:c3:7e:25:87:1c:f3:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:DE:26:69:D4:1B:DF:9B:36:61:65:29:C8:D0:E7:51:A0:F8:BF
X509v3 Authority Key Identifier:
keyid:7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:6b:a0:95:b8:43:54:b1:69:3d:68:fe:36:f0:4f:ff:ff:
d5:de:6d:c4:08:ea:3a:f5:12:d3:f8:aa:ba:ba:4f:f3:ea:f7:
c3:ea:55:92:d7:2f:f2:85:8a:50:4e:71:44:a0:0f:cd:76:34:
f7:b0:cc:df:2f:b2:f9:31:b0:53:8d:75:c8:d7:75:26:33:55:
7f:33:ad:e7:51:3b:ba:62:a9:98:3b:bd:1f:0b:75:78:95:b9:
6e:96:7d:42:6b:45:c3:ea:55:7c:95:f8:0c:15:ab:e4:4b:68:
cc:55:b1:2e:c2:2d:52:10:6e:85:44:c0:03:25:ff:9a:b7:87:
aa:60:34:6b:9c:86:be:a6:45:ad:13:bb:c6:fc:5c:21:5b:fe:
f7:07:57:40:67:c9:bd:37:ff:20:26:a4:75:eb:e4:eb:bf:fe:
8c:93:67:e0:c6:1d:37:86:97:d6:61:8b:f4:72:cc:52:20:2a:
e9:ea:b0:9c:24:19:de:bf:52:ac:10:1c:96:4b:57:eb:31:6e:
33:86:93:55:fc:36:9f:67:6d:88:f0:aa:4d:24:05:9d:25:b1:
06:88:ae:41:91:5a:dc:bf:55:93:da:a2:a9:b4:db:45:15:e1:
5e:ba:13:59:7f:70:a8:e6:93:2a:d7:59:c7:a4:ee:bc:66:08:
ad:1c:d5:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xtEKYGRe9QPz6Yggj/FeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOWQ2N2YwMjdhYjJiMGZmMjZhMzU3NTE0NzM5YWZlODgw
MzdhYzkwHhcNMjUxMDE5MTQwMTUxWhcNMjUxMDIwMTQwMTUxWjAzMTEwLwYDVQQD
Eyg4NDJkZGUyNjY5ZDQxYmRmOWIzNjYxNjUyOWM4ZDBlNzUxYTBmOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymdh0Zn4jsYZSNVgLJpRO8kMTBp8
hJxZNqlX47q371tXhq9hVeOX9iQoiJ6V2B1qM9pxOwXMd0axMdfRl6VtoU4gyeCn
Uf3HUNvrwD+QNy5eq/PtVAdI7Ja0qhzXXzGNUCPKX2fFhblHI2EB7xOBqJbNhbOz
SJnJxJJBdFICc6cShHFyXBGBF9eFcte90nsc4AU1HZ6teuqlYZifdDQrOTi+2KcA
iFf6y9KA9h7FWgISBaeHs2bUBT9Uy0vMZlAjws4eFTDnj+cJzHrZOmH0qD7rKT7D
oR8+TDdyw3IxQSXmloO2uCjHYM1dhpzI0nI1eMNR/l27J27DfiWHHPOk5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQt3iZp1BvfmzZhZSnI0OdRoPi/MB8GA1UdIwQY
MBaAFHydZ/AnqysP8mo1dRRzmv6IA3rJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OThmZTgtNWY2OS00ZDM3LWJkNTgt
NjVlYjFiYTZlMzM3LzEvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82OThmZTgtNWY2OS00ZDM3LWJkNTgtNjVlYjFiYTZlMzM3
LzEvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHproJW4
Q1SxaT1o/jbwT///1d5txAjqOvUS0/iqurpP8+r3w+pVktcv8oWKUE5xRKAPzXY0
97DM3y+y+TGwU411yNd1JjNVfzOt51E7umKpmDu9Hwt1eJW5bpZ9QmtFw+pVfJX4
DBWr5EtozFWxLsItUhBuhUTAAyX/mreHqmA0a5yGvqZFrRO7xvxcIVv+9wdXQGfJ
vTf/ICakdevk67/+jJNn4MYdN4aX1mGL9HLMUiAq6eqwnCQZ3r9SrBAclktX6zFu
M4aTVfw2n2dtiPCqTSQFnSWxBoiuQZFa3L9Vk9qiqbTbRRXhXroTWX9wqOaTKtdZ
x6TuvGYIrRzVBA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:04 2025 by rpki-client