Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: wQDibvsEPOV4xdEfI2uWq89rZm0fy7S5ddrvdqwZ/Bc=
Subject key identifier: 0D:9C:D7:B2:8B:73:DC:50:D8:36:57:03:E2:02:A0:2D:4F:DD:16:51
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 0197B7457D36DED24B806CD4942FC64F976D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 12B4
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: JdplK9nvySIghPCBhYy6bR+2Ja+aPcea/PPBTMPSMfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7d:36:de:d2:4b:80:6c:d4:94:2f:c6:4f:97:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=0d9cd7b28b73dc50d8365703e202a02d4fdd1651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:8c:ff:81:c7:da:69:19:a0:28:d0:36:fa:
55:dd:34:30:94:18:66:6a:d6:1d:74:71:c6:2d:65:
ac:93:1d:72:78:38:cc:77:30:fd:6b:bd:35:78:0d:
7b:9e:09:64:81:cc:d9:89:6f:c7:23:4b:23:6e:2c:
25:93:05:48:44:00:cc:b5:15:c9:a4:bc:37:a8:3c:
76:dd:12:a4:16:45:c5:6e:2f:69:27:9b:17:46:c8:
07:9c:1f:40:90:83:14:42:71:6b:61:2a:6f:76:de:
bf:54:6f:26:e5:52:13:13:00:5f:8a:c8:81:91:d9:
1c:3e:9a:77:01:af:4d:78:b2:9b:26:95:93:00:8a:
38:7a:46:1c:a8:bc:47:c8:09:14:ec:50:19:35:ac:
cb:72:26:fd:78:01:fc:ab:77:61:a6:68:ce:07:b4:
46:e1:89:4b:7a:d5:63:61:72:8a:5e:e9:c7:47:a1:
ba:2e:11:c2:4c:7f:11:ee:b2:e2:0b:68:e4:f4:8c:
cc:de:d3:5f:b2:27:1d:19:7a:a6:44:8b:a5:7f:04:
20:29:69:70:0b:c4:eb:67:78:9c:b0:bd:23:3e:03:
d6:4a:e4:2e:62:74:29:c7:4b:c0:66:f9:b4:c8:b3:
d4:f0:6d:95:1c:d6:ce:29:da:12:d1:cf:0a:25:de:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:D7:B2:8B:73:DC:50:D8:36:57:03:E2:02:A0:2D:4F:DD:16:51
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6d:bc:62:db:44:58:a2:98:b2:3c:c7:11:fe:d0:f2:da:df:
0b:a3:e6:0a:3b:69:74:ee:71:5b:79:d4:e2:d3:b5:af:6d:1a:
9b:36:3c:64:7e:3d:34:05:a8:8d:04:ed:71:5d:46:3d:fc:b2:
82:a9:de:16:82:85:30:19:37:ea:5b:10:a3:f0:f3:9c:86:44:
2c:cc:b3:31:d6:54:f3:db:72:a0:75:c0:01:a3:2f:5b:51:ca:
c4:9a:e9:ff:c4:87:a6:dc:88:e5:bc:75:7a:dd:0d:87:c5:91:
73:b7:f7:0b:b4:f4:60:38:ad:40:4f:40:35:d1:2f:3e:54:07:
0e:c3:88:9a:48:e8:4b:e7:08:a5:67:65:5a:1c:94:27:fe:ab:
a7:5c:1d:08:44:1a:7e:96:f8:46:8f:5f:b7:44:7d:bf:98:b3:
57:46:0e:25:97:99:d6:d6:0f:1f:97:b0:b6:07:5b:ce:96:c2:
b1:4f:d9:cf:cd:9f:03:b6:ec:06:a5:92:da:ac:9d:ea:41:f1:
70:57:9a:33:32:75:bd:d3:de:be:c6:b6:9e:2f:18:c6:33:b4:
b3:74:04:19:ba:4d:44:a3:16:d3:7e:42:77:03:8d:c1:21:62:
7e:33:f5:a4:4e:94:d9:82:a2:7c:90:49:09:7e:bd:35:9e:03:
65:a9:70:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RX023tJLgGzUlC/GT5dtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2M2QyNTcyMTgwZjRiNzg0ZmI0ZjJhNWVkNTBlOWZlNWU2
YmU2YTcwHhcNMjUwNjI4MTYwMTEzWhcNMjUwNjI5MTYwMTEzWjAzMTEwLwYDVQQD
EygwZDljZDdiMjhiNzNkYzUwZDgzNjU3MDNlMjAyYTAyZDRmZGQxNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudaM/4HH2mkZoCjQNvpV3TQwlBhm
atYddHHGLWWskx1yeDjMdzD9a701eA17nglkgczZiW/HI0sjbiwlkwVIRADMtRXJ
pLw3qDx23RKkFkXFbi9pJ5sXRsgHnB9AkIMUQnFrYSpvdt6/VG8m5VITEwBfisiB
kdkcPpp3Aa9NeLKbJpWTAIo4ekYcqLxHyAkU7FAZNazLcib9eAH8q3dhpmjOB7RG
4YlLetVjYXKKXunHR6G6LhHCTH8R7rLiC2jk9IzM3tNfsicdGXqmRIulfwQgKWlw
C8TrZ3icsL0jPgPWSuQuYnQpx0vAZvm0yLPU8G2VHNbOKdoS0c8KJd5wfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2c17KLc9xQ2DZXA+ICoC1P3RZRMB8GA1UdIwQY
MBaAFBY9JXIYD0t4T7Type1Q6f5ea+anMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEt
NzBiYmM3YzBhOWE1LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEtNzBiYmM3YzBhOWE1
LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN228YttE
WKKYsjzHEf7Q8trfC6PmCjtpdO5xW3nU4tO1r20amzY8ZH49NAWojQTtcV1GPfyy
gqneFoKFMBk36lsQo/DznIZELMyzMdZU89tyoHXAAaMvW1HKxJrp/8SHptyI5bx1
et0Nh8WRc7f3C7T0YDitQE9ANdEvPlQHDsOImkjoS+cIpWdlWhyUJ/6rp1wdCEQa
fpb4Ro9ft0R9v5izV0YOJZeZ1tYPH5ewtgdbzpbCsU/Zz82fA7bsBqWS2qyd6kHx
cFeaMzJ1vdPevsa2ni8YxjO0s3QEGbpNRKMW035CdwONwSFifjP1pE6U2YKifJBJ
CX69NZ4DZalwbw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:30 2025 by rpki-client