Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: x8W5HwXn/xWgG0sxhRWNNT5qU69slqKYmtGfZuqUNiE=
Subject key identifier: 6B:F5:5A:07:6A:E0:61:EC:AF:8B:AB:DA:27:3C:F9:45:3B:07:63:5B
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 0199FE46C92AFD45E4A5D6B7F757B9593EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0B71
Signing time: Sun 19 Oct 2025 21:01:15 +0000
Manifest this update: Sun 19 Oct 2025 21:01:15 +0000
Manifest next update: Mon 20 Oct 2025 21:01:15 +0000
Files and hashes: 1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: yIlvCIb4f7MeLNHaotj+8h5AzlwdmsDFFlM2JEp4o/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c9:2a:fd:45:e4:a5:d6:b7:f7:57:b9:59:3e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Oct 19 21:01:15 2025 GMT
Not After : Oct 20 21:01:15 2025 GMT
Subject: CN=6bf55a076ae061ecaf8babda273cf9453b07635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:2f:41:ed:19:1f:bc:a2:0c:9c:80:1f:15:
c1:64:2e:6e:5e:35:f1:24:33:89:87:11:d9:74:f3:
95:be:af:33:30:65:21:89:bf:54:4e:1c:7e:eb:c3:
ea:6d:0a:ea:2e:a6:ea:b0:51:80:5a:8c:54:ec:6a:
de:6c:37:5f:05:ef:33:f6:d0:80:43:fa:35:22:dc:
63:a4:b6:31:f1:e5:91:16:0f:dc:1a:fe:3a:78:4f:
04:d7:ee:c0:68:7b:f3:9c:43:60:27:36:d5:ff:0b:
a0:ef:2a:99:db:91:17:76:77:58:08:87:3f:8e:4a:
0f:86:7a:bb:74:b2:98:d3:e4:75:78:8c:a5:ed:f4:
19:14:94:d6:f5:28:af:b7:a3:b6:7f:ea:24:b3:43:
e3:0d:ae:27:5b:16:44:79:f7:be:d7:7a:14:d9:88:
b2:2b:f2:a4:de:bf:58:bf:1e:b7:58:84:1d:50:e1:
1b:cd:0c:6a:f0:58:0d:51:cc:ef:ae:84:45:e7:0a:
72:ff:02:73:98:9c:f1:f7:d7:ec:8b:ce:59:37:3c:
c1:55:8f:33:1f:57:85:0a:44:c4:c8:72:5b:4f:8a:
a5:c7:50:8a:ac:7e:69:6d:6f:37:f8:b7:7e:e6:ee:
4d:fd:57:6d:04:0f:4e:78:84:99:15:18:79:00:87:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:5A:07:6A:E0:61:EC:AF:8B:AB:DA:27:3C:F9:45:3B:07:63:5B
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a7:1e:d9:43:03:7e:6d:73:28:98:61:42:b3:68:6a:fc:d2:
1e:1e:e4:46:7c:4b:f9:4a:d5:70:03:7f:27:8a:bd:8a:8f:2e:
81:b2:bb:56:83:1a:f3:88:2d:b3:60:34:9f:55:0d:48:73:b5:
ae:8d:be:8c:2e:bf:b9:01:c9:a0:8d:ff:51:53:0f:f3:b0:37:
06:4d:cd:44:11:2b:66:93:72:f2:63:03:65:e7:60:16:70:51:
07:ff:be:02:5a:a7:be:f9:68:82:2e:a3:e2:c0:92:bb:e0:98:
5d:3a:78:13:15:24:4e:d2:6c:05:07:1e:de:ce:06:42:0e:fe:
ce:ec:9f:61:b8:80:c9:d3:50:4b:4a:bb:63:16:5b:0c:92:8d:
12:e5:40:b8:cf:d2:46:93:e5:37:13:b2:3f:44:7b:00:2d:34:
c5:d3:84:a8:96:57:09:52:50:4f:04:07:a1:7d:59:62:fd:c2:
a1:7b:34:a9:56:21:b5:a5:26:88:d8:90:4d:fe:53:5c:d8:6f:
6b:a9:6b:cb:dd:fe:b5:06:1f:70:1b:05:ac:37:c1:bb:d9:90:
27:ce:ea:c6:aa:c3:cd:9d:c2:70:4f:7f:1e:c8:de:ae:6c:94:
bd:9c:92:6a:1f:b8:9e:08:88:ef:4a:2d:57:f1:cf:ad:70:d1:
5d:b4:13:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rskq/UXkpda391e5WT73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1N2IzMjA4MzBhZDA2ZWE3MWE3MjZlOWI4YjNjNDczMjQx
MjE5ZGIwHhcNMjUxMDE5MjEwMTE1WhcNMjUxMDIwMjEwMTE1WjAzMTEwLwYDVQQD
Eyg2YmY1NWEwNzZhZTA2MWVjYWY4YmFiZGEyNzNjZjk0NTNiMDc2MzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFMvQe0ZH7yiDJyAHxXBZC5uXjXx
JDOJhxHZdPOVvq8zMGUhib9UThx+68PqbQrqLqbqsFGAWoxU7GrebDdfBe8z9tCA
Q/o1ItxjpLYx8eWRFg/cGv46eE8E1+7AaHvznENgJzbV/wug7yqZ25EXdndYCIc/
jkoPhnq7dLKY0+R1eIyl7fQZFJTW9Sivt6O2f+oks0PjDa4nWxZEefe+13oU2Yiy
K/Kk3r9Yvx63WIQdUOEbzQxq8FgNUczvroRF5wpy/wJzmJzx99fsi85ZNzzBVY8z
H1eFCkTEyHJbT4qlx1CKrH5pbW83+Ld+5u5N/VdtBA9OeISZFRh5AIcZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv1Wgdq4GHsr4ur2ic8+UU7B2NbMB8GA1UdIwQY
MBaAFBV7MggwrQbqcacm6bizxHMkEhnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMt
YzY1MGM3NmQwOGNlLzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMtYzY1MGM3NmQwOGNl
LzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqce2UMD
fm1zKJhhQrNoavzSHh7kRnxL+UrVcAN/J4q9io8ugbK7VoMa84gts2A0n1UNSHO1
ro2+jC6/uQHJoI3/UVMP87A3Bk3NRBErZpNy8mMDZedgFnBRB/++Alqnvvlogi6j
4sCSu+CYXTp4ExUkTtJsBQce3s4GQg7+zuyfYbiAydNQS0q7YxZbDJKNEuVAuM/S
RpPlNxOyP0R7AC00xdOEqJZXCVJQTwQHoX1ZYv3CoXs0qVYhtaUmiNiQTf5TXNhv
a6lry93+tQYfcBsFrDfBu9mQJ87qxqrDzZ3CcE9/HsjermyUvZySah+4ngiI70ot
V/HPrXDRXbQTMg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:05:12 2025 by rpki-client