
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: 1jrCNx06okwgIr3cclx9l4TFj6e7OFZ0fbkweDmL/L4=
Subject key identifier: 65:FB:28:E7:99:BC:40:31:58:A1:B5:48:4D:B7:CF:C9:25:6E:88:DE
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 0198D850A7D3A14ACB8B30283070D6E5CDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 19:03:41 +0000
Manifest this update: Sat 23 Aug 2025 19:03:41 +0000
Manifest next update: Sun 24 Aug 2025 19:03:41 +0000
Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: q4yO5ZaoU9tFut6Ka0mtHe3b0HvJ/toCIYhPtqYoRZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:a7:d3:a1:4a:cb:8b:30:28:30:70:d6:e5:cd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Aug 23 19:03:41 2025 GMT
Not After : Aug 24 19:03:41 2025 GMT
Subject: CN=65fb28e799bc403158a1b5484db7cfc9256e88de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:8e:5a:92:65:35:55:13:f0:5c:2e:b8:76:
ae:8e:6b:fe:d9:47:0f:81:b7:c8:72:1d:f8:98:26:
50:ee:62:9f:96:f8:b8:a2:1e:e4:77:8f:f5:53:0d:
51:c1:8d:2b:bc:4e:38:d9:3d:40:bb:d9:7b:96:fc:
f7:f6:01:b2:f4:79:44:98:db:7b:2d:89:74:02:bd:
68:52:c2:3f:f3:c4:98:cc:b3:fa:6d:b3:61:61:5b:
16:a0:a4:c1:4a:57:76:ad:18:84:7b:26:3b:26:1e:
c1:9c:62:8b:58:3d:f4:8f:3f:12:bd:8d:71:76:ac:
11:f0:2c:60:3e:b3:4c:38:fd:45:01:0e:0b:b0:3e:
4f:af:0c:bb:f8:6b:df:7d:cd:bf:d3:b6:bb:48:ef:
12:60:d3:51:1d:29:ee:ae:db:75:65:33:4a:9a:99:
a2:20:3a:29:5a:98:e4:f3:79:cd:f2:37:dc:1b:66:
76:4d:3b:48:b3:e5:c4:d7:da:62:90:51:0a:4c:04:
e2:fe:52:74:a9:0c:ef:00:ed:72:4d:1d:a0:e3:5c:
b6:e2:6b:d4:49:41:a0:cd:36:f0:e8:33:41:48:f5:
ee:05:31:c4:aa:5a:a8:84:ec:16:5f:2f:66:2b:f1:
d4:b1:2f:a9:a2:e1:67:20:85:78:9d:a1:86:7a:cc:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FB:28:E7:99:BC:40:31:58:A1:B5:48:4D:B7:CF:C9:25:6E:88:DE
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:14:ea:f1:a5:e7:3d:ac:ab:10:80:00:9d:93:93:80:0b:75:
90:36:a8:19:de:b2:eb:f4:8a:6a:29:03:76:f8:e3:f1:7e:b5:
67:f2:54:f1:50:2c:89:38:de:b7:14:78:8a:a0:39:5d:f8:28:
ef:4d:e1:c8:28:c8:83:45:0b:ea:40:84:3b:4a:6b:77:fb:12:
47:ee:44:43:84:7b:06:13:07:80:8e:a0:c4:d7:d9:02:21:dd:
f3:d4:04:90:0e:d5:94:3d:6b:be:07:63:ab:89:c9:1a:1a:a0:
dc:15:eb:8e:a6:2f:f8:9c:1f:00:86:79:8f:27:7b:56:9d:29:
e2:d0:92:d0:c5:ef:ec:f1:95:f1:d8:db:3d:80:86:41:af:6e:
f8:f2:3c:6b:6f:25:8c:d1:4f:2d:7b:23:93:23:0d:00:15:46:
68:47:cf:e5:60:b3:d6:19:23:4c:e1:48:ad:5f:1b:68:ea:67:
b6:6e:99:f7:7d:2f:bd:6d:e2:77:e5:1e:72:5c:d6:1d:bc:31:
fe:61:5d:1b:ec:1b:a0:87:8c:de:c7:48:e7:64:33:2a:b8:ee:
4f:4c:cb:64:fe:19:04:05:3e:8e:df:66:49:55:47:83:7a:cc:
d7:46:3e:7e:2f:3b:06:b3:64:cf:e8:f7:40:5b:df:b6:4e:91:
42:7c:a1:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUKfToUrLizAoMHDW5c24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl
NWUwZTgwHhcNMjUwODIzMTkwMzQxWhcNMjUwODI0MTkwMzQxWjAzMTEwLwYDVQQD
Eyg2NWZiMjhlNzk5YmM0MDMxNThhMWI1NDg0ZGI3Y2ZjOTI1NmU4OGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaWOWpJlNVUT8FwuuHaujmv+2UcP
gbfIch34mCZQ7mKflvi4oh7kd4/1Uw1RwY0rvE442T1Au9l7lvz39gGy9HlEmNt7
LYl0Ar1oUsI/88SYzLP6bbNhYVsWoKTBSld2rRiEeyY7Jh7BnGKLWD30jz8SvY1x
dqwR8CxgPrNMOP1FAQ4LsD5Prwy7+Gvffc2/07a7SO8SYNNRHSnurtt1ZTNKmpmi
IDopWpjk83nN8jfcG2Z2TTtIs+XE19pikFEKTATi/lJ0qQzvAO1yTR2g41y24mvU
SUGgzTbw6DNBSPXuBTHEqlqohOwWXy9mK/HUsS+pouFnIIV4naGGeszmcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX7KOeZvEAxWKG1SE23z8klbojeMB8GA1UdIwQY
MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt
ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1
LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBTq8aXn
PayrEIAAnZOTgAt1kDaoGd6y6/SKaikDdvjj8X61Z/JU8VAsiTjetxR4iqA5Xfgo
703hyCjIg0UL6kCEO0prd/sSR+5EQ4R7BhMHgI6gxNfZAiHd89QEkA7VlD1rvgdj
q4nJGhqg3BXrjqYv+JwfAIZ5jyd7Vp0p4tCS0MXv7PGV8djbPYCGQa9u+PI8a28l
jNFPLXsjkyMNABVGaEfP5WCz1hkjTOFIrV8baOpntm6Z930vvW3id+UeclzWHbwx
/mFdG+wboIeM3sdI52QzKrjuT0zLZP4ZBAU+jt9mSVVHg3rM10Y+fi87BrNkz+j3
QFvftk6RQnyh8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:13 2025 by rpki-client