Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier: uu0L4SvtmNXoObclQmKiyFwUgR+SPXqqMuIKjKZtVGY=
Subject key identifier: A0:A1:3B:06:8E:7A:41:C3:BD:55:75:3F:42:83:02:E9:66:E9:17:D3
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 0198D5839E5EE5268929A3B401A8247526C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: UKX34TFCd0figIbF32wm6M0tdxE.roa (hash: BFLvjvBRECITaOdgL/U7OU6npGQVInzdalw4vhrK37A=)
2: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: 5grgoRkvAlt3fyKVFWvrZO0N/JxhuyILQkF+NDTgefA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9e:5e:e5:26:89:29:a3:b4:01:a8:24:75:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=a0a13b068e7a41c3bd55753f428302e966e917d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:91:18:40:c9:be:da:b4:c1:f8:b4:81:c6:3f:
dc:83:46:4b:00:08:fa:82:35:a4:67:99:d2:93:8e:
d9:63:99:8b:92:b1:6a:78:51:ed:ed:b9:46:0b:35:
00:ff:03:68:db:f1:7f:2e:55:d4:a8:80:a2:ff:dc:
60:32:19:c7:93:55:3f:5b:58:60:3f:c8:2d:8e:ed:
da:60:10:30:ae:58:e2:36:4b:36:04:03:c1:4e:8f:
0a:bd:a1:82:42:81:0d:39:d9:96:9b:de:af:b9:8b:
63:d7:50:1e:a7:e9:22:a2:10:f8:cc:f2:71:c4:9d:
af:09:df:43:1e:24:b5:49:aa:1d:98:1d:8e:c1:77:
92:f3:00:0a:cc:a5:8a:5b:fd:d5:fd:1a:6e:ec:6c:
d0:2c:09:9c:36:c1:aa:ca:e7:1c:4a:e1:78:d5:e1:
c6:7e:e0:2b:f7:1e:df:c3:34:2c:92:8f:e4:a9:2b:
89:81:36:e7:8a:35:31:f4:b3:74:c6:00:58:96:27:
6e:13:fd:59:f4:0c:d2:eb:6d:1e:bb:bc:74:65:59:
b6:be:cb:bd:86:3b:ee:4b:4d:eb:d2:e2:20:6d:ec:
2a:bd:64:13:7e:81:6e:b8:b3:c7:41:64:df:fe:89:
5c:9a:96:cf:9a:1e:35:64:bf:95:5e:28:06:dc:c2:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A1:3B:06:8E:7A:41:C3:BD:55:75:3F:42:83:02:E9:66:E9:17:D3
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d5:bf:d5:48:39:9a:a2:99:b2:65:92:7e:49:33:00:de:24:
c1:b8:5e:bc:b1:82:37:af:d3:49:71:86:b2:2c:56:50:7c:4f:
fd:ec:71:5e:4b:07:ec:06:76:0a:66:56:e8:17:8f:7f:8a:cc:
a0:51:98:f3:85:f4:c9:24:6b:09:af:07:5e:48:86:0f:08:a6:
df:65:f6:bd:8f:1e:c1:31:ae:7d:1c:78:1a:a2:f9:6f:96:64:
59:81:e1:91:3d:97:c9:e9:d7:6d:ba:2a:3d:79:cd:6e:d1:18:
2d:d0:cd:95:eb:98:4b:44:ad:ec:13:c4:69:50:f9:8f:c6:ed:
a7:8e:0f:5c:dc:21:12:b7:b6:e3:8e:f8:bb:6b:39:0c:3f:9d:
83:ec:c4:86:ee:a6:61:3b:b9:17:92:be:eb:41:8e:d9:54:ca:
6a:1b:aa:72:60:b0:be:ef:8a:7a:09:67:57:d1:ae:e2:70:a0:
37:ec:99:52:96:42:6b:9b:9a:37:91:fe:1c:a0:a2:e4:3b:14:
9d:c4:1b:8f:8a:19:ad:c9:48:61:37:af:c6:27:68:d8:71:2a:
b0:78:79:fb:2b:66:36:46:e2:4e:da:17:6e:8b:a9:cd:4c:2c:
33:96:94:e9:05:75:75:87:25:0e:75:28:5c:7a:81:fc:f3:b8:
d8:59:fa:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg55e5SaJKaO0AagkdSbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MzZiZDhmYWQzOTNlNTEzMWEwMjM3MjkzMTViMzU2MDE0
ZTY2MzcwHhcNMjUwODIzMDYwMDI5WhcNMjUwODI0MDYwMDI5WjAzMTEwLwYDVQQD
EyhhMGExM2IwNjhlN2E0MWMzYmQ1NTc1M2Y0MjgzMDJlOTY2ZTkxN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75EYQMm+2rTB+LSBxj/cg0ZLAAj6
gjWkZ5nSk47ZY5mLkrFqeFHt7blGCzUA/wNo2/F/LlXUqICi/9xgMhnHk1U/W1hg
P8gtju3aYBAwrljiNks2BAPBTo8KvaGCQoENOdmWm96vuYtj11Aep+kiohD4zPJx
xJ2vCd9DHiS1SaodmB2OwXeS8wAKzKWKW/3V/Rpu7GzQLAmcNsGqyuccSuF41eHG
fuAr9x7fwzQsko/kqSuJgTbnijUx9LN0xgBYliduE/1Z9AzS620eu7x0ZVm2vsu9
hjvuS03r0uIgbewqvWQTfoFuuLPHQWTf/olcmpbPmh41ZL+VXigG3MIXBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKChOwaOekHDvVV1P0KDAulm6RfTMB8GA1UdIwQY
MBaAFIg2vY+tOT5RMaAjcpMVs1YBTmY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzIt
MTJmOWNiMGEyMTE4LzEvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzItMTJmOWNiMGEyMTE4
LzEvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptW/1Ug5
mqKZsmWSfkkzAN4kwbhevLGCN6/TSXGGsixWUHxP/exxXksH7AZ2CmZW6BePf4rM
oFGY84X0ySRrCa8HXkiGDwim32X2vY8ewTGufRx4GqL5b5ZkWYHhkT2XyenXbboq
PXnNbtEYLdDNleuYS0St7BPEaVD5j8btp44PXNwhEre24474u2s5DD+dg+zEhu6m
YTu5F5K+60GO2VTKahuqcmCwvu+KeglnV9Gu4nCgN+yZUpZCa5uaN5H+HKCi5DsU
ncQbj4oZrclIYTevxido2HEqsHh5+ytmNkbiTtoXboupzUwsM5aU6QV1dYclDnUo
XHqB/PO42Fn63Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:01 2025 by rpki-client