Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json)
Hash identifier: bA/tldPyN9wm28YWX9qv+oIR3K7s/CKiDJFUpyM4QjQ=
Subject key identifier: BA:99:B8:AA:FD:60:51:24:18:4F:26:4D:DC:2C:03:36:F1:ED:E4:B7
Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Certificate serial: 0197C537C3B258F005E8D683EDF0C0630ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 09:00:55 +0000
Manifest this update: Tue 01 Jul 2025 09:00:55 +0000
Manifest next update: Wed 02 Jul 2025 09:00:55 +0000
Files and hashes: 1: TKoxALo9u8PRYJQQjNMDBzOManE.roa (hash: e6LRQQhGn2Pm43QUsi5AMgfehOrdW1tISUFnEIiJny4=)
2: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: NBu1T8YRIFS5lL4oQsnabCXiJOpHET6DbTAaCQBX0fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:c3:b2:58:f0:05:e8:d6:83:ed:f0:c0:63:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Validity
Not Before: Jul 1 09:00:55 2025 GMT
Not After : Jul 2 09:00:55 2025 GMT
Subject: CN=ba99b8aafd605124184f264ddc2c0336f1ede4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:56:73:c5:3f:59:4f:55:06:fc:57:24:0d:
08:2d:ca:58:cf:2e:58:c3:d3:85:8f:b3:c9:43:d9:
d9:6d:6b:ff:8b:ab:9d:19:a4:72:2f:e3:70:2a:85:
89:58:6d:0d:1d:10:df:73:af:4f:0a:c4:64:26:ca:
77:d1:3f:14:e6:b1:d9:39:a7:1b:91:67:04:7a:d8:
f9:2f:ed:db:fa:4f:9e:bb:62:a6:77:55:22:f8:13:
ed:ec:77:2b:5e:b8:f8:0f:71:32:9b:ca:6f:8e:1c:
db:28:73:91:41:d2:7d:bc:32:73:49:f3:fb:27:c5:
d5:99:f8:92:f0:63:84:67:1a:af:70:69:7a:c0:7f:
ea:b1:2d:c3:43:3b:11:a3:59:b7:1c:e2:38:8e:f9:
67:c5:a9:2f:2e:80:3a:a0:09:f0:6b:8f:cf:60:37:
c0:8c:ff:b4:90:f6:2e:6e:a4:f8:86:27:e9:51:37:
f7:3c:4c:84:11:c8:cf:00:b2:56:f5:e1:32:aa:d3:
8e:5c:32:7a:d7:0c:a0:46:2e:20:37:55:60:ea:b7:
ae:62:eb:83:c2:28:03:be:0a:1e:d8:8c:48:4e:19:
f0:dd:93:5c:8d:66:37:0c:74:78:4c:0f:a2:27:ab:
74:d0:c6:78:4d:17:cc:e5:72:5d:f1:f4:4c:b5:de:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:B8:AA:FD:60:51:24:18:4F:26:4D:DC:2C:03:36:F1:ED:E4:B7
X509v3 Authority Key Identifier:
keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2d:fd:87:16:3b:5e:12:6a:45:22:da:62:3d:f8:ef:98:a7:
80:2c:3d:80:4b:50:41:f5:83:da:98:83:53:14:5a:a5:47:00:
ff:d2:35:be:25:16:0b:93:13:ef:78:a6:0e:5c:99:65:78:43:
85:09:ff:6a:e7:45:76:92:93:40:89:9e:18:fe:1f:ce:3f:41:
5f:cf:a0:57:19:01:b5:ee:b5:ad:ac:18:86:8d:ed:54:bc:50:
00:83:cb:25:7c:8a:fb:c4:9c:d9:e0:9c:f7:2a:68:16:4a:80:
af:63:75:84:d7:83:c3:83:4e:30:f7:f6:bc:5a:ab:d1:5f:d0:
52:52:f7:43:c4:fe:9e:7a:c0:37:a5:c8:12:ca:94:a1:b9:79:
10:ac:fa:8c:d0:b9:43:63:d0:51:a2:f9:28:79:f6:ce:df:d6:
b9:6a:f2:30:e4:84:ea:35:28:62:8b:4f:93:53:6d:b6:66:74:
b4:f2:e4:88:1d:50:16:59:49:b5:98:80:ca:71:93:24:cf:df:
aa:f2:43:81:6b:1e:5f:b1:91:e2:77:93:c7:72:d6:bf:30:aa:
20:f7:67:b2:33:99:b1:51:1f:f2:60:27:62:3d:fd:7a:4c:c4:
98:58:64:99:ab:67:c8:13:e6:6d:a5:3b:18:13:28:96:af:d0:
90:2e:3b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFN8OyWPAF6NaD7fDAYwrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWRlMTUyOTA2NjY0YWU3YWM5ZjIwODdhYzRkMDA2ODVh
NWQ3ZjAwHhcNMjUwNzAxMDkwMDU1WhcNMjUwNzAyMDkwMDU1WjAzMTEwLwYDVQQD
EyhiYTk5YjhhYWZkNjA1MTI0MTg0ZjI2NGRkYzJjMDMzNmYxZWRlNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrhWc8U/WU9VBvxXJA0ILcpYzy5Y
w9OFj7PJQ9nZbWv/i6udGaRyL+NwKoWJWG0NHRDfc69PCsRkJsp30T8U5rHZOacb
kWcEetj5L+3b+k+eu2Kmd1Ui+BPt7HcrXrj4D3Eym8pvjhzbKHORQdJ9vDJzSfP7
J8XVmfiS8GOEZxqvcGl6wH/qsS3DQzsRo1m3HOI4jvlnxakvLoA6oAnwa4/PYDfA
jP+0kPYubqT4hifpUTf3PEyEEcjPALJW9eEyqtOOXDJ61wygRi4gN1Vg6reuYuuD
wigDvgoe2IxIThnw3ZNcjWY3DHR4TA+iJ6t00MZ4TRfM5XJd8fRMtd6u7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqZuKr9YFEkGE8mTdwsAzbx7eS3MB8GA1UdIwQY
MBaAFHBd4VKQZmSuesnyCHrE0AaFpdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQt
ZjU2MTg0NzdmOGQ0LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQtZjU2MTg0NzdmOGQ0
LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAS39hxY7
XhJqRSLaYj3475ingCw9gEtQQfWD2piDUxRapUcA/9I1viUWC5MT73imDlyZZXhD
hQn/audFdpKTQImeGP4fzj9BX8+gVxkBte61rawYho3tVLxQAIPLJXyK+8Sc2eCc
9ypoFkqAr2N1hNeDw4NOMPf2vFqr0V/QUlL3Q8T+nnrAN6XIEsqUobl5EKz6jNC5
Q2PQUaL5KHn2zt/WuWryMOSE6jUoYotPk1NttmZ0tPLkiB1QFllJtZiAynGTJM/f
qvJDgWseX7GR4neTx3LWvzCqIPdnsjOZsVEf8mAnYj39ekzEmFhkmatnyBPmbaU7
GBMolq/QkC47zQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 11:16:08 2025 by rpki-client