Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier: DPmqNCt838xnzZ5tMAHn8m72Fpx8//q9Mj9bdGS81NI=
Subject key identifier: B0:89:15:75:A2:FD:FA:07:49:A8:89:BF:DE:38:CB:F8:E3:44:FC:14
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 0197B6A11936C8EC9F8A11056CD1B4B09F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number: 128A
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: 9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa (hash: bC7IXHx63H7lpbQ+lP0qMuIBLR6TNwS7YJHQvmLzCRc=)
2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: IP9l7G0kRU+wddcUFzpi4oDcFoMPM7ZEUTnhOhwlrNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:19:36:c8:ec:9f:8a:11:05:6c:d1:b4:b0:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=b0891575a2fdfa0749a889bfde38cbf8e344fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:8c:77:97:a1:93:24:6f:47:e4:17:39:73:
98:78:00:3f:a3:c3:21:b7:70:e8:bb:4b:0a:25:e3:
ec:ae:ac:f6:6c:89:e3:87:c1:94:56:e5:3f:08:a2:
65:4d:94:f6:82:7b:1b:fc:66:10:a9:ce:a9:9f:ae:
8b:8e:89:89:a6:aa:6b:95:c6:a9:4c:38:ee:a2:bd:
35:10:9c:4f:59:a0:08:a4:9c:fb:d2:ea:58:bb:42:
c3:d5:09:b8:f7:be:01:14:72:07:50:4c:84:1f:c3:
d8:6f:76:fc:c9:89:8a:da:e7:e7:10:2f:c8:16:a3:
be:de:d1:e1:e7:32:27:03:43:dd:48:eb:fc:25:aa:
bd:54:08:f2:2c:9f:04:68:ea:d7:3b:7e:ac:43:81:
4b:ae:74:2d:af:f6:89:fb:ad:64:1a:82:c6:e5:36:
ac:8a:af:7a:a5:1a:92:99:17:bf:c0:d6:c0:5c:90:
b7:cc:59:e6:ea:85:65:30:2b:ca:02:4b:a5:fb:b7:
24:b9:a4:93:36:12:ef:7a:d0:99:c3:b8:50:0c:5a:
37:bf:74:aa:73:dd:4c:f6:75:5d:c3:35:de:05:84:
a3:87:88:80:d5:ea:d1:2a:12:46:bc:2c:68:10:b4:
78:e5:ca:37:22:1e:21:22:7b:01:52:f4:03:55:9f:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:15:75:A2:FD:FA:07:49:A8:89:BF:DE:38:CB:F8:E3:44:FC:14
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:18:13:af:5c:3e:a0:ec:92:a7:0e:86:39:5b:57:df:f4:66:
95:93:36:e0:aa:93:c4:b0:34:da:f9:bb:30:67:c0:81:86:90:
be:0d:35:68:ae:45:d5:77:f0:ef:56:40:fa:c7:ff:01:b8:4f:
11:6a:79:eb:0b:0a:2d:c0:af:65:4a:4c:55:87:d5:e2:29:6a:
41:40:26:d4:a7:07:0d:55:cf:76:a5:49:10:b9:4d:e2:b1:48:
9b:08:90:80:bb:77:8a:80:be:1e:58:cf:23:65:78:1e:70:ca:
75:e6:8c:1d:ca:95:46:cc:df:e5:09:50:1d:b6:97:da:3c:39:
25:08:ed:2e:2c:4c:45:5a:c8:f2:c8:a8:1d:b7:c4:0f:65:0e:
68:ca:3a:02:d0:7b:89:a2:5b:af:48:f2:43:61:1d:88:51:7f:
bf:5c:87:0e:43:ba:ce:56:52:c9:d8:e2:0f:14:1c:5f:73:a3:
17:a9:14:cd:d4:a0:b0:17:51:5d:ed:93:73:da:15:bc:58:54:
c2:64:f9:d8:97:d2:0c:6b:be:8f:c4:be:29:b9:8a:b2:17:bd:
ea:e3:e0:54:7c:7d:3d:d1:fc:b3:d4:64:08:32:56:07:c7:6b:
63:d5:77:47:8a:07:b4:b7:07:64:91:88:fc:76:57:e4:0d:19:
fb:dc:23:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRk2yOyfihEFbNG0sJ9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNTkwYjczM2M1NmUxNGViYWM2OWY3YjQ0ZDRiYzk1NGU5
MzcwZTMwHhcNMjUwNjI4MTMwMTQwWhcNMjUwNjI5MTMwMTQwWjAzMTEwLwYDVQQD
EyhiMDg5MTU3NWEyZmRmYTA3NDlhODg5YmZkZTM4Y2JmOGUzNDRmYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d2Md5ehkyRvR+QXOXOYeAA/o8Mh
t3Dou0sKJePsrqz2bInjh8GUVuU/CKJlTZT2gnsb/GYQqc6pn66LjomJpqprlcap
TDjuor01EJxPWaAIpJz70upYu0LD1Qm4974BFHIHUEyEH8PYb3b8yYmK2ufnEC/I
FqO+3tHh5zInA0PdSOv8Jaq9VAjyLJ8EaOrXO36sQ4FLrnQtr/aJ+61kGoLG5Tas
iq96pRqSmRe/wNbAXJC3zFnm6oVlMCvKAkul+7ckuaSTNhLvetCZw7hQDFo3v3Sq
c91M9nVdwzXeBYSjh4iA1erRKhJGvCxoELR45co3Ih4hInsBUvQDVZ9UfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCJFXWi/foHSaiJv944y/jjRPwUMB8GA1UdIwQY
MBaAFHxZC3M8VuFOusafe0TUvJVOk3DjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQt
ZjNiNWU4MDI1MGRkLzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQtZjNiNWU4MDI1MGRk
LzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBgTr1w+
oOySpw6GOVtX3/RmlZM24KqTxLA02vm7MGfAgYaQvg01aK5F1Xfw71ZA+sf/AbhP
EWp56wsKLcCvZUpMVYfV4ilqQUAm1KcHDVXPdqVJELlN4rFImwiQgLt3ioC+HljP
I2V4HnDKdeaMHcqVRszf5QlQHbaX2jw5JQjtLixMRVrI8sioHbfED2UOaMo6AtB7
iaJbr0jyQ2EdiFF/v1yHDkO6zlZSydjiDxQcX3OjF6kUzdSgsBdRXe2Tc9oVvFhU
wmT52JfSDGu+j8S+KbmKshe96uPgVHx9PdH8s9RkCDJWB8drY9V3R4oHtLcHZJGI
/HZX5A0Z+9wjbw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:56 2025 by rpki-client