Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: vxDcg/Ws6jMjZlV/RtyjWYez03HXU9oV3aWAilfrFJ4=
Subject key identifier: C5:AE:60:37:70:8F:FA:11:21:2F:AD:32:F9:9F:72:B0:EF:1B:7C:6B
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 0198D660D3B0EA6BF6CC98130B641D7E28B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: 020F
Signing time: Sat 23 Aug 2025 10:02:06 +0000
Manifest this update: Sat 23 Aug 2025 10:02:06 +0000
Manifest next update: Sun 24 Aug 2025 10:02:06 +0000
Files and hashes: 1: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (hash: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: ijLTt3nCCy8Rvp2GctkN5BIXigTH8U9x6DcZ0x5Xboc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d3:b0:ea:6b:f6:cc:98:13:0b:64:1d:7e:28:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Aug 23 10:02:06 2025 GMT
Not After : Aug 24 10:02:06 2025 GMT
Subject: CN=c5ae6037708ffa11212fad32f99f72b0ef1b7c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:b0:b2:1c:9c:7b:39:24:6e:09:22:6c:f1:
ea:68:d6:f6:6d:68:62:88:0b:c2:13:42:cb:ec:aa:
fe:51:b3:9f:a8:ff:7b:91:fe:0e:08:98:e4:45:dc:
14:f7:b6:ca:0b:37:a0:5a:1a:a6:d7:7a:b7:64:25:
28:4e:7b:3a:32:4a:a8:b7:67:71:68:5a:05:34:2e:
7c:d1:d2:44:46:0f:35:4c:8b:85:fb:b1:5c:e0:b3:
af:7a:67:87:72:24:26:d2:c8:57:e3:f5:28:e4:b8:
f9:73:18:5b:fc:ed:2c:c7:12:f6:d5:86:10:7f:62:
77:97:6d:05:a7:5a:51:cb:f4:01:9d:3a:7f:8b:a8:
f6:a4:47:03:74:03:7f:df:8c:48:cb:03:b7:38:ff:
8f:ba:e6:54:f0:60:2c:59:c6:bd:f3:a1:e6:99:77:
a8:01:32:73:d9:29:eb:28:e6:48:aa:b3:05:bf:1d:
97:6f:d2:d0:53:1e:9d:cb:c4:9a:e4:4f:84:42:be:
41:34:18:5f:0f:dd:a9:ae:34:e2:4f:ad:88:ea:1d:
d3:ea:4e:9d:23:01:c8:03:63:e0:f3:41:fd:41:bf:
37:d4:b4:e5:14:13:ac:75:da:28:ce:bc:51:fc:87:
1d:d2:42:1b:59:82:09:25:83:66:a8:aa:8a:c7:3e:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AE:60:37:70:8F:FA:11:21:2F:AD:32:F9:9F:72:B0:EF:1B:7C:6B
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:88:9c:9b:ea:35:e0:b9:92:d0:be:a8:06:d4:a5:1d:83:f8:
b3:d7:a9:a9:e9:c3:34:76:43:55:90:7d:6e:17:f8:88:d6:ef:
c4:d7:30:71:df:d3:da:d9:02:17:64:fe:df:e8:5e:59:bd:5a:
e5:39:2b:49:5d:f7:93:f6:34:5d:08:be:6d:9a:63:1b:be:02:
39:f6:4e:74:63:db:73:92:2f:5d:10:72:e9:97:2a:05:38:a4:
43:3f:dd:57:a3:31:ce:0e:6e:ca:73:2b:f0:61:0b:32:f6:10:
a3:85:cf:d9:57:ac:f0:33:be:85:1d:aa:73:fd:73:47:b3:18:
52:66:d1:d1:3e:71:cd:57:2c:21:d9:2f:be:a7:28:af:11:80:
80:28:15:65:a7:8b:a2:d8:c0:fd:73:b0:b6:20:4a:f2:26:ca:
c4:bf:f5:82:6c:89:91:3b:98:49:1b:7c:cf:91:2e:72:5d:c4:
5d:ca:5d:80:20:67:1a:7f:e9:40:3e:d2:15:3b:ff:61:ab:17:
9b:ad:5c:1b:09:2d:b1:bf:d6:d0:5a:1a:7e:d7:db:4a:cf:4a:
20:34:1b:a8:85:95:24:c4:86:0f:dc:d7:05:41:b8:03:72:00:
43:a2:7c:07:a6:15:b3:e7:02:4e:41:da:d5:e9:22:8f:66:c8:
d7:87:2b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYNOw6mv2zJgTC2Qdfii3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTIwNmIxZDZmMzkxMmE4NmViNjI4ZjYxOWM1YTU1MmM1
NTM1MDEwHhcNMjUwODIzMTAwMjA2WhcNMjUwODI0MTAwMjA2WjAzMTEwLwYDVQQD
EyhjNWFlNjAzNzcwOGZmYTExMjEyZmFkMzJmOTlmNzJiMGVmMWI3YzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+KwshycezkkbgkibPHqaNb2bWhi
iAvCE0LL7Kr+UbOfqP97kf4OCJjkRdwU97bKCzegWhqm13q3ZCUoTns6Mkqot2dx
aFoFNC580dJERg81TIuF+7Fc4LOvemeHciQm0shX4/Uo5Lj5cxhb/O0sxxL21YYQ
f2J3l20Fp1pRy/QBnTp/i6j2pEcDdAN/34xIywO3OP+PuuZU8GAsWca986HmmXeo
ATJz2SnrKOZIqrMFvx2Xb9LQUx6dy8Sa5E+EQr5BNBhfD92prjTiT62I6h3T6k6d
IwHIA2Pg80H9Qb831LTlFBOsddoozrxR/Icd0kIbWYIJJYNmqKqKxz4xkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWuYDdwj/oRIS+tMvmfcrDvG3xrMB8GA1UdIwQY
MBaAFMRSBrHW85Eqhutij2GcWlUsVTUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUt
NWJlNDBiMTRmOGRmLzEveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUtNWJlNDBiMTRmOGRm
LzEveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYicm+o1
4LmS0L6oBtSlHYP4s9epqenDNHZDVZB9bhf4iNbvxNcwcd/T2tkCF2T+3+heWb1a
5TkrSV33k/Y0XQi+bZpjG74COfZOdGPbc5IvXRBy6ZcqBTikQz/dV6Mxzg5uynMr
8GELMvYQo4XP2Ves8DO+hR2qc/1zR7MYUmbR0T5xzVcsIdkvvqcorxGAgCgVZaeL
otjA/XOwtiBK8ibKxL/1gmyJkTuYSRt8z5Eucl3EXcpdgCBnGn/pQD7SFTv/YasX
m61cGwktsb/W0FoaftfbSs9KIDQbqIWVJMSGD9zXBUG4A3IAQ6J8B6YVs+cCTkHa
1ekij2bI14crFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:23 2025 by rpki-client