
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier: uZ1qi2gWklYU6JqqPmKtTDIkoSlkwkPwE2o3NpuqJgU=
Subject key identifier: A2:4F:D1:00:33:CA:E9:4C:1D:8E:D0:77:9A:8F:02:53:32:95:E0:71
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial: 01988A69CC9F83758397112743F24BE4DF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number: 0F46
Signing time: Fri 08 Aug 2025 16:00:45 +0000
Manifest this update: Fri 08 Aug 2025 16:00:45 +0000
Manifest next update: Sat 09 Aug 2025 16:00:45 +0000
Files and hashes: 1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=)
2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: DsP6gD05be3wpcWSGIUvfq8KvWZY01mlJnW+B2nFQJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:cc:9f:83:75:83:97:11:27:43:f2:4b:e4:df:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Validity
Not Before: Aug 8 16:00:45 2025 GMT
Not After : Aug 9 16:00:45 2025 GMT
Subject: CN=a24fd10033cae94c1d8ed0779a8f02533295e071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:3e:39:97:a8:7f:2f:07:00:09:61:0f:69:
c6:c0:fd:bb:a1:43:35:f3:42:a2:52:65:e9:4b:fe:
c6:ab:fd:c1:55:75:17:b8:ce:94:13:15:fe:82:6c:
e3:65:fd:3a:6c:8f:25:ee:85:08:3e:1f:bc:4e:4e:
ee:fd:c1:f1:83:8f:ca:e2:c0:22:21:84:b2:05:cc:
7d:c9:5b:d7:2f:65:01:74:e6:eb:12:dc:83:d9:91:
b4:48:36:47:a7:13:cd:29:76:3d:df:05:b5:4d:bb:
6b:6b:cf:43:2f:40:8d:15:34:18:ce:cd:f7:4c:d6:
56:fa:c2:fe:60:15:04:f5:13:a1:ed:bc:8c:e2:50:
7b:e3:20:ea:4a:db:c0:37:19:c9:3e:47:b4:9a:02:
80:39:5c:7f:33:83:82:07:02:f4:cb:b6:96:45:9e:
3c:14:f5:d6:86:c5:37:40:ef:9c:4c:3b:a2:8b:6b:
51:1a:50:6d:29:2a:88:b4:de:08:1d:74:2a:46:49:
68:29:5c:49:48:51:4b:88:eb:23:da:0c:f6:37:96:
60:ba:a5:6d:e9:59:9d:bd:c9:0c:d8:74:6b:c7:c3:
ad:01:4d:48:4b:49:fe:03:a4:37:33:62:d0:1a:e8:
e7:ee:89:a6:37:2f:42:5c:44:95:33:d0:3e:07:52:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4F:D1:00:33:CA:E9:4C:1D:8E:D0:77:9A:8F:02:53:32:95:E0:71
X509v3 Authority Key Identifier:
keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ff:14:2b:5d:46:5b:97:f1:ec:fc:fe:f3:88:b1:af:6d:68:
7b:52:9f:df:ec:3a:4d:c1:a7:04:2f:88:28:12:e0:04:cd:52:
71:af:a0:e7:1b:d1:e8:ef:82:cd:7a:25:ae:92:72:00:50:26:
46:7b:22:b1:6a:91:62:2f:14:e8:c0:f8:4f:86:4e:68:a8:84:
04:e1:07:27:90:b4:06:b6:b6:4f:74:46:f3:bc:66:d7:b3:da:
2e:f0:95:1f:ac:75:82:1c:c6:c7:76:15:70:c0:87:4c:1a:08:
52:3e:0b:0f:41:38:0b:8f:3e:a2:14:ba:b4:be:8c:77:3f:1d:
9b:c7:7d:da:06:e7:59:50:d5:07:96:86:96:9e:76:da:b6:89:
05:b6:55:66:d2:b7:2b:4d:47:e6:58:08:85:44:e9:c1:6c:69:
87:d1:fd:4b:01:0f:b4:4a:8d:bc:14:79:99:d5:75:de:59:cf:
c5:aa:60:b2:95:2b:c2:d3:9a:99:c0:f0:d0:6f:20:4f:c2:77:
3e:9d:0a:be:89:77:14:6a:28:d6:f4:2e:d9:0a:8d:bf:2b:9e:
e1:9f:da:50:7e:f3:b1:36:4c:e4:87:00:f6:73:52:ee:e5:9d:
e5:ad:42:d6:18:26:d7:7b:0f:c0:e5:42:63:70:05:74:d8:99:
c4:6b:c3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKacyfg3WDlxEnQ/JL5N8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2NlMDYxZDI0MDhkOWE4ZjZiMmI5NDE2MmQxZjc0ZmFj
M2RjYWMwHhcNMjUwODA4MTYwMDQ1WhcNMjUwODA5MTYwMDQ1WjAzMTEwLwYDVQQD
EyhhMjRmZDEwMDMzY2FlOTRjMWQ4ZWQwNzc5YThmMDI1MzMyOTVlMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyo+OZeofy8HAAlhD2nGwP27oUM1
80KiUmXpS/7Gq/3BVXUXuM6UExX+gmzjZf06bI8l7oUIPh+8Tk7u/cHxg4/K4sAi
IYSyBcx9yVvXL2UBdObrEtyD2ZG0SDZHpxPNKXY93wW1Tbtra89DL0CNFTQYzs33
TNZW+sL+YBUE9ROh7byM4lB74yDqStvANxnJPke0mgKAOVx/M4OCBwL0y7aWRZ48
FPXWhsU3QO+cTDuii2tRGlBtKSqItN4IHXQqRkloKVxJSFFLiOsj2gz2N5ZguqVt
6VmdvckM2HRrx8OtAU1IS0n+A6Q3M2LQGujn7ommNy9CXESVM9A+B1IsUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJP0QAzyulMHY7Qd5qPAlMyleBxMB8GA1UdIwQY
MBaAFBXM4GHSQI2aj2srlBYtH3T6w9ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMt
NjY4MmY3ODI3ZGYwLzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMtNjY4MmY3ODI3ZGYw
LzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP8UK11G
W5fx7Pz+84ixr21oe1Kf3+w6TcGnBC+IKBLgBM1Sca+g5xvR6O+CzXolrpJyAFAm
RnsisWqRYi8U6MD4T4ZOaKiEBOEHJ5C0Bra2T3RG87xm17PaLvCVH6x1ghzGx3YV
cMCHTBoIUj4LD0E4C48+ohS6tL6Mdz8dm8d92gbnWVDVB5aGlp522raJBbZVZtK3
K01H5lgIhUTpwWxph9H9SwEPtEqNvBR5mdV13lnPxapgspUrwtOamcDw0G8gT8J3
Pp0Kvol3FGoo1vQu2QqNvyue4Z/aUH7zsTZM5IcA9nNS7uWd5a1C1hgm13sPwOVC
Y3AFdNiZxGvDQA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:05 2025 by rpki-client