
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: mw8sBaeAW4zjflgAtZtfT4ylrrJUaO6sp2qCIqGE1Sk=
Subject key identifier: 06:F7:1C:60:EE:B6:2A:8B:A2:9A:BD:8C:A0:1B:94:D5:31:D2:34:5D
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 0198922340F798197B130F2A31C195053DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 0AB1
Signing time: Sun 10 Aug 2025 04:00:40 +0000
Manifest this update: Sun 10 Aug 2025 04:00:40 +0000
Manifest next update: Mon 11 Aug 2025 04:00:40 +0000
Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: 31VfjeAZWaaLCGRmkQt/X8kwuA6n2Yo2B2keUZKv4JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:40:f7:98:19:7b:13:0f:2a:31:c1:95:05:3d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Aug 10 04:00:40 2025 GMT
Not After : Aug 11 04:00:40 2025 GMT
Subject: CN=06f71c60eeb62a8ba29abd8ca01b94d531d2345d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:49:cc:1a:49:6a:c1:e1:c8:1d:69:22:a7:
26:f7:9a:46:2e:a6:65:a4:4d:a7:fc:fa:2c:ff:95:
af:43:f1:41:d3:28:d6:09:7b:f2:bb:74:fa:99:dd:
41:7b:54:9b:2f:ac:82:89:aa:de:ae:84:43:47:04:
e2:b7:49:3a:07:8d:1f:62:c6:fe:d9:f8:3e:2f:ed:
63:6e:a1:22:41:75:92:54:d2:95:1a:67:d3:0b:53:
25:72:c1:f2:6d:e9:7a:ca:ea:c3:dc:44:5f:49:ae:
d2:79:88:d0:36:e5:ef:3c:2e:fe:d7:42:81:61:46:
95:ac:e5:b4:6c:79:9d:29:93:b4:73:7f:84:af:3f:
8c:2a:a7:e3:fd:80:98:2c:37:22:4d:b9:c7:a7:9a:
bc:fa:12:74:96:b8:85:e7:17:60:f8:05:2c:7d:d7:
7e:8c:84:9b:6b:37:19:87:29:90:38:39:b3:54:fe:
02:f7:12:a7:37:ed:3d:c0:89:0c:71:4b:65:fa:7c:
ca:99:37:e6:d8:3c:af:8f:fa:5c:8f:36:77:9f:6b:
8b:d6:f2:03:41:9d:cd:96:14:94:fc:35:7b:58:68:
84:04:90:82:da:a8:89:a9:77:c2:57:3c:ee:0b:83:
4f:50:70:ab:6d:21:e3:ec:be:b4:fa:fe:f5:c7:7f:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F7:1C:60:EE:B6:2A:8B:A2:9A:BD:8C:A0:1B:94:D5:31:D2:34:5D
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:c6:f5:0b:86:4d:56:c1:55:3b:0d:ed:40:60:07:1b:46:
38:c6:b2:ba:e7:5e:89:d0:ea:dd:79:a0:4c:52:91:13:4e:24:
ad:fb:35:76:7d:9b:33:48:a2:2b:a2:ec:a3:a8:8b:fb:48:33:
b0:fa:24:d2:7c:ba:d9:16:26:71:1f:34:01:6f:89:da:34:da:
84:3c:5c:9d:c3:6a:86:ac:86:24:c7:67:52:69:f6:40:ea:53:
10:73:d0:cd:97:30:e0:b5:22:24:44:c1:5d:07:7f:5c:b8:5a:
0b:22:ac:e1:86:29:91:86:8b:13:87:10:ea:46:be:b3:d6:04:
a2:db:8b:a8:0d:46:06:07:a2:f3:9c:ad:ff:ee:e5:74:a0:bc:
d5:e9:54:6d:f8:9a:34:d5:f2:14:30:42:df:2a:a4:df:90:d7:
7c:f2:82:d9:2c:73:a7:25:5a:22:78:d0:27:16:5c:07:04:8e:
f3:72:bb:47:b3:36:9f:b5:ab:2c:47:73:d2:e0:7c:37:41:93:
df:ee:7a:bb:6d:71:bf:8e:43:70:e5:dc:7c:67:d5:a7:53:1b:
72:89:29:b6:3c:98:bc:48:07:87:cf:eb:1d:a5:da:3b:af:7e:
30:90:9c:50:8d:a9:89:47:84:a3:57:c5:6b:52:39:a3:b1:68:
36:f9:dd:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSI0D3mBl7Ew8qMcGVBT34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOGM3NDE0M2MyMjczZTIwMWE2NzU3MTU0MzFkZmFmMjhm
ZTE3YjIwHhcNMjUwODEwMDQwMDQwWhcNMjUwODExMDQwMDQwWjAzMTEwLwYDVQQD
EygwNmY3MWM2MGVlYjYyYThiYTI5YWJkOGNhMDFiOTRkNTMxZDIzNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvExJzBpJasHhyB1pIqcm95pGLqZl
pE2n/Pos/5WvQ/FB0yjWCXvyu3T6md1Be1SbL6yCiareroRDRwTit0k6B40fYsb+
2fg+L+1jbqEiQXWSVNKVGmfTC1MlcsHybel6yurD3ERfSa7SeYjQNuXvPC7+10KB
YUaVrOW0bHmdKZO0c3+Erz+MKqfj/YCYLDciTbnHp5q8+hJ0lriF5xdg+AUsfdd+
jISbazcZhymQODmzVP4C9xKnN+09wIkMcUtl+nzKmTfm2Dyvj/pcjzZ3n2uL1vID
QZ3NlhSU/DV7WGiEBJCC2qiJqXfCVzzuC4NPUHCrbSHj7L60+v71x38tdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb3HGDutiqLopq9jKAblNUx0jRdMB8GA1UdIwQY
MBaAFH2MdBQ8InPiAaZ1cVQx368o/heyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjIt
MThjMDM2NTMwN2JmLzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81YzNhNGMtOTg0My00YmVjLWExNjItMThjMDM2NTMwN2Jm
LzEvZll4MEZEd2ljLUlCcG5WeFZESGZyeWotRjdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBvG9QuG
TVbBVTsN7UBgBxtGOMayuudeidDq3XmgTFKRE04krfs1dn2bM0iiK6Lso6iL+0gz
sPok0ny62RYmcR80AW+J2jTahDxcncNqhqyGJMdnUmn2QOpTEHPQzZcw4LUiJETB
XQd/XLhaCyKs4YYpkYaLE4cQ6ka+s9YEotuLqA1GBgei85yt/+7ldKC81elUbfia
NNXyFDBC3yqk35DXfPKC2SxzpyVaInjQJxZcBwSO83K7R7M2n7WrLEdz0uB8N0GT
3+56u21xv45DcOXcfGfVp1MbcokptjyYvEgHh8/rHaXaO69+MJCcUI2piUeEo1fF
a1I5o7FoNvndHQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:57 2025 by rpki-client