Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: o4wn6OdeKMxtm8gDMxxEu2G4vsOXfUHfZ8mWOs0Do74=
Subject key identifier: 32:E7:1E:DE:E7:87:FE:14:69:A1:36:68:D6:98:48:A0:F1:F5:9E:89
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 0198A04EC8F3CA01F27CA06285B9CB103D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0907
Signing time: Tue 12 Aug 2025 22:02:54 +0000
Manifest this update: Tue 12 Aug 2025 22:02:54 +0000
Manifest next update: Wed 13 Aug 2025 22:02:54 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: zhO5VsxRf2FAL0NzhJMzh5NLu7fxzFEqvRbBZR66FH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:c8:f3:ca:01:f2:7c:a0:62:85:b9:cb:10:3d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Aug 12 22:02:54 2025 GMT
Not After : Aug 13 22:02:54 2025 GMT
Subject: CN=32e71edee787fe1469a13668d69848a0f1f59e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:76:62:90:29:75:e3:8e:c1:8e:2a:15:6b:
40:b5:f9:ca:40:9a:7b:54:68:e8:5d:79:7b:c0:12:
42:e9:12:fb:28:5a:bf:a1:97:f3:ea:1c:a9:b4:30:
52:09:b5:2a:a6:0d:44:95:f4:7a:13:cc:08:08:09:
3c:cc:77:5a:d9:d1:23:93:a1:3b:c4:b3:8a:21:91:
f4:df:bc:a1:d0:16:74:ea:fb:6d:0e:1c:90:79:a7:
56:67:a1:ad:87:43:97:33:37:45:ab:c1:59:57:de:
90:0f:62:20:bf:8d:af:c3:82:b2:95:03:cc:76:18:
9d:ad:0a:41:99:3e:6f:cd:0c:34:fa:d8:26:a8:c5:
4a:ab:7a:f5:7c:37:54:9d:a9:d4:7e:26:b2:3d:e2:
a2:a3:43:91:0b:70:aa:2d:e3:20:11:b2:a2:a0:fe:
a5:57:c0:18:88:61:ec:5a:96:12:70:39:62:7d:b5:
35:23:74:f9:57:37:5c:65:3a:5b:3a:ef:03:1d:48:
6c:28:85:5e:89:65:a6:ea:40:99:2e:00:7a:da:bd:
a1:a7:b8:85:ad:dc:c4:20:e8:96:83:5d:99:b3:6f:
79:7b:ce:c7:2d:4c:8c:17:15:2e:0b:bc:f6:8e:49:
74:fa:98:f9:22:20:54:60:c3:fb:f4:a2:5e:e5:36:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E7:1E:DE:E7:87:FE:14:69:A1:36:68:D6:98:48:A0:F1:F5:9E:89
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:79:97:22:b8:ac:04:eb:2a:5b:5e:3b:45:ed:40:ba:4d:96:
40:5b:fc:bc:01:d1:cc:ba:c1:d9:d4:59:02:19:27:99:ae:66:
f6:fa:f2:bc:6b:dd:c1:d1:df:3f:37:a4:de:a1:a7:8d:9a:c3:
91:5f:f9:59:50:52:e8:65:93:52:d6:6b:4b:ae:73:89:ad:34:
a5:fb:7b:af:ab:ca:61:4d:48:d4:2e:88:21:9f:31:1c:e1:83:
ff:37:3d:37:e1:16:71:64:9a:90:f6:74:87:11:d8:b7:dc:15:
6b:21:62:1d:20:58:dd:29:23:7b:23:3d:f5:e7:80:2f:64:16:
c6:e5:d3:d9:98:ef:b9:2f:ef:47:1b:e5:57:83:51:52:a4:06:
91:be:7d:ef:20:65:d6:42:cf:7e:f9:44:7f:3e:2d:95:3b:ea:
1a:99:b3:c2:99:21:6c:b8:4e:f7:0a:46:74:e1:16:e6:47:68:
9c:24:32:fc:30:e0:fd:23:5d:80:83:b7:35:32:fc:08:91:4b:
b8:d8:48:bc:72:74:2c:7c:e0:40:21:af:da:c5:60:81:e2:69:
01:d1:95:76:fa:a0:a6:f8:e4:c6:5a:f9:d2:22:c3:4a:4f:41:
15:e3:bb:26:b2:91:ce:a5:d8:98:e1:40:96:df:43:b7:72:80:
3b:65:a3:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTsjzygHyfKBihbnLED0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjYxMzBkOTlhZjkzMjA3NzVhZDYwYjBmNGM5ODllM2U1
OTc3YzkwHhcNMjUwODEyMjIwMjU0WhcNMjUwODEzMjIwMjU0WjAzMTEwLwYDVQQD
EygzMmU3MWVkZWU3ODdmZTE0NjlhMTM2NjhkNjk4NDhhMGYxZjU5ZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY52YpApdeOOwY4qFWtAtfnKQJp7
VGjoXXl7wBJC6RL7KFq/oZfz6hyptDBSCbUqpg1ElfR6E8wICAk8zHda2dEjk6E7
xLOKIZH037yh0BZ06vttDhyQeadWZ6Gth0OXMzdFq8FZV96QD2Igv42vw4KylQPM
dhidrQpBmT5vzQw0+tgmqMVKq3r1fDdUnanUfiayPeKio0ORC3CqLeMgEbKioP6l
V8AYiGHsWpYScDlifbU1I3T5VzdcZTpbOu8DHUhsKIVeiWWm6kCZLgB62r2hp7iF
rdzEIOiWg12Zs295e87HLUyMFxUuC7z2jkl0+pj5IiBUYMP79KJe5TYDBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLnHt7nh/4UaaE2aNaYSKDx9Z6JMB8GA1UdIwQY
MBaAFBX2Ew2Zr5Mgd1rWCw9MmJ4+WXfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEt
MWY4Njc2ZjRjMTdiLzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEtMWY4Njc2ZjRjMTdi
LzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3mXIris
BOsqW147Re1Auk2WQFv8vAHRzLrB2dRZAhknma5m9vryvGvdwdHfPzek3qGnjZrD
kV/5WVBS6GWTUtZrS65zia00pft7r6vKYU1I1C6IIZ8xHOGD/zc9N+EWcWSakPZ0
hxHYt9wVayFiHSBY3SkjeyM99eeAL2QWxuXT2ZjvuS/vRxvlV4NRUqQGkb597yBl
1kLPfvlEfz4tlTvqGpmzwpkhbLhO9wpGdOEW5kdonCQy/DDg/SNdgIO3NTL8CJFL
uNhIvHJ0LHzgQCGv2sVggeJpAdGVdvqgpvjkxlr50iLDSk9BFeO7JrKRzqXYmOFA
lt9Dt3KAO2WjSQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:22 2025 by rpki-client