Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: ZqJ/Q2E6F069tyNpS4oZlyDUdYMIgy/0aQt5Pc3FksY=
Subject key identifier: 7C:45:E9:AA:E3:14:FF:05:FE:32:8D:3B:AB:7E:3A:1D:E4:82:1E:A7
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 01988279A2B4F423B4CFE04FE267F8E39D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0736
Signing time: Thu 07 Aug 2025 03:01:06 +0000
Manifest this update: Thu 07 Aug 2025 03:01:06 +0000
Manifest next update: Fri 08 Aug 2025 03:01:06 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: wZbKiUnGDcegvlv44eyG0o/kNMU1CHJPTNStxq6H6t0=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:a2:b4:f4:23:b4:cf:e0:4f:e2:67:f8:e3:9d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Aug 7 03:01:06 2025 GMT
Not After : Aug 8 03:01:06 2025 GMT
Subject: CN=7c45e9aae314ff05fe328d3bab7e3a1de4821ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:f9:ec:77:3d:9a:9f:f4:be:c4:67:0a:ad:
5b:6d:b5:5b:93:e2:02:92:f6:99:cc:c0:52:1a:67:
98:27:12:73:83:26:4b:d1:bb:01:23:1e:5f:f1:3b:
5c:d6:60:55:cd:45:8a:1a:da:76:bd:34:ad:94:fd:
3a:00:7a:16:8f:fc:83:ac:1a:16:69:14:9e:14:20:
44:81:c2:b2:b6:52:39:89:32:fa:d5:5b:85:26:80:
c7:04:bf:7a:0a:0c:4c:a2:71:02:c8:90:d0:b7:c0:
b8:f1:69:38:61:fd:21:29:35:bd:34:56:3a:c3:6d:
2f:05:a5:e2:94:bd:bb:44:db:13:71:0c:4a:a8:6e:
73:bf:29:91:81:09:8c:f0:5b:9d:af:40:19:8f:5a:
c3:62:a0:1e:01:3d:39:4c:95:13:f3:8a:3d:71:8e:
ec:19:3b:58:48:e2:b8:bd:91:1a:dd:da:99:66:eb:
10:d1:ac:bf:8d:99:09:e6:8c:44:1c:b7:b3:2b:53:
b9:c5:49:54:ab:80:bc:f2:18:30:69:26:d3:2d:b2:
fa:08:7c:b4:99:89:14:9a:c5:20:2d:75:e3:df:b8:
8a:e2:82:d4:52:e7:78:c5:28:36:f8:d3:9e:df:1d:
8a:b3:e1:94:9a:c6:a3:d6:54:e9:3c:e5:b9:03:54:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:45:E9:AA:E3:14:FF:05:FE:32:8D:3B:AB:7E:3A:1D:E4:82:1E:A7
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c3:8f:79:d6:bd:5d:9d:65:a6:f7:25:fc:21:0e:d7:f3:8c:
87:7c:5b:89:53:c8:c5:73:7c:8b:a8:31:a4:94:0e:6a:82:f1:
97:ce:d1:59:20:68:95:7b:e3:7d:b9:b3:c3:a0:23:41:80:8c:
91:f7:11:c4:40:54:93:f9:49:c5:66:10:cd:39:75:12:1e:a5:
ec:4e:86:fe:7f:10:23:6b:03:bb:8c:21:fc:3b:b8:e2:30:b1:
ce:28:88:b8:c6:9c:d3:19:b0:05:2c:47:7a:a2:05:01:d4:e2:
1b:50:d8:9f:41:80:f8:c7:54:31:65:74:2d:fe:36:a6:15:c1:
b2:bc:d9:4e:21:20:36:5d:52:e3:de:e3:f8:a0:b9:fb:36:fd:
84:be:fa:a9:3c:24:20:6f:cb:de:08:92:7c:d0:72:c7:bc:b4:
e8:aa:65:49:e9:f2:e4:6d:84:0b:bc:15:2b:18:8b:f9:e0:a1:
fe:54:a9:6a:09:12:22:6c:2b:6f:d1:68:c3:76:46:2a:1c:05:
fd:85:53:eb:2d:e6:20:12:d0:01:0e:3c:28:c0:e6:51:7e:f5:
73:d9:8f:51:72:23:17:42:0e:c7:48:1d:62:10:18:75:50:35:
90:c2:c3:99:c5:8b:77:f8:0a:66:38:f7:27:e9:09:57:9c:ed:
ea:e7:4e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCeaK09CO0z+BP4mf4451xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0
ZjJiYWQwHhcNMjUwODA3MDMwMTA2WhcNMjUwODA4MDMwMTA2WjAzMTEwLwYDVQQD
Eyg3YzQ1ZTlhYWUzMTRmZjA1ZmUzMjhkM2JhYjdlM2ExZGU0ODIxZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8T57Hc9mp/0vsRnCq1bbbVbk+IC
kvaZzMBSGmeYJxJzgyZL0bsBIx5f8Ttc1mBVzUWKGtp2vTStlP06AHoWj/yDrBoW
aRSeFCBEgcKytlI5iTL61VuFJoDHBL96CgxMonECyJDQt8C48Wk4Yf0hKTW9NFY6
w20vBaXilL27RNsTcQxKqG5zvymRgQmM8Fudr0AZj1rDYqAeAT05TJUT84o9cY7s
GTtYSOK4vZEa3dqZZusQ0ay/jZkJ5oxEHLezK1O5xUlUq4C88hgwaSbTLbL6CHy0
mYkUmsUgLXXj37iK4oLUUud4xSg2+NOe3x2Ks+GUmsaj1lTpPOW5A1QrQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxF6arjFP8F/jKNO6t+Oh3kgh6nMB8GA1UdIwQY
MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt
NjFkNTc1MjQxYzFmLzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm
LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8OPeda9
XZ1lpvcl/CEO1/OMh3xbiVPIxXN8i6gxpJQOaoLxl87RWSBolXvjfbmzw6AjQYCM
kfcRxEBUk/lJxWYQzTl1Eh6l7E6G/n8QI2sDu4wh/Du44jCxziiIuMac0xmwBSxH
eqIFAdTiG1DYn0GA+MdUMWV0Lf42phXBsrzZTiEgNl1S497j+KC5+zb9hL76qTwk
IG/L3giSfNByx7y06KplSeny5G2EC7wVKxiL+eCh/lSpagkSImwrb9Fow3ZGKhwF
/YVT6y3mIBLQAQ48KMDmUX71c9mPUXIjF0IOx0gdYhAYdVA1kMLDmcWLd/gKZjj3
J+kJV5zt6udOBw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:03 2025 by rpki-client