Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier: 6vI7dDSLfmA7FIBry1QNQIe7pukJqYPQw9xovTjR3o8=
Subject key identifier: 20:F9:D6:60:95:65:ED:C5:BE:BB:A8:67:E0:67:C8:EC:65:F6:BA:A0
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial: 019877C00F5A40D1C201E741E39BCFED0B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number: 1614
Signing time: Tue 05 Aug 2025 01:02:12 +0000
Manifest this update: Tue 05 Aug 2025 01:02:12 +0000
Manifest next update: Wed 06 Aug 2025 01:02:12 +0000
Files and hashes: 1: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: xRtDYvGGPIuL9hUx281xC9bbudDVbBwh1gpkBvU6WvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:c0:0f:5a:40:d1:c2:01:e7:41:e3:9b:cf:ed:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
Validity
Not Before: Aug 5 01:02:12 2025 GMT
Not After : Aug 6 01:02:12 2025 GMT
Subject: CN=20f9d6609565edc5bebba867e067c8ec65f6baa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:c2:c3:cf:6c:e0:c6:01:b3:94:46:d2:31:
44:6c:bd:fd:b0:41:57:5c:b9:70:7c:fb:2b:66:9e:
e2:0c:ea:d4:13:79:eb:e1:80:b0:17:8a:88:21:b4:
1a:f2:9a:97:26:b3:ba:08:84:64:45:30:52:1b:61:
38:97:13:01:2f:b0:7a:ad:83:06:a7:d1:07:84:d1:
92:ef:11:aa:00:78:79:67:93:70:82:34:54:df:08:
68:02:ee:58:29:46:fb:06:23:a9:d9:10:77:23:ea:
30:10:76:10:f7:e4:a1:b9:5e:44:d8:08:a8:f5:dc:
97:f5:53:18:d5:8c:4c:ba:f2:8b:6d:09:b8:e6:60:
86:bd:df:0a:75:da:24:e2:8e:3e:90:0c:10:fa:27:
34:a2:82:71:3d:44:52:2c:0d:39:1c:d8:66:2e:67:
af:80:c5:ec:a9:ad:21:a4:bc:f3:7f:63:e0:f0:7c:
0b:6a:a9:56:ef:76:c7:83:31:c5:99:9a:84:70:b3:
d6:c5:43:21:58:1d:2f:42:4c:7d:ce:48:1f:05:42:
69:88:0a:cf:47:0b:ef:d3:32:ba:1f:94:0a:bb:27:
f1:6d:0c:ea:74:b4:19:94:5e:b8:94:2f:3c:9f:79:
3e:0b:5d:d1:e1:92:50:c6:dc:63:99:73:fb:d2:de:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F9:D6:60:95:65:ED:C5:BE:BB:A8:67:E0:67:C8:EC:65:F6:BA:A0
X509v3 Authority Key Identifier:
keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:df:70:7a:53:21:a8:78:6d:9e:20:f7:00:5e:ad:e8:c8:b9:
db:cb:ff:77:70:b8:38:83:34:65:f5:62:40:2c:47:84:c7:15:
fd:a7:8d:88:8f:01:ca:74:db:73:ba:28:73:4b:1a:fe:7b:7f:
62:23:e8:79:e9:8c:69:de:33:61:d6:26:28:3d:df:c4:94:b6:
77:c3:ac:f6:54:8e:be:3f:d7:42:53:54:04:0c:3e:12:4a:4e:
da:dc:0a:db:12:7a:ed:b7:57:20:c2:da:39:74:9b:f9:95:e7:
b1:10:73:ac:38:92:5e:ad:9b:30:fe:86:82:ed:8a:3f:74:72:
80:a7:c7:e6:2f:04:20:01:7e:68:ec:46:d9:54:20:37:fd:5c:
fd:5e:0a:cf:b6:28:55:49:4d:06:6f:7b:f5:84:27:78:b7:d0:
0a:cd:59:09:66:d6:33:92:4e:7c:96:7f:ba:bd:39:00:00:75:
66:44:05:aa:ee:bd:7b:5e:e9:b3:c9:14:8f:b3:c2:56:e0:0f:
85:fa:71:a7:ce:f1:8c:62:71:ba:a2:67:7b:ab:c1:be:cd:f0:
3f:29:51:a0:ef:9e:ab:22:7e:a7:35:8c:f3:b8:70:7f:60:51:
a3:f3:5b:56:ca:23:ee:42:08:f4:24:f8:a9:78:8e:42:70:50:
e3:ed:c7:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh3wA9aQNHCAedB45vP7QuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZWZlYmQxNWZiYzY1MTQ4N2FjYWY2NzQyNGY0NzgzZDQz
ZWI0MjAwHhcNMjUwODA1MDEwMjEyWhcNMjUwODA2MDEwMjEyWjAzMTEwLwYDVQQD
EygyMGY5ZDY2MDk1NjVlZGM1YmViYmE4NjdlMDY3YzhlYzY1ZjZiYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDjCw89s4MYBs5RG0jFEbL39sEFX
XLlwfPsrZp7iDOrUE3nr4YCwF4qIIbQa8pqXJrO6CIRkRTBSG2E4lxMBL7B6rYMG
p9EHhNGS7xGqAHh5Z5NwgjRU3whoAu5YKUb7BiOp2RB3I+owEHYQ9+ShuV5E2Aio
9dyX9VMY1YxMuvKLbQm45mCGvd8Kddok4o4+kAwQ+ic0ooJxPURSLA05HNhmLmev
gMXsqa0hpLzzf2Pg8HwLaqlW73bHgzHFmZqEcLPWxUMhWB0vQkx9zkgfBUJpiArP
Rwvv0zK6H5QKuyfxbQzqdLQZlF64lC88n3k+C13R4ZJQxtxjmXP70t5oFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCD51mCVZe3FvruoZ+BnyOxl9rqgMB8GA1UdIwQY
MBaAFH/v69FfvGUUh6yvZ0JPR4PUPrQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNmVmNjMtYjcyZi00YjNjLThkZmMt
MmJjODQ1MTkyMjdhLzEvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yNmVmNjMtYjcyZi00YjNjLThkZmMtMmJjODQ1MTkyMjdh
LzEvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGd9welMh
qHhtniD3AF6t6Mi528v/d3C4OIM0ZfViQCxHhMcV/aeNiI8BynTbc7ooc0sa/nt/
YiPoeemMad4zYdYmKD3fxJS2d8Os9lSOvj/XQlNUBAw+EkpO2twK2xJ67bdXIMLa
OXSb+ZXnsRBzrDiSXq2bMP6Ggu2KP3RygKfH5i8EIAF+aOxG2VQgN/1c/V4Kz7Yo
VUlNBm979YQneLfQCs1ZCWbWM5JOfJZ/ur05AAB1ZkQFqu69e17ps8kUj7PCVuAP
hfpxp87xjGJxuqJne6vBvs3wPylRoO+eqyJ+pzWM87hwf2BRo/NbVsoj7kII9CT4
qXiOQnBQ4+3H9w==
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:18:09 2025 by rpki-client