Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: BvQml6LCjYcN+DESPQcTg6QXradPT/xM+Xy/n5ciBPc=
Subject key identifier: 0F:3A:02:4B:52:C9:25:1A:21:DF:7F:07:9B:D4:0A:11:0D:F3:A1:3C
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 019873E3885489BCFB4C08A0D0836F3E9D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 0DB4
Signing time: Mon 04 Aug 2025 07:02:28 +0000
Manifest this update: Mon 04 Aug 2025 07:02:28 +0000
Manifest next update: Tue 05 Aug 2025 07:02:28 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: ivJTcBdCRqUXW6eT+JwNvpo/P9FSkq8MYEVQBGmBGjM=)
2: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (hash: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:88:54:89:bc:fb:4c:08:a0:d0:83:6f:3e:9d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Aug 4 07:02:28 2025 GMT
Not After : Aug 5 07:02:28 2025 GMT
Subject: CN=0f3a024b52c9251a21df7f079bd40a110df3a13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:22:9a:8d:7d:ce:a5:a4:1f:70:0a:88:e2:
53:47:bc:c9:7b:21:b3:55:27:0e:2d:f2:e7:3b:02:
2f:cb:c6:04:bc:f8:98:85:79:e6:bf:e8:af:58:fd:
95:b5:ad:c3:7c:ec:70:4b:07:57:0c:f4:81:f9:fa:
ea:b3:0e:7f:5a:df:42:ca:dd:0a:26:b7:f0:43:6b:
77:4f:f1:d4:e6:e3:21:24:ba:89:8b:e6:7c:ba:96:
15:7a:af:25:54:13:96:10:07:9e:a3:cc:12:83:c3:
20:57:0f:9b:65:46:27:9b:8f:e7:6f:6a:54:93:e5:
8d:99:8f:91:9e:65:db:5c:be:f7:1e:0f:c2:e9:71:
6e:c8:ca:ea:36:66:b6:d7:44:fb:0c:37:2f:aa:f9:
ae:4d:ff:a0:72:d9:e7:82:11:f3:a9:08:1e:e6:50:
76:de:9f:f8:8d:56:3d:c4:e3:21:64:70:75:77:f4:
14:82:32:be:ab:93:46:2e:07:4e:ef:0d:76:c9:e2:
37:e3:35:6e:cb:f8:24:5d:09:28:fb:e4:72:88:c4:
ad:47:fb:4d:d9:5b:64:48:76:cb:2e:53:dc:31:10:
bf:62:35:2a:f6:cb:74:68:b6:35:6b:c7:a2:81:01:
eb:0a:22:02:40:9c:5f:69:54:8a:ba:01:8c:20:41:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3A:02:4B:52:C9:25:1A:21:DF:7F:07:9B:D4:0A:11:0D:F3:A1:3C
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:80:cf:c4:fb:3b:83:be:a8:2b:74:34:46:89:7b:cb:5b:3c:
d7:fa:dd:3b:ad:9d:cf:fd:ba:37:07:f2:8d:ef:10:20:8a:90:
9c:2b:a3:67:74:55:2d:5d:96:05:98:2e:7b:92:85:19:ca:4b:
21:c2:45:9b:68:65:34:cc:57:a1:18:b9:4d:04:b3:66:e1:10:
61:5e:4a:c8:ee:cd:b0:3c:fa:45:0f:50:76:2c:f9:65:bd:ea:
84:ca:df:f4:fb:eb:cc:e4:de:10:78:66:1b:c2:99:ac:0d:77:
ff:7a:c0:44:e8:e8:3b:bf:70:ec:b1:77:f2:10:8e:a6:fc:9e:
77:35:5c:94:db:a4:20:b3:9a:5e:fc:29:f7:ee:36:11:c0:eb:
df:d0:b9:07:55:4d:91:9c:f6:f1:95:0f:35:a8:ef:f9:f6:19:
b9:0d:fb:ae:61:7d:1c:3f:92:66:0a:dd:42:38:89:9e:e4:8c:
ba:35:4e:68:fa:89:f7:3c:c6:6c:49:be:02:fa:5d:85:97:2e:
24:70:89:3d:9f:cc:d5:2d:dd:d2:13:18:42:d7:45:59:16:e3:
93:43:94:54:12:a4:ab:f6:ed:9c:77:d9:b0:5d:93:76:fe:fe:
79:23:c1:90:b4:03:d5:ed:81:5a:47:d1:43:57:e0:c9:48:86:
a8:c1:7e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz44hUibz7TAig0INvPp2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNDJkMjdjMjFkYTg2YzdlOWZiZjQ0YWUwZTU2Yzk4ZjNk
MmY4MGIwHhcNMjUwODA0MDcwMjI4WhcNMjUwODA1MDcwMjI4WjAzMTEwLwYDVQQD
EygwZjNhMDI0YjUyYzkyNTFhMjFkZjdmMDc5YmQ0MGExMTBkZjNhMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA0imo19zqWkH3AKiOJTR7zJeyGz
VScOLfLnOwIvy8YEvPiYhXnmv+ivWP2Vta3DfOxwSwdXDPSB+frqsw5/Wt9Cyt0K
JrfwQ2t3T/HU5uMhJLqJi+Z8upYVeq8lVBOWEAeeo8wSg8MgVw+bZUYnm4/nb2pU
k+WNmY+RnmXbXL73Hg/C6XFuyMrqNma210T7DDcvqvmuTf+gctnnghHzqQge5lB2
3p/4jVY9xOMhZHB1d/QUgjK+q5NGLgdO7w12yeI34zVuy/gkXQko++RyiMStR/tN
2VtkSHbLLlPcMRC/YjUq9st0aLY1a8eigQHrCiICQJxfaVSKugGMIEFnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA86AktSySUaId9/B5vUChEN86E8MB8GA1UdIwQY
MBaAFH9C0nwh2obH6fv0SuDlbJjz0vgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTkt
MGFmYjdjM2ZiZjMwLzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTktMGFmYjdjM2ZiZjMw
LzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoDPxPs7
g76oK3Q0Rol7y1s81/rdO62dz/26Nwfyje8QIIqQnCujZ3RVLV2WBZgue5KFGcpL
IcJFm2hlNMxXoRi5TQSzZuEQYV5KyO7NsDz6RQ9Qdiz5Zb3qhMrf9PvrzOTeEHhm
G8KZrA13/3rAROjoO79w7LF38hCOpvyedzVclNukILOaXvwp9+42EcDr39C5B1VN
kZz28ZUPNajv+fYZuQ37rmF9HD+SZgrdQjiJnuSMujVOaPqJ9zzGbEm+AvpdhZcu
JHCJPZ/M1S3d0hMYQtdFWRbjk0OUVBKkq/btnHfZsF2Tdv7+eSPBkLQD1e2BWkfR
Q1fgyUiGqMF+cg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:36 2025 by rpki-client