Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: 30XtDIjc5AR90wWnE71tj93BgkMqsscUR0rIlXLKO0A=
Subject key identifier: A9:9F:FB:E1:03:85:2F:B3:B4:57:A0:6D:78:6B:EE:3F:1B:DB:4B:DB
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 01989223C6D36CCC1CBD0BEC248FBD11D591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 04:01:14 +0000
Manifest this update: Sun 10 Aug 2025 04:01:14 +0000
Manifest next update: Mon 11 Aug 2025 04:01:14 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: ssSykJInTqtAVaaysQ0TjSiQjI7rQQywiTuEYuWYXk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:c6:d3:6c:cc:1c:bd:0b:ec:24:8f:bd:11:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Aug 10 04:01:14 2025 GMT
Not After : Aug 11 04:01:14 2025 GMT
Subject: CN=a99ffbe103852fb3b457a06d786bee3f1bdb4bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:bb:04:af:a9:c3:b9:89:f7:c7:7b:ae:c7:
cb:86:2d:ce:04:f4:93:66:1f:08:52:44:00:53:ad:
b2:d5:51:90:e5:46:f2:a2:eb:78:85:fb:ca:be:f8:
82:d5:ec:81:66:56:43:1a:b8:6c:22:21:8d:5c:99:
9c:20:a9:91:a9:6e:0b:7c:5c:f7:ab:9b:b3:c5:68:
22:0f:7d:f8:0d:ed:86:60:7b:41:08:f8:f8:5e:c9:
6e:00:25:81:02:8f:ce:79:67:a1:60:a1:f6:55:5a:
9a:68:80:04:98:f6:0d:41:b0:2f:2b:85:f0:c8:1b:
9a:10:5e:aa:a0:d8:a7:2a:3b:f8:ec:ba:b9:4b:89:
3b:95:f1:dc:57:17:de:f5:2f:a4:c6:87:bc:10:48:
16:0e:b4:9a:f2:d1:ef:07:e2:be:8f:64:c0:ac:7b:
d6:01:02:c4:2c:18:c6:56:5f:83:21:ef:d7:cd:78:
37:a7:2a:e8:c2:47:02:f2:0b:48:46:71:4e:74:02:
1b:2f:d9:3c:ec:40:8d:f2:48:ac:47:e2:87:ef:67:
88:83:7d:49:ca:c4:5f:64:82:25:b4:f7:d0:3c:c7:
ce:cd:f1:bd:11:ba:58:f2:65:9e:76:32:96:1c:31:
1b:7b:8c:ff:71:57:cf:fb:53:87:bb:89:88:3a:15:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:FB:E1:03:85:2F:B3:B4:57:A0:6D:78:6B:EE:3F:1B:DB:4B:DB
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:85:35:ce:6e:6e:27:74:15:29:77:d1:2f:3f:7b:7b:e5:7e:
76:e9:9c:63:fd:f7:d1:f0:b5:10:42:4a:de:91:62:3f:66:dc:
6a:1b:93:84:e9:7a:30:91:cd:ee:1b:c7:7e:09:ab:84:5b:59:
88:fc:ce:e8:c6:53:ea:07:ba:b1:c8:2b:3e:22:2f:7c:e7:51:
55:b2:97:3b:25:d5:ff:dc:f2:2b:1d:51:2f:03:f4:1e:a0:b6:
1c:07:42:f8:85:60:0d:31:35:a4:36:7b:3e:ce:9d:86:85:43:
29:ad:4a:23:b8:62:bf:fa:33:66:25:22:a0:55:ae:8e:16:75:
82:fe:4b:2e:94:c5:d0:aa:68:be:fd:e3:bb:44:5b:4e:cd:c7:
fb:6f:51:2f:28:2c:d9:3c:26:16:7f:94:6e:8a:35:40:03:b3:
3c:8b:6d:6a:ff:42:4d:25:54:ef:2c:81:4e:0d:f6:63:f0:b9:
3c:33:a7:e2:50:79:2a:30:ff:ee:f7:66:3e:f7:b1:f2:3b:69:
75:82:d9:77:f4:15:5f:d9:b3:ac:b7:59:cb:a2:f9:2d:be:0f:
64:2f:4f:95:07:4a:b4:48:a4:22:ea:9e:f7:f1:e3:cc:bf:0c:
66:c0:e0:c0:01:2a:f6:79:95:34:48:9e:11:c2:f3:30:cf:7e:
d0:41:a4:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSI8bTbMwcvQvsJI+9EdWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDRhOTZmZTFlZDAyOGQ1OTEyZDc3YTUwMGIwOTQ3OGJk
MTgzMjIwHhcNMjUwODEwMDQwMTE0WhcNMjUwODExMDQwMTE0WjAzMTEwLwYDVQQD
EyhhOTlmZmJlMTAzODUyZmIzYjQ1N2EwNmQ3ODZiZWUzZjFiZGI0YmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rm7BK+pw7mJ98d7rsfLhi3OBPST
Zh8IUkQAU62y1VGQ5Ubyout4hfvKvviC1eyBZlZDGrhsIiGNXJmcIKmRqW4LfFz3
q5uzxWgiD334De2GYHtBCPj4XsluACWBAo/OeWehYKH2VVqaaIAEmPYNQbAvK4Xw
yBuaEF6qoNinKjv47Lq5S4k7lfHcVxfe9S+kxoe8EEgWDrSa8tHvB+K+j2TArHvW
AQLELBjGVl+DIe/XzXg3pyrowkcC8gtIRnFOdAIbL9k87ECN8kisR+KH72eIg31J
ysRfZIIltPfQPMfOzfG9EbpY8mWedjKWHDEbe4z/cVfP+1OHu4mIOhXnPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmf++EDhS+ztFegbXhr7j8b20vbMB8GA1UdIwQY
MBaAFP7UqW/h7QKNWRLXelALCUeL0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RTcGItSHRBbzFaRXRkNlVBc0pSNHZSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODE4M2MtZWRjNC00NjRkLWJmNDUt
ODg5OWQxMDU4YjY0LzEvX3RTcGItSHRBbzFaRXRkNlVBc0pSNHZSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC85ODE4M2MtZWRjNC00NjRkLWJmNDUtODg5OWQxMDU4YjY0
LzEvX3RTcGItSHRBbzFaRXRkNlVBc0pSNHZSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4U1zm5u
J3QVKXfRLz97e+V+dumcY/330fC1EEJK3pFiP2bcahuThOl6MJHN7hvHfgmrhFtZ
iPzO6MZT6ge6scgrPiIvfOdRVbKXOyXV/9zyKx1RLwP0HqC2HAdC+IVgDTE1pDZ7
Ps6dhoVDKa1KI7hiv/ozZiUioFWujhZ1gv5LLpTF0Kpovv3ju0RbTs3H+29RLygs
2TwmFn+Uboo1QAOzPIttav9CTSVU7yyBTg32Y/C5PDOn4lB5KjD/7vdmPvex8jtp
dYLZd/QVX9mzrLdZy6L5Lb4PZC9PlQdKtEikIuqe9/HjzL8MZsDgwAEq9nmVNEie
EcLzMM9+0EGkqQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:42:57 2025 by rpki-client