Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: l1CNvofsNvXKogH8ppNRfnx8ZyJDgE8LdsSCY3nlLLU=
Subject key identifier: 8C:0F:01:6A:AD:54:CB:11:52:53:ED:36:6B:D4:5C:45:A2:F9:E2:43
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 01988EEB6A955BFCF72A5BF58206DB18F24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 145F
Signing time: Sat 09 Aug 2025 13:00:49 +0000
Manifest this update: Sat 09 Aug 2025 13:00:49 +0000
Manifest next update: Sun 10 Aug 2025 13:00:49 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: dDzmLWWsWRcEp9i5EyNCHaqcFZtkt/2p4hLF4gXVf2Y=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:6a:95:5b:fc:f7:2a:5b:f5:82:06:db:18:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Aug 9 13:00:49 2025 GMT
Not After : Aug 10 13:00:49 2025 GMT
Subject: CN=8c0f016aad54cb115253ed366bd45c45a2f9e243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:7e:00:b3:fe:c9:7f:3c:60:d1:64:40:ee:
d5:7a:05:15:f5:48:e2:1a:c0:40:99:58:2f:f8:d4:
2f:64:43:d4:af:a3:f7:24:54:9c:fd:a8:03:e0:9b:
b8:2b:27:fd:24:d5:9b:b0:e0:19:22:5e:4b:3b:4d:
25:da:d8:bb:1d:ba:8c:d1:31:45:12:38:0e:c9:62:
31:d4:e1:67:59:4f:ea:23:93:fc:b6:aa:84:10:23:
59:8c:49:92:7d:c0:12:57:50:88:e3:b4:10:41:48:
aa:de:4c:55:9f:ec:2f:31:34:45:7c:8c:13:e7:c5:
11:38:85:40:bf:27:bc:d9:ef:18:d6:a3:5b:9e:c7:
5f:dc:c1:eb:21:2f:5e:46:99:1c:ed:d5:b5:20:bb:
0d:41:46:3a:5e:b2:69:7c:83:da:63:a3:27:8e:0e:
ab:5e:14:42:d8:74:81:f6:06:ec:bb:8f:1a:90:64:
1a:17:59:86:29:2e:d6:3d:9a:de:05:9b:2c:22:07:
a9:19:f1:89:5a:e3:9d:66:35:a3:6a:0e:cb:57:80:
00:f7:86:e5:8f:4a:09:2d:a9:83:50:f7:fe:2a:b0:
36:f6:75:7c:d0:be:70:e8:10:01:d3:52:e8:91:40:
79:d1:0f:f4:2a:be:b4:b5:4c:68:be:20:c4:89:ee:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:01:6A:AD:54:CB:11:52:53:ED:36:6B:D4:5C:45:A2:F9:E2:43
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:54:9a:a3:88:1c:e6:2c:d9:0f:ce:df:6d:d4:30:8a:86:
81:39:88:31:4a:7c:22:00:8b:65:28:a6:f9:49:64:32:0d:1e:
bc:22:78:09:54:c9:fe:68:ea:3e:4d:e6:0f:87:3f:9f:be:c2:
85:d9:11:d1:26:36:af:ca:76:52:ec:0b:57:7c:26:a4:51:07:
f4:7d:84:d2:4e:1a:78:b8:7e:ca:ba:af:68:50:02:0a:f0:fd:
83:53:45:0d:01:49:c0:15:da:81:80:23:db:bd:38:39:e9:55:
92:7e:2e:ed:b1:75:c2:ea:74:0f:40:ad:28:a5:fc:41:bd:d6:
53:4b:bb:00:05:b9:a0:be:94:5d:05:98:fa:0c:49:02:a0:7c:
04:4d:aa:d2:8c:9b:65:3f:8e:e1:4c:3e:85:fb:35:7e:3b:2c:
20:03:72:f1:79:56:85:3d:2c:f6:61:dd:0e:f5:40:54:d0:7e:
17:39:34:27:1f:de:8b:c1:4f:ba:f2:1b:e8:79:46:e4:1c:e4:
7f:e5:41:d8:3e:9b:9f:29:3a:ca:a6:ed:6c:e6:9c:2c:bc:a9:
4d:c9:60:97:0c:19:d5:af:d7:aa:13:82:57:b2:60:ab:40:4b:
8d:23:04:3c:29:95:55:bd:d9:1e:84:b4:8d:23:ca:93:29:6e:
58:ca:44:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO62qVW/z3Klv1ggbbGPJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTk2NTk2MzYwODllMzIzMjQ2OTc2MjljMjE4ZGEzOGEy
YjY3M2QwHhcNMjUwODA5MTMwMDQ5WhcNMjUwODEwMTMwMDQ5WjAzMTEwLwYDVQQD
Eyg4YzBmMDE2YWFkNTRjYjExNTI1M2VkMzY2YmQ0NWM0NWEyZjllMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNN+ALP+yX88YNFkQO7VegUV9Uji
GsBAmVgv+NQvZEPUr6P3JFSc/agD4Ju4Kyf9JNWbsOAZIl5LO00l2ti7HbqM0TFF
EjgOyWIx1OFnWU/qI5P8tqqEECNZjEmSfcASV1CI47QQQUiq3kxVn+wvMTRFfIwT
58UROIVAvye82e8Y1qNbnsdf3MHrIS9eRpkc7dW1ILsNQUY6XrJpfIPaY6Mnjg6r
XhRC2HSB9gbsu48akGQaF1mGKS7WPZreBZssIgepGfGJWuOdZjWjag7LV4AA94bl
j0oJLamDUPf+KrA29nV80L5w6BAB01LokUB50Q/0Kr60tUxoviDEie4VeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwPAWqtVMsRUlPtNmvUXEWi+eJDMB8GA1UdIwQY
MBaAFH1ZZZY2CJ4yMkaXYpwhjaOKK2c9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAt
NmMxY2Y3MjVkOGY3LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAtNmMxY2Y3MjVkOGY3
LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+1UmqOI
HOYs2Q/O323UMIqGgTmIMUp8IgCLZSim+UlkMg0evCJ4CVTJ/mjqPk3mD4c/n77C
hdkR0SY2r8p2UuwLV3wmpFEH9H2E0k4aeLh+yrqvaFACCvD9g1NFDQFJwBXagYAj
2704OelVkn4u7bF1wup0D0CtKKX8Qb3WU0u7AAW5oL6UXQWY+gxJAqB8BE2q0oyb
ZT+O4Uw+hfs1fjssIANy8XlWhT0s9mHdDvVAVNB+Fzk0Jx/ei8FPuvIb6HlG5Bzk
f+VB2D6bnyk6yqbtbOacLLypTclglwwZ1a/XqhOCV7Jgq0BLjSMEPCmVVb3ZHoS0
jSPKkyluWMpEmg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:43:24 2025 by rpki-client