Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json)
Hash identifier: eL3OqPXblNxxR1BYiWNVELBXZOOmmmCOg4/SYAl4SqM=
Subject key identifier: F2:0A:B0:D6:04:C7:B3:9E:D9:8D:F3:65:10:72:AF:90:C1:15:4F:D4
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 01988CFDFD91CFA05D456D216BB4BF1AD171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 04:01:52 +0000
Manifest this update: Sat 09 Aug 2025 04:01:52 +0000
Manifest next update: Sun 10 Aug 2025 04:01:52 +0000
Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=)
2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: pinnFCHXBZNZLQ/PXpk4LOIAJlfuScQN8HICFZhUGjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:fd:91:cf:a0:5d:45:6d:21:6b:b4:bf:1a:d1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Aug 9 04:01:52 2025 GMT
Not After : Aug 10 04:01:52 2025 GMT
Subject: CN=f20ab0d604c7b39ed98df3651072af90c1154fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:7a:a9:1b:78:b0:01:57:a1:ae:40:b4:d8:
40:03:bd:48:2a:e9:4e:57:59:94:0c:6e:43:59:fd:
1a:f7:d4:7f:3e:ac:c5:b7:91:53:37:f4:02:aa:e1:
50:f2:4c:5d:86:fa:bf:37:fc:42:75:2c:bd:13:15:
81:27:33:66:e4:94:fe:eb:53:45:46:4a:ee:78:23:
80:4b:f9:8b:a3:df:6d:a9:45:9e:fe:3e:ec:8c:c1:
b8:03:7b:48:f7:eb:01:3f:b7:43:f9:60:41:55:dc:
eb:64:1c:82:c6:ac:97:1a:82:81:2b:d7:31:f6:53:
49:41:c3:2b:56:99:d4:bb:45:72:82:ce:7d:4c:e8:
63:a2:36:19:dc:22:d6:2f:c2:46:bc:93:d4:ff:fb:
46:29:9a:44:bb:9d:f6:f1:9d:13:5a:96:57:e0:6f:
4f:59:b7:a1:ce:c6:96:e1:c7:4a:57:b1:dd:01:e4:
70:21:4a:00:71:2f:03:04:88:92:44:41:21:cc:06:
f0:80:ed:25:12:18:58:19:bf:11:83:ae:7f:62:64:
69:48:1d:85:d9:93:56:27:37:ed:9b:1f:3f:b0:ba:
40:bb:58:f3:bb:bf:2f:07:9e:e5:f9:73:d6:09:84:
01:65:56:e3:a1:d8:0a:b3:99:fe:cd:bc:61:97:42:
04:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0A:B0:D6:04:C7:B3:9E:D9:8D:F3:65:10:72:AF:90:C1:15:4F:D4
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:eb:3a:a7:1a:1f:d5:ef:e6:74:5b:d2:7a:9d:4c:dd:e4:a5:
06:68:50:65:05:2a:01:4b:02:a6:30:6d:58:b6:32:eb:e1:1c:
21:02:f7:65:03:95:b8:9f:3c:ef:e2:8e:c4:95:9e:40:a5:69:
0e:11:b6:28:74:9f:98:91:80:31:65:e6:76:87:e0:29:bd:13:
2e:1b:4e:07:4e:97:05:52:af:e7:9b:ea:c8:15:48:fe:20:e7:
49:31:47:f3:dc:c3:48:bb:3e:44:41:54:ff:b3:93:35:bc:c6:
e4:d6:d8:24:c9:bf:5e:70:a6:6f:77:70:b2:3e:84:e4:4e:af:
66:2d:a6:54:1f:0a:05:80:7a:97:b4:ee:a3:1b:33:e9:78:76:
83:a7:ee:e1:70:2b:49:9a:8e:53:8e:9f:55:87:c5:e2:9a:a7:
a9:f6:0d:cf:f7:99:7f:5e:29:1b:1b:d1:34:b3:31:e0:32:0f:
bb:9b:9b:8e:d1:7a:ac:41:14:ba:33:85:12:46:a0:70:56:09:
b6:d0:83:34:d7:9f:c9:08:2e:15:50:3b:36:60:bb:46:64:6c:
c6:c2:83:27:07:00:32:38:53:70:0f:07:8a:ec:0c:93:73:30:
8e:48:16:bc:3e:31:8d:90:0b:13:6a:06:45:3c:da:27:49:cb:
07:7f:31:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/f2Rz6BdRW0ha7S/GtFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOTIzZTE2YTJjNGNkYmRkOTUyNDA4OTA4YmY4MjM4MDQ2
NWJhNTEwHhcNMjUwODA5MDQwMTUyWhcNMjUwODEwMDQwMTUyWjAzMTEwLwYDVQQD
EyhmMjBhYjBkNjA0YzdiMzllZDk4ZGYzNjUxMDcyYWY5MGMxMTU0ZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pR6qRt4sAFXoa5AtNhAA71IKulO
V1mUDG5DWf0a99R/PqzFt5FTN/QCquFQ8kxdhvq/N/xCdSy9ExWBJzNm5JT+61NF
RkrueCOAS/mLo99tqUWe/j7sjMG4A3tI9+sBP7dD+WBBVdzrZByCxqyXGoKBK9cx
9lNJQcMrVpnUu0Vygs59TOhjojYZ3CLWL8JGvJPU//tGKZpEu5328Z0TWpZX4G9P
WbehzsaW4cdKV7HdAeRwIUoAcS8DBIiSREEhzAbwgO0lEhhYGb8Rg65/YmRpSB2F
2ZNWJzftmx8/sLpAu1jzu78vB57l+XPWCYQBZVbjodgKs5n+zbxhl0IEewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIKsNYEx7Oe2Y3zZRByr5DBFU/UMB8GA1UdIwQY
MBaAFGuSPhaixM292VJAiQi/gjgEZbpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iMTdlYzMtNGQyZS00YjQ5LWEzYTct
NDA3ZTlmMzg5MDdlLzEvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iMTdlYzMtNGQyZS00YjQ5LWEzYTctNDA3ZTlmMzg5MDdl
LzEvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbus6pxof
1e/mdFvSep1M3eSlBmhQZQUqAUsCpjBtWLYy6+EcIQL3ZQOVuJ887+KOxJWeQKVp
DhG2KHSfmJGAMWXmdofgKb0TLhtOB06XBVKv55vqyBVI/iDnSTFH89zDSLs+REFU
/7OTNbzG5NbYJMm/XnCmb3dwsj6E5E6vZi2mVB8KBYB6l7Tuoxsz6Xh2g6fu4XAr
SZqOU46fVYfF4pqnqfYNz/eZf14pGxvRNLMx4DIPu5ubjtF6rEEUujOFEkagcFYJ
ttCDNNefyQguFVA7NmC7RmRsxsKDJwcAMjhTcA8HiuwMk3MwjkgWvD4xjZALE2oG
RTzaJ0nLB38xnA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:48 2025 by rpki-client