Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: 6ukRhWIdrhi0w8U3cV8jIv4MchHRHKujQUHufZLbf6Y=
Subject key identifier: 79:67:6C:F7:2B:4C:DE:54:B5:35:FF:21:80:E7:FA:94:CD:99:CE:63
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 019873E31CC3023221ADEFCD7E947AE14226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: D8
Signing time: Mon 04 Aug 2025 07:02:00 +0000
Manifest this update: Mon 04 Aug 2025 07:02:00 +0000
Manifest next update: Tue 05 Aug 2025 07:02:00 +0000
Files and hashes: 1: PJVRMSwCuaTF6Wt5Ab_qrSCFprE.roa (hash: WQvJvWmSXxW6cpMx4aipy9UMo8UhhROB6wLnhOsN/4c=)
2: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: 52uq2NdKJKt5zKOiY/uvqXpnrq6W6XM580WZ0BOFoKo=)
3: aFgiJNKCIanfvnqNDMdjznHMd1g.roa (hash: LkdaN274HWy1PdIg0LvK8JE9h9510OV9pL6YxntLzSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:1c:c3:02:32:21:ad:ef:cd:7e:94:7a:e1:42:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Aug 4 07:02:00 2025 GMT
Not After : Aug 5 07:02:00 2025 GMT
Subject: CN=79676cf72b4cde54b535ff2180e7fa94cd99ce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:e9:0d:a8:f3:fd:13:f0:72:d4:87:7c:a0:
e3:ce:3f:3e:37:fd:0e:e8:96:4f:c8:29:9e:24:3c:
8d:59:8d:76:4e:0d:27:22:7d:ca:b1:72:5d:56:8a:
d6:a4:71:4d:e5:ae:ae:e7:18:44:ed:ec:e0:0d:32:
05:7a:f1:c6:6d:e7:ab:29:c2:8f:73:1b:11:34:62:
5c:0e:af:c3:3e:68:df:8c:86:a1:18:52:c2:20:2f:
60:50:aa:22:d6:ee:29:1e:fd:56:ac:d0:ce:6a:43:
41:4d:f5:9e:6e:69:ca:4f:88:48:06:98:a4:c6:e8:
70:4a:5c:26:d1:be:78:14:8a:18:55:62:86:21:40:
4c:14:29:42:2b:17:89:65:30:32:19:49:96:5d:8f:
68:e9:64:cd:63:ba:58:54:92:96:3f:72:1c:a4:f2:
b8:9f:28:2b:98:35:05:5b:2c:c3:aa:e8:29:2d:d8:
86:7a:24:61:08:e3:ba:cc:bc:1d:54:94:3b:50:64:
ff:a8:f2:87:a4:6c:8e:e4:a8:29:d8:38:e1:94:c4:
23:ab:6e:e4:2d:60:8d:98:90:53:df:01:5b:9e:d1:
2a:e3:02:88:3b:79:65:da:05:23:1c:b0:f8:d4:51:
17:16:e3:c0:16:64:c1:b9:a0:67:5b:de:85:22:da:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:67:6C:F7:2B:4C:DE:54:B5:35:FF:21:80:E7:FA:94:CD:99:CE:63
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4e:a7:b6:57:e1:99:fb:e3:0d:1c:e3:4c:05:a8:4d:ee:a6:
9a:f5:65:b8:9c:1d:8a:3e:b1:00:81:55:2e:fc:fb:84:1d:4a:
a4:f3:54:eb:eb:42:2a:f4:d1:d9:a4:08:a0:97:66:92:8f:92:
78:2a:2c:7b:4c:d5:3b:a5:6a:d1:f4:7e:c7:e0:e8:34:47:b5:
1e:6a:f0:cf:bf:98:29:44:82:39:a8:9f:ab:99:9a:4c:84:26:
a6:d3:fe:e9:b9:75:30:49:5b:e2:98:7e:f2:15:e1:89:75:50:
dc:c4:07:ba:13:7b:74:20:3b:df:da:44:41:5f:59:f6:c7:cd:
a3:da:43:ee:73:d1:43:b9:cd:42:2e:ef:58:95:14:85:8c:51:
df:1c:25:66:cf:cf:58:ad:dd:22:43:66:c5:d5:3f:5a:1b:98:
3c:e5:d7:84:99:97:02:22:b5:04:8e:0a:74:a9:48:6d:ae:94:
02:73:5b:c0:4b:63:5e:fb:3e:dd:d9:cc:53:97:4f:5e:80:9b:
15:10:3c:88:18:71:13:be:1e:fd:ec:b5:5b:27:54:8b:1f:73:
c2:1e:aa:fc:ef:7c:b3:61:85:33:2f:51:8b:e2:55:35:0a:52:
57:cb:7a:aa:08:a5:c5:a1:79:67:9f:5d:1f:a3:c7:14:a4:12:
31:bc:47:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4xzDAjIhre/NfpR64UImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZjU0YjE4NzlhMTQ1Mzk3ZmFjMGQzNThlZmFiZDJmNWZk
MGFjYTEwHhcNMjUwODA0MDcwMjAwWhcNMjUwODA1MDcwMjAwWjAzMTEwLwYDVQQD
Eyg3OTY3NmNmNzJiNGNkZTU0YjUzNWZmMjE4MGU3ZmE5NGNkOTljZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAnpDajz/RPwctSHfKDjzj8+N/0O
6JZPyCmeJDyNWY12Tg0nIn3KsXJdVorWpHFN5a6u5xhE7ezgDTIFevHGbeerKcKP
cxsRNGJcDq/DPmjfjIahGFLCIC9gUKoi1u4pHv1WrNDOakNBTfWebmnKT4hIBpik
xuhwSlwm0b54FIoYVWKGIUBMFClCKxeJZTAyGUmWXY9o6WTNY7pYVJKWP3IcpPK4
nygrmDUFWyzDqugpLdiGeiRhCOO6zLwdVJQ7UGT/qPKHpGyO5Kgp2DjhlMQjq27k
LWCNmJBT3wFbntEq4wKIO3ll2gUjHLD41FEXFuPAFmTBuaBnW96FItpN6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlnbPcrTN5UtTX/IYDn+pTNmc5jMB8GA1UdIwQY
MBaAFP31Sxh5oUU5f6wNNY76vS9f0KyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUt
NzExODZlMmI1MTZhLzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUtNzExODZlMmI1MTZh
LzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE06ntlfh
mfvjDRzjTAWoTe6mmvVluJwdij6xAIFVLvz7hB1KpPNU6+tCKvTR2aQIoJdmko+S
eCose0zVO6Vq0fR+x+DoNEe1Hmrwz7+YKUSCOaifq5maTIQmptP+6bl1MElb4ph+
8hXhiXVQ3MQHuhN7dCA739pEQV9Z9sfNo9pD7nPRQ7nNQi7vWJUUhYxR3xwlZs/P
WK3dIkNmxdU/WhuYPOXXhJmXAiK1BI4KdKlIba6UAnNbwEtjXvs+3dnMU5dPXoCb
FRA8iBhxE74e/ey1WydUix9zwh6q/O98s2GFMy9Ri+JVNQpSV8t6qgilxaF5Z59d
H6PHFKQSMbxHrA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:07 2025 by rpki-client