Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: 704GaGW8TnWaPZz/cfmSKvjDinexgMGBZ61dKF3WiDM=
Subject key identifier: 8A:44:D1:49:4A:62:A6:1A:BB:90:13:6A:E2:17:2A:D6:E2:18:67:D9
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 01987A1B14FB05396A306EC80CF52025A25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 13
Signing time: Tue 05 Aug 2025 12:00:51 +0000
Manifest this update: Tue 05 Aug 2025 12:00:51 +0000
Manifest next update: Wed 06 Aug 2025 12:00:51 +0000
Files and hashes: 1: BLqnqYXfNpeDaXR1TT1NxALunTU.roa (hash: HiOoL5QoKyGrCXU+ZvFwDx1bHqF6go6OY2pLOukJd1s=)
2: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: pBArYV8EUtsfGSsmDCrdJyFyjgdvxmJrsptjmvHlmWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:14:fb:05:39:6a:30:6e:c8:0c:f5:20:25:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Aug 5 12:00:51 2025 GMT
Not After : Aug 6 12:00:51 2025 GMT
Subject: CN=8a44d1494a62a61abb90136ae2172ad6e21867d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:28:7c:2c:e7:a8:08:57:ed:e3:a1:33:94:
d2:e4:9c:a9:fd:6d:b2:8a:75:ca:10:dc:be:65:d0:
2e:e2:10:ce:a1:59:e6:c0:25:1d:d6:b8:e2:14:20:
8e:46:45:c3:20:03:f5:1c:33:4c:57:76:2d:d4:d4:
e1:cc:47:cf:98:c2:ef:88:56:9b:a3:a6:27:ca:e0:
64:5a:25:64:10:ea:5c:d4:f0:85:7c:cd:2a:0f:66:
59:27:40:3f:e5:27:46:a3:15:2e:01:cc:c0:da:99:
fb:81:05:95:75:b1:dd:51:04:3d:8b:b4:20:a8:e2:
8a:1d:5d:9c:f1:a2:ec:b9:ea:6d:80:aa:5f:cf:37:
bd:55:25:01:8b:e4:f0:b6:41:51:0d:0e:b3:d2:47:
eb:27:ea:84:d9:c6:fa:e8:41:0a:4d:45:e9:17:f8:
c1:85:4b:43:c4:21:d0:07:10:ef:58:5d:0e:cb:70:
8a:13:b4:a8:61:a0:98:50:f2:c4:f0:2c:d8:a9:1d:
2a:77:6b:c0:28:ae:52:3e:25:fa:aa:33:13:d1:3a:
6f:e5:0d:a0:ba:04:66:14:18:a7:6b:d0:ca:99:f8:
8b:cc:80:a3:f2:63:a4:dc:a5:d2:bf:c7:d0:30:90:
3a:b8:4b:7d:00:94:20:34:3f:77:85:f2:99:31:dc:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:44:D1:49:4A:62:A6:1A:BB:90:13:6A:E2:17:2A:D6:E2:18:67:D9
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b5:b6:21:63:2f:46:dd:5f:31:7f:91:33:fd:e8:a6:cc:e5:
dc:98:fd:02:68:77:87:1e:c3:9c:b8:42:07:17:bb:03:49:c4:
34:5e:9e:a7:f5:07:e4:69:df:e0:02:01:25:83:b7:8f:c2:65:
ad:4e:fb:c2:e5:78:40:f5:7d:37:13:f3:bc:92:94:97:03:bf:
99:86:2d:f6:51:34:1b:a4:84:e8:92:df:23:70:d1:9c:96:38:
4d:73:34:a6:e6:36:9c:49:30:ef:77:67:6d:73:f1:dc:c7:7f:
74:3c:eb:ae:bb:fa:6d:6e:b1:ca:d5:54:6b:16:76:a9:de:47:
ee:de:4b:b5:b2:3a:a4:ab:0c:b2:df:27:11:dd:52:57:cd:d1:
f9:48:22:cc:89:8d:98:e1:3d:17:85:92:19:da:d8:d3:a7:e1:
5b:37:bd:d4:60:c2:8f:2d:25:31:ac:3d:f5:f1:9e:94:71:3d:
2e:b2:34:94:9d:a9:38:6d:fc:5a:29:6c:c0:24:c9:b9:f8:2a:
25:5e:d1:c0:1e:bb:67:a8:6a:40:32:26:54:0f:2d:57:49:05:
5c:8f:f1:5e:2f:47:11:45:08:cf:22:6b:a5:87:1d:ff:82:5d:
2a:15:58:b4:84:fb:d4:03:41:60:e1:03:e3:dd:c2:59:96:7e:
6d:a4:ac:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6GxT7BTlqMG7IDPUgJaJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTQzN2JjYWQ5YmFjZmEzYjc2YjdkZDA0NTQxMzNmYjRk
OGNiM2UwHhcNMjUwODA1MTIwMDUxWhcNMjUwODA2MTIwMDUxWjAzMTEwLwYDVQQD
Eyg4YTQ0ZDE0OTRhNjJhNjFhYmI5MDEzNmFlMjE3MmFkNmUyMTg2N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWsofCznqAhX7eOhM5TS5Jyp/W2y
inXKENy+ZdAu4hDOoVnmwCUd1rjiFCCORkXDIAP1HDNMV3Yt1NThzEfPmMLviFab
o6YnyuBkWiVkEOpc1PCFfM0qD2ZZJ0A/5SdGoxUuAczA2pn7gQWVdbHdUQQ9i7Qg
qOKKHV2c8aLsueptgKpfzze9VSUBi+TwtkFRDQ6z0kfrJ+qE2cb66EEKTUXpF/jB
hUtDxCHQBxDvWF0Oy3CKE7SoYaCYUPLE8CzYqR0qd2vAKK5SPiX6qjMT0Tpv5Q2g
ugRmFBina9DKmfiLzICj8mOk3KXSv8fQMJA6uEt9AJQgND93hfKZMdwjAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpE0UlKYqYau5ATauIXKtbiGGfZMB8GA1UdIwQY
MBaAFP/kN7ytm6z6O3a33QRUEz+02Ms+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUt
ZDEyMWM1YTc1ZDk4LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUtZDEyMWM1YTc1ZDk4
LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7W2IWMv
Rt1fMX+RM/3opszl3Jj9Amh3hx7DnLhCBxe7A0nENF6ep/UH5Gnf4AIBJYO3j8Jl
rU77wuV4QPV9NxPzvJKUlwO/mYYt9lE0G6SE6JLfI3DRnJY4TXM0puY2nEkw73dn
bXPx3Md/dDzrrrv6bW6xytVUaxZ2qd5H7t5LtbI6pKsMst8nEd1SV83R+UgizImN
mOE9F4WSGdrY06fhWze91GDCjy0lMaw99fGelHE9LrI0lJ2pOG38WilswCTJufgq
JV7RwB67Z6hqQDImVA8tV0kFXI/xXi9HEUUIzyJrpYcd/4JdKhVYtIT71ANBYOED
493CWZZ+baSs6g==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:50:02 2025 by rpki-client