Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: gf37zUaAI51T0ju6Xrxe+cLpT/1+0Sz7LgNdkRpJFxA=
Subject key identifier: DE:CA:A5:D8:9B:2D:15:77:E5:02:25:B3:B6:6D:55:A2:F0:82:77:48
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 019849D333EB3BF6FFF05A664D0623023F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0B0A
Signing time: Sun 27 Jul 2025 03:00:34 +0000
Manifest this update: Sun 27 Jul 2025 03:00:34 +0000
Manifest next update: Mon 28 Jul 2025 03:00:34 +0000
Files and hashes: 1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=)
2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: /fHIc7RrEBES8Q9gd+7f0y/KkGNe9W7rGgpm6JxgkAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:33:eb:3b:f6:ff:f0:5a:66:4d:06:23:02:3f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Jul 27 03:00:34 2025 GMT
Not After : Jul 28 03:00:34 2025 GMT
Subject: CN=decaa5d89b2d1577e50225b3b66d55a2f0827748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:3e:0b:a7:e0:76:ad:62:bf:7e:ba:3d:45:
68:6f:5c:20:b8:3d:ad:5b:e4:ec:5f:06:12:01:e3:
81:b4:38:d3:97:16:74:bf:a4:14:11:2c:9b:53:09:
6a:9a:66:3c:11:2b:b7:cd:4f:67:dd:42:81:01:0c:
bc:6c:92:5d:9e:50:b4:c6:92:a3:47:21:46:2b:45:
f4:b8:8d:05:3e:71:d2:59:d6:3d:9b:19:9f:64:05:
2b:fc:4c:d4:a4:8c:7d:e9:89:f0:d7:21:92:e1:bf:
fa:c3:b8:52:64:4f:37:3c:c3:03:b7:15:5e:a0:8e:
69:c0:09:aa:60:ef:dc:21:ae:2b:78:df:91:59:95:
dc:15:1e:51:ba:d4:5d:a4:16:7c:32:b7:9b:45:3d:
9b:aa:0e:57:7a:2f:19:cd:39:b8:b7:26:c5:79:42:
8e:d7:94:9c:51:d3:d3:a2:fb:7f:05:aa:76:b6:47:
43:0b:ee:70:44:51:05:08:f2:87:b2:77:d5:3b:ad:
42:99:57:cf:9f:aa:0f:56:c7:95:42:26:88:30:c7:
f4:5b:7c:a6:60:3c:31:59:2a:14:6f:45:4f:88:35:
c4:54:0b:ba:b4:66:41:6a:85:a2:79:59:09:5f:f7:
07:ae:52:da:cd:09:32:78:a2:a5:41:5b:7e:3a:25:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:A5:D8:9B:2D:15:77:E5:02:25:B3:B6:6D:55:A2:F0:82:77:48
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:4d:9f:51:08:09:68:55:23:5d:cb:6f:fb:80:1d:2d:b6:7a:
67:a2:fe:e4:80:70:0c:a1:d2:1c:af:98:f3:29:82:2d:6e:3e:
38:ee:9a:3b:fb:d0:e8:09:17:9f:e7:f6:9d:ca:85:b4:d2:2f:
b9:29:a1:07:2f:a1:73:d8:82:e7:9a:b7:ec:d6:e9:7e:a9:d3:
3e:6d:38:58:b5:e4:e8:cb:95:12:ef:d3:74:20:a3:b1:d8:7d:
9a:ac:50:4f:97:fe:f4:81:2a:c0:72:19:75:28:5b:e7:d4:2a:
b8:74:41:8b:c3:6c:d5:05:73:c7:32:de:6d:2d:dd:4d:71:cc:
bc:50:e0:bc:f1:7c:36:67:5f:ce:f7:9a:90:a2:35:d4:78:d6:
05:a6:7d:36:26:24:43:b5:1d:23:29:70:85:8d:de:9b:6e:3d:
ad:76:fa:e7:5a:83:0f:0f:d9:70:2e:09:6b:96:12:ef:6b:98:
2d:91:2a:c1:98:ab:bc:b8:98:d1:13:8d:d3:12:ac:73:1f:cc:
f2:ef:5b:e9:05:9f:6c:2e:71:07:4b:2b:83:17:a2:dc:f2:69:
e4:cb:7c:0f:89:cb:2f:ae:59:cf:92:68:7e:1a:22:0f:d9:f1:
29:7c:bd:81:ab:8a:ce:7e:e3:f2:53:24:df:f2:27:12:4c:ff:
15:77:a5:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0zPrO/b/8FpmTQYjAj9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZmIwMTE1YzRhY2RkZDFiNGFkYzQwNzM3ODA3MjZhY2Zj
MDFhZjkwHhcNMjUwNzI3MDMwMDM0WhcNMjUwNzI4MDMwMDM0WjAzMTEwLwYDVQQD
EyhkZWNhYTVkODliMmQxNTc3ZTUwMjI1YjNiNjZkNTVhMmYwODI3NzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fc+C6fgdq1iv366PUVob1wguD2t
W+TsXwYSAeOBtDjTlxZ0v6QUESybUwlqmmY8ESu3zU9n3UKBAQy8bJJdnlC0xpKj
RyFGK0X0uI0FPnHSWdY9mxmfZAUr/EzUpIx96Ynw1yGS4b/6w7hSZE83PMMDtxVe
oI5pwAmqYO/cIa4reN+RWZXcFR5RutRdpBZ8MrebRT2bqg5Xei8ZzTm4tybFeUKO
15ScUdPTovt/Bap2tkdDC+5wRFEFCPKHsnfVO61CmVfPn6oPVseVQiaIMMf0W3ym
YDwxWSoUb0VPiDXEVAu6tGZBaoWieVkJX/cHrlLazQkyeKKlQVt+OiUSUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7KpdibLRV35QIls7ZtVaLwgndIMB8GA1UdIwQY
MBaAFH/7ARXErN3RtK3EBzeAcmrPwBr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYt
Y2JlMDIwNjY1ZWZlLzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYtY2JlMDIwNjY1ZWZl
LzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2E2fUQgJ
aFUjXctv+4AdLbZ6Z6L+5IBwDKHSHK+Y8ymCLW4+OO6aO/vQ6AkXn+f2ncqFtNIv
uSmhBy+hc9iC55q37NbpfqnTPm04WLXk6MuVEu/TdCCjsdh9mqxQT5f+9IEqwHIZ
dShb59QquHRBi8Ns1QVzxzLebS3dTXHMvFDgvPF8NmdfzveakKI11HjWBaZ9NiYk
Q7UdIylwhY3em249rXb651qDDw/ZcC4Ja5YS72uYLZEqwZirvLiY0RON0xKscx/M
8u9b6QWfbC5xB0srgxei3PJp5Mt8D4nLL65Zz5JofhoiD9nxKXy9gauKzn7j8lMk
3/InEkz/FXelnQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:15 2025 by rpki-client