Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: cLYOKIeSRVW7XvWLNOOjsFTNsGLaPJLFLK6P5Ff9/WM=
Subject key identifier: 3A:1C:40:71:DA:69:CF:84:BA:EE:97:F1:56:0D:BB:E7:A0:0D:9F:B4
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 0198458A07D7D6E42DBECDA931B84F87F397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 10FC
Signing time: Sat 26 Jul 2025 07:02:10 +0000
Manifest this update: Sat 26 Jul 2025 07:02:10 +0000
Manifest next update: Sun 27 Jul 2025 07:02:10 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: K/FQetf67tHBRj5wZoS0GN0ZCxk0T0EE/2q20mh4Tcc=)
2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:8a:07:d7:d6:e4:2d:be:cd:a9:31:b8:4f:87:f3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Jul 26 07:02:10 2025 GMT
Not After : Jul 27 07:02:10 2025 GMT
Subject: CN=3a1c4071da69cf84baee97f1560dbbe7a00d9fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:e0:2c:ce:eb:53:66:da:d6:93:a9:22:5e:
8c:b0:8b:94:a3:fd:b1:73:3a:3e:08:b5:76:64:d0:
56:9b:e5:5f:45:b2:0b:ac:19:20:e5:f6:f1:03:82:
28:96:74:9d:ce:5f:42:a8:e2:ba:15:94:6e:8f:2b:
af:61:22:75:f3:e0:d4:e9:46:6c:90:fe:06:94:5d:
98:40:aa:15:0b:9a:51:1f:cd:48:5c:71:c8:8e:8a:
a8:19:23:f6:bd:1a:4f:0a:b8:81:87:b1:7e:f5:57:
47:54:0b:73:3f:6c:06:98:e6:1d:c3:6f:25:00:7c:
1e:79:95:bf:71:34:4b:75:8c:57:0c:ac:35:6a:d1:
88:4b:6d:0d:ff:be:1d:b0:af:ac:62:0d:58:78:49:
1f:1d:09:29:1f:c9:62:99:61:4e:9d:5b:5b:47:3c:
a2:6a:96:93:6b:eb:eb:7a:be:f6:a1:bb:d5:9a:5d:
26:8b:3e:e1:0e:de:4c:40:fb:e0:f9:cc:6f:cd:e1:
9e:ed:8e:17:77:c4:59:e1:fa:fc:b7:9a:3a:a7:2b:
c0:29:ac:e1:c9:3e:40:89:30:8f:9d:0e:bb:58:c5:
70:8c:50:52:d9:aa:9d:87:70:58:82:9b:28:6d:10:
18:d3:67:f0:5d:99:ae:a7:c9:48:02:e6:fd:b8:14:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1C:40:71:DA:69:CF:84:BA:EE:97:F1:56:0D:BB:E7:A0:0D:9F:B4
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6e:e5:32:aa:4f:2a:34:31:0e:7a:4f:1a:1e:e7:6e:2e:7b:
6a:df:7a:6d:9a:bc:22:e7:f3:cc:e9:2e:57:20:39:1d:e2:61:
ea:cf:fc:12:7f:ff:8f:22:75:e3:9f:cd:97:be:3d:ea:79:20:
69:c4:61:86:b9:a0:a9:d4:b8:dd:b2:c8:62:60:65:c2:b6:ec:
a1:66:ab:5e:57:d9:1a:53:56:e1:7e:b8:76:9a:9b:58:8b:13:
51:be:9d:08:18:81:fa:5d:1c:02:9b:a4:d3:5c:ca:23:65:25:
75:f5:0b:42:c9:17:33:f5:16:e0:db:ab:24:bc:7e:08:58:19:
93:96:b1:05:f1:54:19:49:2f:f6:98:f1:db:a5:8b:a9:98:33:
2d:0b:e0:5b:0f:a2:26:b7:da:b3:63:73:bd:fd:37:aa:ce:44:
6c:7d:5a:1d:29:34:61:bc:6d:5b:e8:bd:69:0c:ad:94:35:58:
bd:1a:71:3b:6b:12:74:bf:57:a8:07:e3:d9:b8:37:43:e3:33:
a3:23:1f:51:d6:59:4c:ff:ce:33:0e:28:b3:e7:43:92:eb:3e:
06:f1:c7:00:36:70:b9:b2:cf:6d:d8:f7:16:49:d9:a3:8e:77:
e1:5f:9f:5e:36:c8:eb:f4:63:9f:94:77:a1:4d:8b:74:1b:38:
4b:1e:e7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFigfX1uQtvs2pMbhPh/OXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTE4NTE2ODBiNzJjOTY5MTIyNWUxYmYzNmM0NzI2MGVh
MjQ0ZmEwHhcNMjUwNzI2MDcwMjEwWhcNMjUwNzI3MDcwMjEwWjAzMTEwLwYDVQQD
EygzYTFjNDA3MWRhNjljZjg0YmFlZTk3ZjE1NjBkYmJlN2EwMGQ5ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8fgLM7rU2ba1pOpIl6MsIuUo/2x
czo+CLV2ZNBWm+VfRbILrBkg5fbxA4IolnSdzl9CqOK6FZRujyuvYSJ18+DU6UZs
kP4GlF2YQKoVC5pRH81IXHHIjoqoGSP2vRpPCriBh7F+9VdHVAtzP2wGmOYdw28l
AHweeZW/cTRLdYxXDKw1atGIS20N/74dsK+sYg1YeEkfHQkpH8limWFOnVtbRzyi
apaTa+vrer72obvVml0miz7hDt5MQPvg+cxvzeGe7Y4Xd8RZ4fr8t5o6pyvAKazh
yT5AiTCPnQ67WMVwjFBS2aqdh3BYgpsobRAY02fwXZmup8lIAub9uBQ+8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDocQHHaac+Euu6X8VYNu+egDZ+0MB8GA1UdIwQY
MBaAFOeRhRaAtyyWkSJeG/NsRyYOokT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQt
NDJiZDkyZjMwYTk3LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQtNDJiZDkyZjMwYTk3
LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB27lMqpP
KjQxDnpPGh7nbi57at96bZq8IufzzOkuVyA5HeJh6s/8En//jyJ145/Nl7496nkg
acRhhrmgqdS43bLIYmBlwrbsoWarXlfZGlNW4X64dpqbWIsTUb6dCBiB+l0cApuk
01zKI2UldfULQskXM/UW4NurJLx+CFgZk5axBfFUGUkv9pjx26WLqZgzLQvgWw+i
Jrfas2Nzvf03qs5EbH1aHSk0YbxtW+i9aQytlDVYvRpxO2sSdL9XqAfj2bg3Q+Mz
oyMfUdZZTP/OMw4os+dDkus+BvHHADZwubLPbdj3FknZo4534V+fXjbI6/Rjn5R3
oU2LdBs4Sx7nFg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:13:09 2025 by rpki-client