Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: ZsVpt6qxSK+SxvIpndkxttBYXi7kl8dUFGPDMBrEAn4=
Subject key identifier: FF:63:93:94:3A:0D:9D:56:13:A9:C4:22:84:97:E4:AF:40:7F:0E:1E
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 019847775C658ACCAF4D1B38ECE609EA7AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 0FFB
Signing time: Sat 26 Jul 2025 16:01:01 +0000
Manifest this update: Sat 26 Jul 2025 16:01:01 +0000
Manifest next update: Sun 27 Jul 2025 16:01:01 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: 6gsxqWze9+a79t46tZC8/uNah3yTzGLSafFGLbVfhp0=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:5c:65:8a:cc:af:4d:1b:38:ec:e6:09:ea:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Jul 26 16:01:01 2025 GMT
Not After : Jul 27 16:01:01 2025 GMT
Subject: CN=ff6393943a0d9d5613a9c4228497e4af407f0e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:56:5f:7b:2d:25:05:c8:92:ae:22:df:b0:
54:79:11:b9:23:e7:27:41:45:75:44:30:e8:5f:bf:
26:17:ff:bf:a1:6f:1c:85:56:69:96:08:1f:52:9f:
13:75:00:a6:4f:d9:cc:85:2f:d0:1c:20:9b:0e:1d:
9e:4d:b3:17:e2:2d:15:2e:7c:59:8f:d2:bf:ed:4a:
4a:17:ac:0c:d8:9e:d6:e3:4a:f5:03:73:04:5e:ac:
7a:84:63:f9:9d:c2:7a:22:ed:4f:07:6f:86:8a:80:
95:38:80:d5:2f:f0:24:60:60:3e:ee:20:32:bc:fb:
ad:80:27:02:d3:06:6c:d9:10:fe:fb:23:61:df:52:
46:76:5a:e9:d2:18:5f:bf:3c:be:37:6c:9b:87:48:
47:8b:19:de:d8:fa:36:00:47:3d:a1:d0:e9:25:d6:
69:97:90:0a:9d:48:a1:cf:84:9c:71:75:aa:82:4e:
85:74:2a:61:99:96:50:1f:1e:8a:88:bb:2f:b9:f6:
f9:ac:57:7f:60:7f:0d:93:ab:42:cd:6a:77:de:b2:
42:83:14:b5:0d:ea:f5:0f:3e:d6:b3:56:49:e5:f7:
27:5d:22:72:d4:ac:d8:6c:75:6b:ae:93:2a:38:9f:
3b:61:d7:da:3a:c6:78:0f:89:dd:40:65:f7:73:e1:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:93:94:3A:0D:9D:56:13:A9:C4:22:84:97:E4:AF:40:7F:0E:1E
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fe:29:c4:0a:c6:d8:a8:6b:30:b7:b5:21:97:22:49:d3:61:
64:90:97:6a:c6:3f:ab:d5:43:a4:76:05:d7:d3:82:8b:3e:28:
64:fa:2b:cd:42:af:f0:32:a0:29:dc:bf:91:03:6d:21:19:f0:
76:3b:f1:db:3f:f2:f3:a0:a2:49:80:eb:3e:59:32:44:2a:9f:
a3:63:90:36:6d:ff:b3:7e:18:bd:b0:49:29:1b:ee:4d:53:73:
ca:53:e0:f6:38:01:3b:7c:7c:8d:c1:77:70:9e:36:73:ec:5b:
48:a3:0f:51:cf:62:c6:48:22:2c:ea:ab:a7:c9:86:f8:21:76:
42:bc:66:64:96:57:23:56:89:e8:66:de:3b:d0:39:ca:0f:e3:
bf:4f:11:0a:79:88:7c:92:ff:06:b2:fc:50:66:f7:4c:f7:9d:
90:5b:d2:e4:f6:39:81:46:a9:d5:e8:1f:10:a3:e7:e9:05:30:
f3:3a:e0:52:9d:0c:f0:31:c2:40:57:83:f3:d8:d6:64:64:e7:
da:fe:8e:4f:15:8f:c7:22:05:94:37:78:0d:68:9d:9e:d6:78:
50:5f:23:ff:5a:07:f1:64:d2:2a:1e:29:5e:b5:e9:bd:da:79:
19:1d:05:f0:df:7a:0c:dc:f3:a4:1f:97:21:5b:3c:d2:e1:bb:
3d:1b:40:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd1xlisyvTRs47OYJ6nrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDcwMDJiZjNhMmVhY2ZjODgxZDVlMWEwMjExMDk4YzY2
OTk1NmMwHhcNMjUwNzI2MTYwMTAxWhcNMjUwNzI3MTYwMTAxWjAzMTEwLwYDVQQD
EyhmZjYzOTM5NDNhMGQ5ZDU2MTNhOWM0MjI4NDk3ZTRhZjQwN2YwZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6ZWX3stJQXIkq4i37BUeRG5I+cn
QUV1RDDoX78mF/+/oW8chVZplggfUp8TdQCmT9nMhS/QHCCbDh2eTbMX4i0VLnxZ
j9K/7UpKF6wM2J7W40r1A3MEXqx6hGP5ncJ6Iu1PB2+GioCVOIDVL/AkYGA+7iAy
vPutgCcC0wZs2RD++yNh31JGdlrp0hhfvzy+N2ybh0hHixne2Po2AEc9odDpJdZp
l5AKnUihz4SccXWqgk6FdCphmZZQHx6KiLsvufb5rFd/YH8Nk6tCzWp33rJCgxS1
Der1Dz7Ws1ZJ5fcnXSJy1KzYbHVrrpMqOJ87YdfaOsZ4D4ndQGX3c+GFYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9jk5Q6DZ1WE6nEIoSX5K9Afw4eMB8GA1UdIwQY
MBaAFP3XACvzourPyIHV4aAhEJjGaZVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWIt
MjE2MWZmNDc4ODFjLzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWItMjE2MWZmNDc4ODFj
LzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv4pxArG
2KhrMLe1IZciSdNhZJCXasY/q9VDpHYF19OCiz4oZPorzUKv8DKgKdy/kQNtIRnw
djvx2z/y86CiSYDrPlkyRCqfo2OQNm3/s34YvbBJKRvuTVNzylPg9jgBO3x8jcF3
cJ42c+xbSKMPUc9ixkgiLOqrp8mG+CF2QrxmZJZXI1aJ6GbeO9A5yg/jv08RCnmI
fJL/BrL8UGb3TPedkFvS5PY5gUap1egfEKPn6QUw8zrgUp0M8DHCQFeD89jWZGTn
2v6OTxWPxyIFlDd4DWidntZ4UF8j/1oH8WTSKh4pXrXpvdp5GR0F8N96DNzzpB+X
IVs80uG7PRtAEg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:38:05 2025 by rpki-client