Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: ei28mx+jXa4phuAlUF+tFn0Hr0thAWz0DY1e3Uzb4/k=
Subject key identifier: CB:08:69:FE:DE:35:53:78:9D:EA:86:42:46:A5:49:53:34:B2:D3:27
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 0198451A8BBE7084B93B5F3D15E8EC1A0F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 05:00:24 +0000
Manifest this update: Sat 26 Jul 2025 05:00:24 +0000
Manifest next update: Sun 27 Jul 2025 05:00:24 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: CgIFIrqDh9pZpnRRFFitRK/cdm5NzwPlNs1IgaSYTh4=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:8b:be:70:84:b9:3b:5f:3d:15:e8:ec:1a:0f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jul 26 05:00:24 2025 GMT
Not After : Jul 27 05:00:24 2025 GMT
Subject: CN=cb0869fede3553789dea864246a5495334b2d327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:2c:83:b6:11:bb:33:a9:c4:0c:b9:17:92:
2a:31:8e:ac:d6:0b:1b:8e:6f:ed:88:15:ad:c5:70:
ae:7b:56:8a:fd:aa:f1:af:ac:14:23:10:f8:30:ea:
0e:84:9a:2e:00:78:dd:c6:7e:00:3b:b0:bd:50:85:
5f:3c:a5:08:63:80:63:f2:9e:d1:61:3c:bd:4d:2b:
49:78:e1:96:65:a7:02:3c:65:41:2c:76:6d:cf:df:
24:c1:f6:9c:97:11:47:4c:6c:53:2a:7f:14:7a:9d:
cb:6f:54:98:1e:9d:2a:c2:18:28:f2:d5:89:2d:5b:
a3:51:f9:d5:e5:c5:b3:c0:bd:d9:40:77:c2:58:b3:
6a:8c:6c:b7:e0:f6:dd:d2:d5:2f:71:f9:88:22:a5:
dd:db:5b:9f:ad:f2:57:70:5f:e4:e4:11:ff:fb:f8:
0a:f9:d0:8b:14:9d:90:0f:a9:0b:80:13:db:ce:a2:
a1:0a:2e:10:de:99:32:31:d4:05:27:56:eb:f5:14:
a1:6b:d4:f1:7f:a1:be:2c:f7:ac:21:a7:09:a2:39:
b6:88:67:2f:c9:48:c2:2f:1d:1a:76:78:2b:11:d4:
1b:20:56:02:c3:88:58:1b:83:95:d6:65:7b:ec:9d:
67:86:00:b9:3f:f9:c9:1f:9b:5b:8b:cb:d9:50:83:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:69:FE:DE:35:53:78:9D:EA:86:42:46:A5:49:53:34:B2:D3:27
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:48:c5:2c:6d:60:f9:6b:00:c2:9b:ac:c3:8c:04:65:d1:10:
74:92:b1:16:44:70:66:b4:58:e0:79:21:ed:ea:71:39:bc:40:
f1:19:60:fe:69:dc:aa:8b:33:8a:90:30:91:11:b9:25:ec:b2:
64:8b:45:75:2b:ce:8f:e7:bf:ce:72:0d:41:95:9c:09:c4:de:
ad:65:64:b9:dd:5e:87:10:c9:2d:d6:c1:73:d9:cf:32:70:82:
c0:73:15:c7:08:ba:cd:f9:39:5b:5f:a9:2f:ea:64:5f:5a:00:
44:58:ee:ac:7d:87:36:c9:3c:75:1a:a3:89:27:bc:57:91:88:
0b:83:57:8d:f8:98:36:0e:d7:30:ff:54:87:39:55:49:dd:29:
0a:68:a1:1e:29:61:3c:a7:8d:c1:57:0c:ca:f5:4e:bb:9c:73:
9c:e4:2f:6e:ca:38:54:8a:d5:e0:50:92:43:de:92:f6:db:7a:
26:80:2f:9b:2f:e7:d9:d3:17:8c:7d:f8:70:21:ed:1c:5b:5e:
3c:33:7e:ef:6a:bd:c2:85:e3:a0:66:97:1d:5b:b8:b5:54:09:
92:fd:c6:80:4a:7f:32:a2:bb:38:ab:bb:8e:47:45:17:15:db:
2f:8d:51:10:a3:f1:98:9b:00:d6:46:cd:b6:c4:2f:9a:24:11:
c5:0e:48:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGou+cIS5O189FejsGg9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjUwNzI2MDUwMDI0WhcNMjUwNzI3MDUwMDI0WjAzMTEwLwYDVQQD
EyhjYjA4NjlmZWRlMzU1Mzc4OWRlYTg2NDI0NmE1NDk1MzM0YjJkMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbMsg7YRuzOpxAy5F5IqMY6s1gsb
jm/tiBWtxXCue1aK/arxr6wUIxD4MOoOhJouAHjdxn4AO7C9UIVfPKUIY4Bj8p7R
YTy9TStJeOGWZacCPGVBLHZtz98kwfaclxFHTGxTKn8Uep3Lb1SYHp0qwhgo8tWJ
LVujUfnV5cWzwL3ZQHfCWLNqjGy34Pbd0tUvcfmIIqXd21ufrfJXcF/k5BH/+/gK
+dCLFJ2QD6kLgBPbzqKhCi4Q3pkyMdQFJ1br9RSha9Txf6G+LPesIacJojm2iGcv
yUjCLx0adngrEdQbIFYCw4hYG4OV1mV77J1nhgC5P/nJH5tbi8vZUIM1ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsIaf7eNVN4neqGQkalSVM0stMnMB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0jFLG1g
+WsAwpusw4wEZdEQdJKxFkRwZrRY4Hkh7epxObxA8Rlg/mncqoszipAwkRG5Jeyy
ZItFdSvOj+e/znINQZWcCcTerWVkud1ehxDJLdbBc9nPMnCCwHMVxwi6zfk5W1+p
L+pkX1oARFjurH2HNsk8dRqjiSe8V5GIC4NXjfiYNg7XMP9UhzlVSd0pCmihHilh
PKeNwVcMyvVOu5xznOQvbso4VIrV4FCSQ96S9tt6JoAvmy/n2dMXjH34cCHtHFte
PDN+72q9woXjoGaXHVu4tVQJkv3GgEp/MqK7OKu7jkdFFxXbL41REKPxmJsA1kbN
tsQvmiQRxQ5IcQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:33:28 2025 by rpki-client