Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: ZTuC+PeTqtALFnhpW8sbljFlCetuV/DXVtijf86yuJg=
Subject key identifier: 60:E6:9F:B8:54:F1:A8:5B:0E:11:A1:64:12:EB:30:D0:34:E5:B6:60
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 0199228C4A604C58EDFDAE3DD56475CCA999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 1509
Signing time: Sun 07 Sep 2025 05:00:43 +0000
Manifest this update: Sun 07 Sep 2025 05:00:43 +0000
Manifest next update: Mon 08 Sep 2025 05:00:43 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: okh2RAvTGQgUwjKd44Q0mjnyznIyU2rxBWJh/966Ue4=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:4a:60:4c:58:ed:fd:ae:3d:d5:64:75:cc:a9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Sep 7 05:00:43 2025 GMT
Not After : Sep 8 05:00:43 2025 GMT
Subject: CN=60e69fb854f1a85b0e11a16412eb30d034e5b660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:f1:14:b5:33:7b:cb:70:eb:53:9d:75:6f:
52:4a:f9:a6:a6:4a:74:52:7c:bc:36:50:84:13:f8:
82:25:90:f6:a1:14:13:f2:50:0d:6d:60:21:9d:7e:
13:dc:0d:8d:5d:63:d4:16:ec:7e:53:03:0a:04:04:
74:25:85:49:d6:67:4a:9b:9f:8f:6a:a6:c2:80:13:
fb:a3:ae:3e:78:cb:c9:85:9c:88:c2:23:27:23:80:
0e:a0:9e:09:91:15:c4:6d:ec:03:4c:34:8f:8f:ca:
f3:bb:a8:f9:6b:ba:ab:16:ce:8f:a3:4d:55:3c:fd:
5e:b1:9b:05:e1:2c:e2:62:d5:60:41:f5:72:6c:52:
76:94:89:14:79:6c:e2:7d:15:d0:ec:a3:40:96:1e:
79:f4:43:d9:09:66:b2:60:2b:fb:2c:54:e1:2e:5d:
01:1a:c4:a1:93:6c:28:64:02:1f:99:d6:b9:f7:1d:
e2:a7:2f:dc:c8:17:19:c8:44:b2:75:72:d6:6f:58:
3a:b1:6f:d3:72:3d:f8:13:5d:de:cd:5b:00:6d:58:
2d:39:1c:f0:10:ec:22:44:68:c9:0a:44:b4:bd:b1:
1e:21:91:93:a9:26:ac:40:f8:89:e2:28:f6:90:2a:
5a:5a:ec:08:59:7a:1e:8e:f9:23:43:0a:b5:af:dc:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E6:9F:B8:54:F1:A8:5B:0E:11:A1:64:12:EB:30:D0:34:E5:B6:60
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:43:3c:29:ba:d2:cf:28:e5:f4:cf:c7:4c:81:86:a0:ed:d3:
f7:45:2e:a8:d0:01:f2:35:03:7a:ef:1a:fe:90:60:f1:ea:5e:
95:3b:2c:e3:e0:cd:c0:ae:1d:4f:c5:7d:c9:46:59:95:08:06:
10:72:4e:45:8b:33:75:4c:db:58:20:fc:11:32:6f:8c:9d:d9:
ea:31:8a:99:af:d1:10:5f:d4:28:2a:78:16:24:8b:04:a4:4c:
28:5b:1b:b8:04:16:df:c3:de:b5:a7:96:e8:78:a7:80:b7:60:
9e:c4:a6:c2:92:2d:14:0e:7e:d0:91:5e:31:50:f0:a6:26:16:
52:cb:fb:21:08:81:96:c4:3e:e4:de:2b:46:f6:d8:f5:d3:ef:
e6:c0:22:1a:cd:01:2b:65:53:11:cf:3f:ee:19:23:7d:9d:1b:
cd:01:d4:64:37:69:49:dd:0d:30:89:bc:0e:58:75:86:4b:72:
1a:c6:4c:e1:47:01:b3:38:1a:a8:08:92:54:4b:91:39:0a:ac:
09:08:96:03:3b:6d:59:58:55:02:c4:5d:c7:e0:fd:d9:0e:45:
23:95:44:b6:cd:9b:7f:84:ce:69:55:3b:e0:88:a0:5a:59:fb:
5b:13:29:44:2c:ef:52:c4:33:89:38:6e:d0:a2:6a:f7:8e:56:
cf:db:95:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijEpgTFjt/a491WR1zKmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjcyNTU2OTg0NDE1Yjc4ZTlkMTU0NjE3ODRjOGM0ZTY5
MWQwMTAwHhcNMjUwOTA3MDUwMDQzWhcNMjUwOTA4MDUwMDQzWjAzMTEwLwYDVQQD
Eyg2MGU2OWZiODU0ZjFhODViMGUxMWExNjQxMmViMzBkMDM0ZTViNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/TxFLUze8tw61OddW9SSvmmpkp0
Uny8NlCEE/iCJZD2oRQT8lANbWAhnX4T3A2NXWPUFux+UwMKBAR0JYVJ1mdKm5+P
aqbCgBP7o64+eMvJhZyIwiMnI4AOoJ4JkRXEbewDTDSPj8rzu6j5a7qrFs6Po01V
PP1esZsF4SziYtVgQfVybFJ2lIkUeWzifRXQ7KNAlh559EPZCWayYCv7LFThLl0B
GsShk2woZAIfmda59x3ipy/cyBcZyESydXLWb1g6sW/Tcj34E13ezVsAbVgtORzw
EOwiRGjJCkS0vbEeIZGTqSasQPiJ4ij2kCpaWuwIWXoejvkjQwq1r9z/VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDmn7hU8ahbDhGhZBLrMNA05bZgMB8GA1UdIwQY
MBaAFBdnJVaYRBW3jp0VRheEyMTmkdAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQt
ZTI4ODMyMzIzZjZkLzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQtZTI4ODMyMzIzZjZk
LzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvUM8KbrS
zyjl9M/HTIGGoO3T90UuqNAB8jUDeu8a/pBg8epelTss4+DNwK4dT8V9yUZZlQgG
EHJORYszdUzbWCD8ETJvjJ3Z6jGKma/REF/UKCp4FiSLBKRMKFsbuAQW38PetaeW
6HingLdgnsSmwpItFA5+0JFeMVDwpiYWUsv7IQiBlsQ+5N4rRvbY9dPv5sAiGs0B
K2VTEc8/7hkjfZ0bzQHUZDdpSd0NMIm8Dlh1hktyGsZM4UcBszgaqAiSVEuROQqs
CQiWAzttWVhVAsRdx+D92Q5FI5VEts2bf4TOaVU74IigWln7WxMpRCzvUsQziThu
0KJq945Wz9uV6g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:49 2025 by rpki-client