Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier: Dem8OsXWnoG0lAYUqFSmfjOZETzGyjZh6IxsbSaVUJ0=
Subject key identifier: 1E:35:2B:B0:E5:16:ED:C7:2B:28:AB:93:28:99:C4:07:A0:E7:7B:EA
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 019937CA9CB0D7E2558488764C2F55AC8547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number: 160F
Signing time: Thu 11 Sep 2025 08:00:49 +0000
Manifest this update: Thu 11 Sep 2025 08:00:49 +0000
Manifest next update: Fri 12 Sep 2025 08:00:49 +0000
Files and hashes: 1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=)
2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: oxoVMz4XW99WgiYkbabjytg5t/c1Js5uy6QJ7fc5eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:9c:b0:d7:e2:55:84:88:76:4c:2f:55:ac:85:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Sep 11 08:00:49 2025 GMT
Not After : Sep 12 08:00:49 2025 GMT
Subject: CN=1e352bb0e516edc72b28ab932899c407a0e77bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:aa:31:57:6b:35:a3:95:69:f6:d9:21:27:
0c:ea:72:65:24:88:29:56:57:87:c3:ac:c1:bb:46:
2c:e1:a0:63:98:fe:0c:5d:69:a2:75:40:c9:36:55:
82:c0:72:13:d8:85:65:e3:88:d8:95:ec:0c:6e:09:
a3:0e:e5:be:64:f0:26:02:07:ef:5f:32:65:07:45:
f2:7e:d8:30:83:1b:f9:e8:1f:7b:f6:a4:b3:6b:b4:
80:b5:e1:16:1f:66:1c:c8:ed:d9:f6:9a:0b:2b:2e:
90:62:21:88:bb:99:41:da:bb:23:b1:56:24:71:a4:
7d:84:69:10:52:71:4a:37:a7:50:64:21:c0:91:79:
3a:48:a5:43:fb:46:7c:fd:94:5d:12:64:ce:23:68:
d1:43:e5:8a:79:8e:0e:aa:84:4b:18:f3:40:f0:b5:
79:02:73:5f:27:5d:27:0b:49:f3:4a:90:fa:3b:7f:
01:06:5a:b1:b9:fc:26:f8:09:7b:16:2e:8c:8f:42:
60:66:30:5a:4a:15:80:bb:61:bf:61:ae:a9:bb:d1:
34:bf:73:9d:6f:10:08:b3:bf:a8:f7:cb:e3:22:2d:
96:b1:48:d5:a7:79:56:71:4d:1f:1f:9d:ff:48:47:
d8:2f:7d:cf:61:6d:f2:69:88:ba:41:64:29:d4:f1:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:35:2B:B0:E5:16:ED:C7:2B:28:AB:93:28:99:C4:07:A0:E7:7B:EA
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:00:5b:30:71:4d:7b:61:52:1e:ca:89:e0:56:49:b5:dc:25:
99:c2:82:35:94:6b:21:d5:67:bb:3f:83:a7:2f:4d:d4:86:25:
b2:db:45:2b:01:70:31:e2:e6:f8:0b:3f:04:3a:2a:08:1b:ec:
f7:a9:45:96:23:83:1f:3f:89:e4:67:fe:95:5e:8f:33:42:fc:
3c:a1:14:c6:6d:68:af:bb:73:ef:31:d9:65:3f:06:5c:0f:96:
8f:37:3b:3c:ca:53:67:ff:8e:12:1f:5b:4a:ea:01:5c:aa:3f:
0b:3c:ff:c7:21:85:36:b9:c5:56:f9:64:87:19:8e:f5:d9:40:
2c:48:84:c1:bd:0f:95:80:15:3d:df:68:d5:a5:1e:64:5f:36:
ea:1f:82:5e:59:b7:23:dd:20:8e:24:a1:2d:f7:a2:d9:63:69:
c5:e9:b9:de:9a:09:d6:53:1f:51:55:26:c2:03:15:90:83:d2:
34:6f:7f:56:9b:2a:08:68:13:19:12:11:d3:71:24:66:81:7c:
66:82:f8:b4:47:c4:4e:78:0c:58:b0:82:f0:44:ec:83:41:2f:
bc:61:ef:d5:fc:e3:15:74:d1:d7:66:4a:ed:89:ca:62:ef:44:
31:6b:ff:23:aa:3f:29:24:4a:ad:bf:a1:97:a0:af:96:00:39:
64:fb:ee:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3ypyw1+JVhIh2TC9VrIVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3
ZWYwZTIwHhcNMjUwOTExMDgwMDQ5WhcNMjUwOTEyMDgwMDQ5WjAzMTEwLwYDVQQD
EygxZTM1MmJiMGU1MTZlZGM3MmIyOGFiOTMyODk5YzQwN2EwZTc3YmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk2qMVdrNaOVafbZIScM6nJlJIgp
VleHw6zBu0Ys4aBjmP4MXWmidUDJNlWCwHIT2IVl44jYlewMbgmjDuW+ZPAmAgfv
XzJlB0Xyftgwgxv56B979qSza7SAteEWH2YcyO3Z9poLKy6QYiGIu5lB2rsjsVYk
caR9hGkQUnFKN6dQZCHAkXk6SKVD+0Z8/ZRdEmTOI2jRQ+WKeY4OqoRLGPNA8LV5
AnNfJ10nC0nzSpD6O38BBlqxufwm+Al7Fi6Mj0JgZjBaShWAu2G/Ya6pu9E0v3Od
bxAIs7+o98vjIi2WsUjVp3lWcU0fH53/SEfYL33PYW3yaYi6QWQp1PHkmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB41K7DlFu3HKyirkyiZxAeg53vqMB8GA1UdIwQY
MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt
N2Y3MmY0NGI4OTgyLzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy
LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgBbMHFN
e2FSHsqJ4FZJtdwlmcKCNZRrIdVnuz+Dpy9N1IYlsttFKwFwMeLm+As/BDoqCBvs
96lFliODHz+J5Gf+lV6PM0L8PKEUxm1or7tz7zHZZT8GXA+Wjzc7PMpTZ/+OEh9b
SuoBXKo/Czz/xyGFNrnFVvlkhxmO9dlALEiEwb0PlYAVPd9o1aUeZF826h+CXlm3
I90gjiShLfei2WNpxem53poJ1lMfUVUmwgMVkIPSNG9/VpsqCGgTGRIR03EkZoF8
ZoL4tEfETngMWLCC8ETsg0EvvGHv1fzjFXTR12ZK7YnKYu9EMWv/I6o/KSRKrb+h
l6CvlgA5ZPvugA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 12:49:11 2025 by rpki-client