Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier: A5Ww/6+MGzsOkkyvRrLrUKtAdTsrNGXg2756lJNyI0o=
Subject key identifier: 41:B1:F4:9C:91:BA:8D:8D:B3:85:9B:93:76:8A:1C:BA:6D:5A:EE:A1
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 01992255B601739C29AC46C84231187EACD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:01:06 +0000
Manifest this update: Sun 07 Sep 2025 04:01:06 +0000
Manifest next update: Mon 08 Sep 2025 04:01:06 +0000
Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: DFDPgOaqjjDO2tJKY5w6KSOjTMmWYDYvAnAm/sbwH+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b6:01:73:9c:29:ac:46:c8:42:31:18:7e:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: Sep 7 04:01:06 2025 GMT
Not After : Sep 8 04:01:06 2025 GMT
Subject: CN=41b1f49c91ba8d8db3859b93768a1cba6d5aeea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:79:34:76:a2:53:be:61:41:f6:4d:a6:94:
f1:89:9c:e8:15:fd:33:dd:83:d8:14:43:d9:24:0a:
1a:f7:a5:d6:70:39:45:fb:d5:0c:c4:e5:a5:02:a4:
21:47:5b:df:e5:18:58:40:b3:c7:37:1e:16:79:22:
70:26:8d:11:c4:7e:45:da:37:6d:01:e3:99:39:ca:
a4:2b:b7:19:28:e1:3b:53:86:87:29:af:18:47:b9:
ab:39:f0:3a:a2:78:a8:31:9a:12:92:67:b4:69:ee:
e0:37:44:8b:7b:08:8a:3c:61:cc:9c:bf:53:b9:08:
69:bb:27:a0:39:8c:8e:42:68:21:13:c8:76:55:24:
1a:a6:f9:38:ae:77:69:5f:4d:a3:90:92:0e:31:6f:
0d:e1:a3:84:b0:d7:7e:b8:c0:1b:4d:b8:48:04:70:
57:9d:51:54:15:9a:7f:52:9b:3d:41:ad:1a:07:66:
ed:bc:d7:e3:81:ed:70:c5:8a:e2:d3:4c:d7:48:89:
55:05:74:72:ba:e6:9b:b7:01:c4:2c:6a:40:92:e5:
71:f7:33:fd:22:da:98:8b:cb:ee:b5:08:38:54:96:
cb:b1:d0:23:15:60:74:26:b1:fc:24:ac:bc:5b:80:
33:49:0f:b7:d3:fe:da:11:fa:43:ea:1e:be:48:bc:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:F4:9C:91:BA:8D:8D:B3:85:9B:93:76:8A:1C:BA:6D:5A:EE:A1
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d8:e4:71:20:a3:85:d6:8d:4a:5f:bc:40:02:14:84:c3:a6:
59:08:20:12:d3:4d:0c:af:06:30:d8:9f:b8:bc:05:f4:77:8e:
04:e2:df:c8:58:18:7d:d7:6e:f1:b4:0b:43:fe:a0:6a:fa:27:
88:3d:57:88:7d:0e:0e:dd:25:da:94:a3:5e:9a:07:b1:57:5c:
e5:e9:cd:42:d2:3a:b6:6c:c3:ad:22:91:db:df:5a:9e:d2:2a:
eb:b1:b4:cf:fc:75:42:56:41:62:f7:d6:5f:43:38:4f:17:b7:
de:e4:60:98:76:6c:16:62:3b:98:cf:47:12:59:9d:53:77:50:
7a:fa:6d:24:c9:d2:a6:62:0e:d1:3b:d6:7b:a9:4a:23:63:b3:
4c:32:ce:7a:25:78:64:a0:a0:c8:05:8a:cd:62:7d:b0:78:5e:
52:cf:91:f9:b4:a1:3c:73:0d:11:d4:24:8e:2f:a2:e8:01:2c:
e7:09:a5:2b:8e:9c:83:34:15:7c:a1:aa:96:a3:11:3d:5e:25:
7d:8d:03:34:90:98:fd:2a:e1:c3:10:fa:52:c7:84:7d:56:cd:
c8:2c:e9:5c:3d:26:ea:2e:7b:dd:d6:8c:a3:d6:3f:a5:93:b7:
eb:34:86:5e:70:64:87:fd:81:86:27:f6:69:4f:09:c3:74:87:
c4:2a:b5:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVbYBc5wprEbIQjEYfqzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTdkN2EyZDU3NjYxZjZjM2M2ZWE3NjM2Y2EwZmYyMzAw
YzE0NmYwHhcNMjUwOTA3MDQwMTA2WhcNMjUwOTA4MDQwMTA2WjAzMTEwLwYDVQQD
Eyg0MWIxZjQ5YzkxYmE4ZDhkYjM4NTliOTM3NjhhMWNiYTZkNWFlZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMB5NHaiU75hQfZNppTxiZzoFf0z
3YPYFEPZJAoa96XWcDlF+9UMxOWlAqQhR1vf5RhYQLPHNx4WeSJwJo0RxH5F2jdt
AeOZOcqkK7cZKOE7U4aHKa8YR7mrOfA6onioMZoSkme0ae7gN0SLewiKPGHMnL9T
uQhpuyegOYyOQmghE8h2VSQapvk4rndpX02jkJIOMW8N4aOEsNd+uMAbTbhIBHBX
nVFUFZp/Ups9Qa0aB2btvNfjge1wxYri00zXSIlVBXRyuuabtwHELGpAkuVx9zP9
ItqYi8vutQg4VJbLsdAjFWB0JrH8JKy8W4AzSQ+30/7aEfpD6h6+SLx8swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGx9JyRuo2Ns4Wbk3aKHLptWu6hMB8GA1UdIwQY
MBaAFPxX16LVdmH2w8bqdjbKD/IwDBRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMt
NzMxZjQ3ODIwYjIwLzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMtNzMxZjQ3ODIwYjIw
LzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtjkcSCj
hdaNSl+8QAIUhMOmWQggEtNNDK8GMNifuLwF9HeOBOLfyFgYfddu8bQLQ/6gavon
iD1XiH0ODt0l2pSjXpoHsVdc5enNQtI6tmzDrSKR299antIq67G0z/x1QlZBYvfW
X0M4Txe33uRgmHZsFmI7mM9HElmdU3dQevptJMnSpmIO0TvWe6lKI2OzTDLOeiV4
ZKCgyAWKzWJ9sHheUs+R+bShPHMNEdQkji+i6AEs5wmlK46cgzQVfKGqlqMRPV4l
fY0DNJCY/SrhwxD6UseEfVbNyCzpXD0m6i573daMo9Y/pZO36zSGXnBkh/2Bhif2
aU8Jw3SHxCq1TQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:14 2025 by rpki-client