Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: T/lDZKda1Ko9TY3UB3NuhR8niCBfBe1mC/iHTMwJ824=
Subject key identifier: EF:45:CF:BA:04:9F:6D:2B:50:32:2E:47:C2:77:0A:79:91:38:E0:3A
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 01992331240548BAB3A26B5F8F920168F4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 15B6
Signing time: Sun 07 Sep 2025 08:00:46 +0000
Manifest this update: Sun 07 Sep 2025 08:00:46 +0000
Manifest next update: Mon 08 Sep 2025 08:00:46 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: E3vfK1TkqStA6SUdNmHaSowUmZCNDThAGIFjrH2zFNA=)
2: Jan-36Lo7cls_qlYXAYwCHL-IM0.roa (hash: 9QKHqIJMi/8WyyfdqnXT2xQCCgDbraKMeYqVzfnxL6A=)
3: rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa (hash: 4ZmwtT19+5Iz0mku0LqIMr+TT72kqcPqLFHR2qlNxGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:24:05:48:ba:b3:a2:6b:5f:8f:92:01:68:f4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Sep 7 08:00:46 2025 GMT
Not After : Sep 8 08:00:46 2025 GMT
Subject: CN=ef45cfba049f6d2b50322e47c2770a799138e03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:6c:10:98:c6:3b:c3:e0:c8:8f:c3:7f:a1:
bd:93:52:3c:ac:da:26:11:3c:3f:e5:47:8f:05:ca:
2d:20:83:0c:83:a6:4b:8e:c6:bb:16:30:14:0b:af:
53:2e:ec:14:a5:a2:95:48:bd:00:e3:80:62:8d:c0:
3f:e7:bc:95:96:6b:0a:5c:f8:21:c3:b7:e2:43:29:
33:ea:d9:29:60:24:35:94:a2:9f:0d:b9:95:f7:b4:
ab:3f:ce:1c:20:d7:2f:28:4a:36:c5:8f:d0:07:a6:
e8:36:d5:28:b5:23:3e:6b:cf:43:8e:aa:d1:b9:fb:
9e:3a:13:4a:8d:7f:da:76:cc:e6:d4:43:53:dc:ad:
ff:d1:f6:92:a3:15:b1:63:41:11:4d:d6:a7:64:0f:
d1:9a:9f:6c:58:e1:0d:40:f6:b5:fe:6e:b1:a2:2a:
93:65:17:90:1b:e9:78:45:de:b3:5c:13:3e:e8:3d:
92:26:57:e0:d9:06:70:7e:b3:c1:78:84:65:1a:69:
0c:65:7c:5f:d4:32:ae:57:54:59:bc:0f:1c:7e:c5:
fc:d3:5e:0d:a7:74:55:02:68:8a:64:7a:11:13:b4:
68:fe:3c:d9:e2:ad:3d:c3:33:62:0f:be:66:8e:f4:
ad:55:40:9b:aa:a1:a5:1a:15:65:da:38:5b:17:14:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:45:CF:BA:04:9F:6D:2B:50:32:2E:47:C2:77:0A:79:91:38:E0:3A
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e7:c7:d4:e2:3d:02:69:de:9e:05:31:c7:3a:9d:a7:97:35:
5e:e2:3d:6e:49:10:35:98:a4:7e:22:f6:80:0f:3b:56:26:8c:
33:9b:f5:5f:4b:98:39:77:0c:39:dc:1a:7f:b5:48:e6:a3:62:
4e:17:bf:10:48:5c:20:a3:98:89:3a:ff:3c:32:e2:8e:be:8a:
1f:a4:e6:33:92:06:d8:04:2d:d4:64:a7:ff:a4:ba:77:d6:ce:
ac:ad:2c:00:9c:e3:17:fa:52:84:48:9e:23:9f:b2:4c:ff:ea:
42:9d:bc:c2:03:39:50:d9:40:30:34:39:54:da:23:9f:cc:d8:
2c:ef:32:27:b7:ef:bf:a6:54:99:32:fa:fe:54:cf:5d:78:60:
a5:6a:d8:f9:d2:9a:e4:04:e4:9e:53:e2:9d:a8:d4:4e:28:c2:
f4:56:e9:cc:20:59:5b:8f:86:e5:8f:c4:b2:3c:fb:e0:97:30:
07:c6:1e:1f:22:93:9d:3b:5b:ae:69:32:99:ce:58:3e:03:4e:
17:7c:96:5b:b1:d0:6c:bb:f8:51:7a:d9:46:e5:3c:75:22:fd:
9b:ce:7d:6f:92:87:e0:8d:88:d1:de:78:e6:95:79:ea:6f:34:
57:97:e6:ee:5b:86:23:a9:f7:2e:37:03:12:ae:98:f7:2c:94:
ad:7d:f0:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMSQFSLqzomtfj5IBaPTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZmI3YzMzMzZhY2Q0MTg5ZDNmYWM2MzlhMjgwZDliMDAy
MGYyOTgwHhcNMjUwOTA3MDgwMDQ2WhcNMjUwOTA4MDgwMDQ2WjAzMTEwLwYDVQQD
EyhlZjQ1Y2ZiYTA0OWY2ZDJiNTAzMjJlNDdjMjc3MGE3OTkxMzhlMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx5sEJjGO8PgyI/Df6G9k1I8rNom
ETw/5UePBcotIIMMg6ZLjsa7FjAUC69TLuwUpaKVSL0A44BijcA/57yVlmsKXPgh
w7fiQykz6tkpYCQ1lKKfDbmV97SrP84cINcvKEo2xY/QB6boNtUotSM+a89DjqrR
ufueOhNKjX/adszm1ENT3K3/0faSoxWxY0ERTdanZA/Rmp9sWOENQPa1/m6xoiqT
ZReQG+l4Rd6zXBM+6D2SJlfg2QZwfrPBeIRlGmkMZXxf1DKuV1RZvA8cfsX8014N
p3RVAmiKZHoRE7Ro/jzZ4q09wzNiD75mjvStVUCbqqGlGhVl2jhbFxQMzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9Fz7oEn20rUDIuR8J3CnmROOA6MB8GA1UdIwQY
MBaAFBT7fDM2rNQYnT+sY5ooDZsAIPKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0Njct
OTkzOWRmMWQwZDA5LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0NjctOTkzOWRmMWQwZDA5
LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOfH1OI9
AmnengUxxzqdp5c1XuI9bkkQNZikfiL2gA87ViaMM5v1X0uYOXcMOdwaf7VI5qNi
The/EEhcIKOYiTr/PDLijr6KH6TmM5IG2AQt1GSn/6S6d9bOrK0sAJzjF/pShEie
I5+yTP/qQp28wgM5UNlAMDQ5VNojn8zYLO8yJ7fvv6ZUmTL6/lTPXXhgpWrY+dKa
5ATknlPinajUTijC9FbpzCBZW4+G5Y/Esjz74JcwB8YeHyKTnTtbrmkymc5YPgNO
F3yWW7HQbLv4UXrZRuU8dSL9m859b5KH4I2I0d545pV56m80V5fm7luGI6n3LjcD
Eq6Y9yyUrX3wGg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:30 2025 by rpki-client