Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: +S4TnMVhXq7m6r9MOp3nk3E55qWv6rplfC8FOZrlW3M=
Subject key identifier: CC:51:3D:BD:D5:3A:FE:6C:8A:99:A4:7D:C6:C8:11:E8:4D:68:AE:91
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 01993236C6EF79AF434B43D76201CB800CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1686
Signing time: Wed 10 Sep 2025 06:01:14 +0000
Manifest this update: Wed 10 Sep 2025 06:01:14 +0000
Manifest next update: Thu 11 Sep 2025 06:01:14 +0000
Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: gg50CRfJh8aTWC5gZ0S4xPUunknpoBIUswXWTFRY7Q8=)
2: UUcKOryc_ykhvD7v1VUPE00sScs.roa (hash: dAexA2neb3HcfI1bNYdykFIadotQ4NdMRRVIE6QTBe4=)
3: q7sVZrLDAVZQekWMRkAvaSDSl9g.roa (hash: RRTQ5jExs41DvyGCsYtTzal7l6KRuDTnah7ylDN5VEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:c6:ef:79:af:43:4b:43:d7:62:01:cb:80:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Sep 10 06:01:14 2025 GMT
Not After : Sep 11 06:01:14 2025 GMT
Subject: CN=cc513dbdd53afe6c8a99a47dc6c811e84d68ae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:09:8c:a7:8f:93:d7:3e:52:b8:4f:dd:fb:
85:b7:2e:15:68:f1:ea:b2:93:d7:0e:b3:6e:3b:23:
a3:7a:e0:d7:34:cd:9e:f3:be:73:16:8e:87:05:44:
24:c8:6e:f0:41:29:13:13:b2:e7:90:26:83:5d:a4:
b3:8d:38:9f:14:5d:d9:a4:20:f2:d1:c4:e9:5f:2d:
3e:cd:85:50:bb:f4:56:11:29:d1:df:e4:31:92:8a:
a1:8c:f7:f3:c4:11:59:29:82:ec:81:24:de:0b:02:
1f:40:d1:7f:9c:01:8c:03:3c:08:23:07:d4:46:49:
04:d6:66:72:0e:3f:a5:54:a1:05:94:01:c4:45:f0:
cf:8f:d4:86:46:2d:09:71:43:40:4a:0d:08:6c:46:
52:97:4a:e6:19:f2:bc:c5:49:f1:4c:dd:2e:c9:9f:
ca:d8:f5:ff:81:0a:82:27:f1:48:d3:98:0a:90:ed:
d9:b4:e5:df:2a:a9:47:ec:0f:63:d1:ba:8e:e2:1c:
7b:8f:a0:8b:64:fa:af:2e:4c:ed:3a:b9:52:77:59:
3a:40:93:b1:49:7f:b5:cd:f6:6f:75:a4:b7:99:3e:
82:c2:07:7d:de:d3:f2:9e:5c:e3:cb:20:33:b8:15:
8b:59:10:bc:15:a9:a6:93:6b:ac:e2:78:4e:71:7e:
f7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:51:3D:BD:D5:3A:FE:6C:8A:99:A4:7D:C6:C8:11:E8:4D:68:AE:91
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cc:0d:75:6f:e4:b3:21:2e:36:5c:78:28:b1:f3:d7:aa:20:
75:58:47:b6:09:b5:dd:9a:81:ea:be:e0:a9:9c:4b:09:74:31:
a9:a3:e4:55:6d:1b:dc:ff:fc:92:ff:f7:2b:e3:91:b3:d0:ac:
8e:44:ac:3f:f9:13:c1:ed:94:97:9d:78:3b:20:fe:bb:91:52:
1c:5d:9d:b5:74:f1:40:a2:bf:a3:46:c3:5b:97:84:55:29:ad:
a8:b4:93:9f:06:81:b9:e1:6e:00:f8:ad:1f:27:1e:c3:a9:41:
b4:0a:42:05:c2:f9:fb:d1:f9:2a:fa:8c:c4:d8:8f:50:fd:16:
49:38:ef:70:17:ab:67:6b:63:b9:b9:be:8a:f7:c0:12:b2:d7:
0a:4b:a4:61:1d:75:e5:c5:da:03:40:f6:66:83:28:e1:02:25:
8d:66:76:8a:e8:7f:03:cb:12:12:e5:c1:df:a0:4f:a5:9d:14:
6c:19:52:3a:ad:cd:98:61:85:51:0f:6a:62:3e:e1:6b:c5:31:
60:3d:58:dc:8b:c4:4d:b3:13:48:b5:94:53:6b:12:f3:a4:fb:
61:31:d2:e2:dc:8e:5a:9b:c9:46:87:bd:c7:15:78:8b:a6:68:
6b:f7:78:86:3b:12:7d:50:e6:5e:b3:a4:2c:b2:29:a1:c2:28:
79:7d:57:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyNsbvea9DS0PXYgHLgAzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODYwMGRmYWM5ZDNkMWE3NWU2NjMwZDY5NzEwMmYyZjIx
MzJjNDgwHhcNMjUwOTEwMDYwMTE0WhcNMjUwOTExMDYwMTE0WjAzMTEwLwYDVQQD
EyhjYzUxM2RiZGQ1M2FmZTZjOGE5OWE0N2RjNmM4MTFlODRkNjhhZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QcJjKePk9c+UrhP3fuFty4VaPHq
spPXDrNuOyOjeuDXNM2e875zFo6HBUQkyG7wQSkTE7LnkCaDXaSzjTifFF3ZpCDy
0cTpXy0+zYVQu/RWESnR3+QxkoqhjPfzxBFZKYLsgSTeCwIfQNF/nAGMAzwIIwfU
RkkE1mZyDj+lVKEFlAHERfDPj9SGRi0JcUNASg0IbEZSl0rmGfK8xUnxTN0uyZ/K
2PX/gQqCJ/FI05gKkO3ZtOXfKqlH7A9j0bqO4hx7j6CLZPqvLkztOrlSd1k6QJOx
SX+1zfZvdaS3mT6Cwgd93tPynlzjyyAzuBWLWRC8Fammk2us4nhOcX73FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxRPb3VOv5sipmkfcbIEehNaK6RMB8GA1UdIwQY
MBaAFBaGAN+snT0adeZjDWlxAvLyEyxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEt
MThkYmU2NTA0YmI0LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEtMThkYmU2NTA0YmI0
LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8wNdW/k
syEuNlx4KLHz16ogdVhHtgm13ZqB6r7gqZxLCXQxqaPkVW0b3P/8kv/3K+ORs9Cs
jkSsP/kTwe2Ul514OyD+u5FSHF2dtXTxQKK/o0bDW5eEVSmtqLSTnwaBueFuAPit
Hycew6lBtApCBcL5+9H5KvqMxNiPUP0WSTjvcBerZ2tjubm+ivfAErLXCkukYR11
5cXaA0D2ZoMo4QIljWZ2iuh/A8sSEuXB36BPpZ0UbBlSOq3NmGGFUQ9qYj7ha8Ux
YD1Y3IvETbMTSLWUU2sS86T7YTHS4tyOWpvJRoe9xxV4i6Zoa/d4hjsSfVDmXrOk
LLIpocIoeX1XFg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:30:25 2025 by rpki-client