Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: 8SrWe87DJKZgKFCp9Z89nFaxgoWwMOym4UnfqRKygFY=
Subject key identifier: 9E:0D:07:FD:6D:BA:F4:1D:07:3B:50:27:57:E8:9F:B3:3E:CC:9A:A8
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 0199221F016CC1703BC494DD1C63FF243C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:01:21 +0000
Manifest this update: Sun 07 Sep 2025 03:01:21 +0000
Manifest next update: Mon 08 Sep 2025 03:01:21 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: dDYYuD4pDk32eLYVkaWXE4m8cBYoHKUogL73Al1xU7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:01:6c:c1:70:3b:c4:94:dd:1c:63:ff:24:3c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Sep 7 03:01:21 2025 GMT
Not After : Sep 8 03:01:21 2025 GMT
Subject: CN=9e0d07fd6dbaf41d073b502757e89fb33ecc9aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:16:42:3b:87:bf:8f:31:df:e9:25:a8:e7:
2b:99:eb:93:fb:8f:7c:d5:2b:ed:f5:84:c9:57:fc:
ee:21:20:05:2b:29:9f:40:0f:4a:ad:2d:a5:36:c4:
f9:56:44:86:46:55:cd:e9:86:aa:48:0e:fb:17:b5:
e1:6f:cb:d3:da:9f:3a:0f:6c:95:ba:16:63:66:ca:
b2:aa:6b:f6:30:27:24:8e:22:e0:5e:1d:45:fa:fd:
de:3c:b4:34:85:75:cd:19:67:32:af:eb:db:dc:36:
d8:3a:e3:1a:5c:06:3f:e1:a5:ce:1d:d1:02:aa:16:
e7:db:ee:f3:23:dd:f5:61:0e:ed:7e:ce:6a:f6:81:
5a:8c:bf:b8:51:83:49:88:c6:15:40:50:99:9e:d0:
82:e3:52:bd:3e:50:69:aa:e0:69:ed:aa:37:77:71:
21:c5:af:23:1c:92:c9:1b:29:ec:8d:8c:24:d6:ad:
bb:9d:a0:34:79:e2:96:3e:40:11:95:78:0b:b0:cb:
0a:6e:bc:c8:c8:c8:dd:12:f6:c4:58:9c:f9:e4:c1:
1b:5b:9d:eb:42:d8:91:2a:ba:18:39:6e:8c:76:29:
f7:e5:37:98:8c:00:0e:00:c6:d8:04:27:23:5c:fc:
ee:ab:68:93:c8:bf:ce:54:27:ca:5a:8a:35:c0:15:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0D:07:FD:6D:BA:F4:1D:07:3B:50:27:57:E8:9F:B3:3E:CC:9A:A8
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:f2:ec:21:ab:3f:b8:8e:96:96:88:f0:0c:35:bf:9a:ce:
65:af:c8:1a:0f:e9:ad:fb:f9:81:8e:86:14:ae:9a:45:d7:30:
54:53:04:2d:7e:b6:45:dc:c6:1e:3c:bf:26:d4:97:82:2e:a0:
2f:b7:5d:9b:53:c1:fe:c2:44:4b:3a:5e:a2:00:ac:1d:3e:0c:
b5:c7:56:24:2e:0b:51:b8:97:8b:f7:52:4d:55:fc:ac:51:05:
0e:bc:11:f7:c8:cd:41:fb:9a:38:b5:6a:24:b6:80:5e:32:1b:
40:bb:b2:2a:ab:0b:01:ea:b0:34:ea:7b:0a:e6:85:69:71:27:
19:bd:b9:fb:48:63:04:00:29:f5:f4:06:ff:06:7d:ce:09:bb:
9c:16:6b:33:7e:c8:5d:ca:cc:b4:2e:15:5c:2e:60:ba:18:1e:
88:36:51:19:85:76:5c:d3:f6:eb:5f:70:ac:df:c7:bf:8c:96:
8b:2a:34:59:03:4a:ac:c2:ae:7f:0e:b5:e6:8f:c3:01:93:0d:
ef:05:81:86:9d:8a:3a:25:eb:05:da:6f:73:32:d1:9f:b5:a3:
f2:03:a1:a9:b1:87:c9:2c:22:0f:d2:2f:ea:91:23:97:4d:d9:
a3:66:57:90:e3:21:4e:25:e1:6b:61:f1:da:40:60:be:4a:98:
a3:83:d0:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHwFswXA7xJTdHGP/JDwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZjk3NzgyZDZmMjAyYTcwMTgzNjcxYWE2MzBjNzNhYmEz
MzMwN2UwHhcNMjUwOTA3MDMwMTIxWhcNMjUwOTA4MDMwMTIxWjAzMTEwLwYDVQQD
Eyg5ZTBkMDdmZDZkYmFmNDFkMDczYjUwMjc1N2U4OWZiMzNlY2M5YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h4WQjuHv48x3+klqOcrmeuT+498
1Svt9YTJV/zuISAFKymfQA9KrS2lNsT5VkSGRlXN6YaqSA77F7Xhb8vT2p86D2yV
uhZjZsqyqmv2MCckjiLgXh1F+v3ePLQ0hXXNGWcyr+vb3DbYOuMaXAY/4aXOHdEC
qhbn2+7zI931YQ7tfs5q9oFajL+4UYNJiMYVQFCZntCC41K9PlBpquBp7ao3d3Eh
xa8jHJLJGynsjYwk1q27naA0eeKWPkARlXgLsMsKbrzIyMjdEvbEWJz55MEbW53r
QtiRKroYOW6Mdin35TeYjAAOAMbYBCcjXPzuq2iTyL/OVCfKWoo1wBXSnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4NB/1tuvQdBztQJ1fon7M+zJqoMB8GA1UdIwQY
MBaAFHz5d4LW8gKnAYNnGqYwxzq6MzB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmIt
MzFhMTdiM2Q5NjRiLzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmItMzFhMTdiM2Q5NjRi
LzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB53y7CGr
P7iOlpaI8Aw1v5rOZa/IGg/prfv5gY6GFK6aRdcwVFMELX62RdzGHjy/JtSXgi6g
L7ddm1PB/sJESzpeogCsHT4MtcdWJC4LUbiXi/dSTVX8rFEFDrwR98jNQfuaOLVq
JLaAXjIbQLuyKqsLAeqwNOp7CuaFaXEnGb25+0hjBAAp9fQG/wZ9zgm7nBZrM37I
XcrMtC4VXC5guhgeiDZRGYV2XNP2619wrN/Hv4yWiyo0WQNKrMKufw615o/DAZMN
7wWBhp2KOiXrBdpvczLRn7Wj8gOhqbGHySwiD9Iv6pEjl03Zo2ZXkOMhTiXha2Hx
2kBgvkqYo4PQBQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:11 2025 by rpki-client