
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: m3aLT7zGB78Zg6AA0smZorha7uKGZca92Nexq9Q97Rw=
Subject key identifier: 58:3A:1C:C3:D9:82:79:F1:72:82:80:E7:6E:E8:6A:2C:40:B2:D4:56
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 01984889BF42815AE747B235E4615B751CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 0191
Signing time: Sat 26 Jul 2025 21:00:43 +0000
Manifest this update: Sat 26 Jul 2025 21:00:43 +0000
Manifest next update: Sun 27 Jul 2025 21:00:43 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: 5GsC45DL3QhHJqWvkp6m4E7k5PMfBGL9tS2l4uaOLp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:bf:42:81:5a:e7:47:b2:35:e4:61:5b:75:1c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Jul 26 21:00:43 2025 GMT
Not After : Jul 27 21:00:43 2025 GMT
Subject: CN=583a1cc3d98279f1728280e76ee86a2c40b2d456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:41:27:95:9e:4d:60:73:64:4c:94:0d:fd:
64:07:96:54:7c:d7:20:00:2a:5c:20:8a:3c:f9:ae:
c1:22:14:91:dd:6d:c5:6e:8b:ef:a0:1a:25:01:41:
70:d4:a3:8e:48:b3:17:30:1d:61:1c:f1:20:ae:33:
d9:4f:71:cf:3b:af:08:e3:b8:97:5c:25:a1:b7:5a:
da:19:e2:00:98:54:0f:9d:20:2d:19:8a:07:f8:e4:
39:fd:8e:53:15:f5:03:b7:ad:7c:18:32:c1:18:e3:
be:aa:1f:07:7c:dd:45:01:89:5e:68:0f:be:fc:94:
b6:35:f5:c0:d2:1f:39:f4:42:7b:e7:a4:33:69:0a:
b0:28:08:8c:45:10:3f:a7:4f:f8:5b:7c:bd:e3:fe:
8a:b0:5d:61:9c:61:3f:58:fa:83:61:c6:85:72:d8:
fe:bb:04:52:f8:04:2e:02:63:24:9e:55:00:db:f0:
de:e3:75:c8:32:f6:5d:e2:6c:a3:62:24:cb:78:61:
24:53:7f:4e:50:ab:63:7c:a2:0b:24:9b:e7:73:dd:
f7:c3:91:76:4a:99:6e:26:ca:e8:a4:98:d0:e8:30:
a3:3b:d4:ca:06:2d:3c:51:d4:e3:23:1d:97:e1:d7:
38:88:82:20:b4:e0:57:46:08:4e:07:78:bf:c5:70:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3A:1C:C3:D9:82:79:F1:72:82:80:E7:6E:E8:6A:2C:40:B2:D4:56
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:13:1c:24:24:7a:ec:1f:7f:08:13:28:0d:73:b7:10:8a:ae:
92:dd:82:b5:6b:3a:4f:6a:07:c6:f5:ca:9a:ad:b7:55:ca:50:
b6:57:21:d4:38:eb:c3:5d:46:01:29:42:df:22:f7:69:b4:2f:
d1:4d:1c:13:5d:27:9a:e3:89:5b:dd:f1:f0:5d:d3:dd:81:64:
f2:d2:cd:0b:c4:f8:e0:d2:69:ec:39:3f:50:78:a6:b0:ba:f6:
1a:b7:92:7b:c3:4e:e3:bc:91:49:ee:b9:38:90:47:7c:18:b4:
b6:06:83:8b:bc:a4:58:71:08:50:6a:88:27:07:68:4e:3b:fd:
6c:f9:b0:b0:fc:13:b3:ec:8b:13:5c:24:51:44:15:d3:a2:f6:
5c:63:96:1e:9b:54:a8:78:fe:8b:60:68:ca:fc:1d:b2:aa:d3:
f0:0c:a1:99:01:9c:fe:4c:44:b5:2a:db:6a:75:68:33:3f:e2:
c4:14:a1:4c:d8:ad:76:57:0b:9d:71:a1:e1:ec:1a:71:d9:6f:
68:93:1a:0d:43:df:8c:28:d9:1e:e3:5a:99:0c:2b:79:a1:58:
0b:3c:72:f7:a6:78:84:ef:9e:bf:c3:1f:62:57:0c:bd:3b:79:
9d:72:df:4b:6a:6b:e1:a9:61:fe:6e:1d:ad:4e:5c:cd:b6:46:
79:8c:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:43:11 2025 by rpki-client