Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: ReJH7I9eREI15E3uVi5j/yI6yWSK6ZjhCB1HDI+h1es=
Subject key identifier: 47:47:09:1B:73:90:46:20:81:86:FB:17:2E:67:9D:8E:67:BB:08:7B
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 01984AAEFB222C27234E54C0C73F421ABB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:38 +0000
Manifest this update: Sun 27 Jul 2025 07:00:38 +0000
Manifest next update: Mon 28 Jul 2025 07:00:38 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: npClmz7Czo6eeH05x/pjy6ypy5oPIn70BmjqRv52hdk=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:fb:22:2c:27:23:4e:54:c0:c7:3f:42:1a:bb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Jul 27 07:00:38 2025 GMT
Not After : Jul 28 07:00:38 2025 GMT
Subject: CN=4747091b739046208186fb172e679d8e67bb087b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:3b:98:9f:f1:1f:09:02:89:e0:70:02:dc:
dc:ad:9c:b4:86:07:56:9b:db:b5:29:fa:db:f5:b3:
75:7b:0d:7a:b7:79:5f:ce:09:78:8e:ef:0c:ad:de:
51:59:f2:a4:fd:41:2f:54:3a:f1:75:aa:8a:9b:d6:
aa:2a:34:ca:cd:a0:f5:8c:38:89:20:13:09:fc:0e:
ea:3b:60:4c:bc:75:cc:40:2b:3d:99:dc:e4:5f:70:
b8:b4:f2:03:f0:57:27:09:f9:2b:4a:2e:79:94:11:
04:f7:a3:36:42:f1:cc:bb:5d:34:20:49:05:02:e2:
85:9a:5b:89:45:c2:59:76:7c:a4:c8:8e:72:d4:2d:
06:57:3d:bb:00:4f:75:48:06:ef:48:0a:1e:2b:73:
73:9c:0d:69:ed:ed:c3:23:84:83:0f:c1:2c:92:b8:
51:c3:61:bd:42:63:3f:bf:f9:2b:3a:8e:11:cb:b6:
80:c0:f3:ec:61:cb:42:00:32:9c:99:e6:7a:c3:95:
be:5f:09:98:b7:8b:91:ad:c1:36:46:51:8e:ca:e5:
43:d0:24:ee:d7:c2:a9:e5:ad:cc:00:93:ed:59:24:
27:2e:f8:d9:e0:10:3c:43:dd:14:c0:af:5d:5d:2a:
c8:a4:5f:14:26:88:c4:47:67:c6:51:6f:3d:9b:44:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:47:09:1B:73:90:46:20:81:86:FB:17:2E:67:9D:8E:67:BB:08:7B
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d6:f4:75:d2:c2:8d:92:b1:98:a6:60:04:a3:3d:9b:f6:9f:
d2:30:e3:71:c3:20:eb:06:c0:70:4c:ac:58:80:0d:39:30:38:
42:45:a7:ed:d1:44:db:e8:62:d9:c0:ad:e8:c3:64:83:d5:94:
32:2a:9c:cf:0a:78:b1:58:2d:ff:32:08:2a:98:2d:13:fa:9a:
3c:aa:cc:81:22:9f:19:49:6c:02:81:a2:a5:f2:68:b3:26:28:
e0:1c:d0:f8:be:3c:f5:94:ec:df:40:c2:ee:50:5f:5a:49:d3:
a1:08:ab:6c:db:6c:40:b4:3e:6e:95:36:dc:68:7c:de:e3:ce:
5f:79:50:ff:6e:30:81:39:7d:72:0a:c4:98:b9:2a:19:40:e8:
ef:ed:c4:ff:3d:96:01:8d:82:57:07:b8:90:69:12:60:01:50:
ed:b6:7e:61:21:d9:b2:34:58:28:12:5c:f5:45:11:cd:6b:65:
11:96:5a:c1:e5:79:7c:29:95:ba:d9:3a:4c:53:1d:96:9f:f2:
6f:5d:ba:2a:bb:45:ac:62:60:c6:d5:8c:8c:ff:bd:77:10:2a:
9a:15:f7:f3:11:36:cb:9f:d8:b6:32:06:45:08:f0:3d:a6:ac:
b1:09:2f:f5:50:2c:b5:fc:ad:dd:2b:9c:0f:90:27:a8:58:a0:
51:f1:c0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:25 2025 by rpki-client