Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: faM2vOAVcS+xtkKbLtDIEDNzIEtn+JzavNfIdByXRCE=
Subject key identifier: DC:F3:E9:7D:DC:00:F9:C0:86:CC:6A:CD:7C:8C:C8:D3:26:55:25:87
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 01984475D8D5211672A4DB865BF7FC3A5C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 1609
Signing time: Sat 26 Jul 2025 02:00:30 +0000
Manifest this update: Sat 26 Jul 2025 02:00:30 +0000
Manifest next update: Sun 27 Jul 2025 02:00:30 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: Bj1OkKo0260rfxiNrbHwTApWC1dCHNK+OaSzKwV6uOU=)
2: oc8JdJXemfH1vBBwa9gjuC7ZzP8.roa (hash: uxtVzPlkNCLudyDBzCoWRWmDXs6tfGV7X2Z5QJKK/Eg=)
3: r4X2HvAwh5ygol1cL2nGNDVz3U4.roa (hash: 7aCXdpb3SzbFP3HJ9KQNb5y78LcqzI5vEIV6FBttc2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:d8:d5:21:16:72:a4:db:86:5b:f7:fc:3a:5c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jul 26 02:00:30 2025 GMT
Not After : Jul 27 02:00:30 2025 GMT
Subject: CN=dcf3e97ddc00f9c086cc6acd7c8cc8d326552587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:21:df:70:91:07:59:f8:9a:2e:c8:84:ae:
f0:aa:da:8f:b3:05:9a:e2:dc:f5:e5:00:03:50:0e:
21:41:dd:35:e5:7a:6c:21:c0:3a:fb:65:9d:51:b6:
f6:a5:f3:e4:94:9d:c6:71:b1:3e:b4:06:ba:6c:39:
61:c5:d2:ea:ba:77:9b:2b:7e:5d:bc:7e:bd:c4:e5:
f2:0c:9b:87:3c:4b:a7:9c:e2:69:1a:ad:d1:5b:3c:
36:21:17:f1:7e:7e:38:32:48:73:02:50:e6:72:9b:
73:6b:40:96:28:ef:76:58:00:a0:d9:4b:28:e5:e9:
7d:27:d8:16:0c:56:c0:5a:e1:76:cd:44:04:93:44:
86:42:c1:92:0d:b6:c5:15:40:41:c5:73:19:40:34:
15:29:01:08:bd:72:04:76:dc:d6:87:32:68:40:5c:
18:f3:6c:4c:88:4d:10:11:67:a7:e5:e3:cc:93:c2:
d7:48:6c:b7:6a:f1:20:69:d8:83:39:71:81:9e:d8:
00:73:c5:c0:66:21:97:fc:fe:dd:61:75:ed:8f:6c:
8b:00:6a:45:f1:ba:f4:01:1a:a2:63:f2:b1:48:38:
94:2d:ea:fa:e4:07:fc:1f:f8:d8:8a:54:a6:c2:c2:
77:50:76:7e:d7:cc:01:5d:f3:17:04:cb:a4:f4:b7:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:E9:7D:DC:00:F9:C0:86:CC:6A:CD:7C:8C:C8:D3:26:55:25:87
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4f:d5:15:ea:fd:ac:4e:cb:cf:aa:2c:07:b0:7c:1b:d4:2f:
6f:fb:79:3f:dd:c2:b3:df:2c:d6:fb:2d:16:98:6e:a6:52:04:
50:dd:aa:49:ee:5e:b8:6e:4c:5c:ed:77:e9:11:b8:8e:ef:d2:
1b:72:56:a1:2c:7c:d8:e6:ee:b5:10:ce:61:51:a4:55:1b:a4:
d3:08:44:8a:40:82:89:44:59:b6:21:de:ef:35:75:9a:80:6e:
8c:be:8b:16:a4:56:06:f1:18:4a:42:7f:36:4b:a6:1a:b7:95:
95:a8:a6:ed:c8:23:d0:98:35:a7:fe:51:0a:1b:ad:c6:22:b0:
55:ad:e2:44:f4:48:5e:51:d1:8b:7f:01:d9:d7:bd:09:f8:67:
56:71:06:eb:37:36:5c:53:c2:93:ca:29:9b:6b:97:f1:06:68:
c7:d8:14:5a:4d:80:51:f3:de:64:1f:55:d3:9f:a2:1f:cf:57:
44:f7:48:38:94:23:21:0f:3c:c0:26:e7:6e:6a:33:1e:db:86:
fe:2d:46:16:25:c6:c0:01:cb:b3:21:54:b2:d0:e3:b9:7d:a6:
8f:3a:11:6c:30:21:ab:79:4a:e6:eb:11:bb:e7:78:cb:b5:ae:
31:34:52:d6:31:47:d5:d4:a1:11:08:c3:34:75:4f:f2:32:f1:
6b:50:86:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:04:15 2025 by rpki-client