Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: s/Sy4dKjEyo86ImN5D1PT2NKPYvgrYY5+9FU7usS0cE=
Subject key identifier: 0D:26:D5:36:9B:E9:6E:74:56:4A:8C:6D:71:0D:80:96:FD:8A:59:D7
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 01984C9CFAEA7553072BA8F0338B5DD0C1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0BB1
Signing time: Sun 27 Jul 2025 16:00:12 +0000
Manifest this update: Sun 27 Jul 2025 16:00:12 +0000
Manifest next update: Mon 28 Jul 2025 16:00:12 +0000
Files and hashes: 1: 2HsIGyT4rIJuu6UrqRcR2fc9b3I.roa (hash: hUQqgn+fKEmkw/9ErWQL/8TgPXVZMyjAW7UPwj4OttA=)
2: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: DyAYWb5zmMKvzKagdBL4RKGzP5gp7mbuv8j1BnSywyA=)
3: dz5PrO-ksQipuN7JJpM04omvh6c.roa (hash: 81uIRfVVY3c1peJ8bScAsHXQKW9arfKTdSaUvSixwrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9c:fa:ea:75:53:07:2b:a8:f0:33:8b:5d:d0:c1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jul 27 16:00:12 2025 GMT
Not After : Jul 28 16:00:12 2025 GMT
Subject: CN=0d26d5369be96e74564a8c6d710d8096fd8a59d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:8c:d8:7c:77:b7:cb:51:17:fa:df:a1:a7:
f8:66:35:c5:7c:95:fc:03:29:38:48:f3:62:02:6a:
c7:47:4a:3b:ca:a8:14:88:61:86:59:58:ec:c1:88:
85:87:92:45:30:63:2b:d6:e5:da:ae:4d:e3:4f:dd:
3e:94:da:af:3c:8f:f7:d6:be:e6:3d:d9:29:7c:42:
3c:75:8f:db:70:86:b6:6b:f5:9c:82:5a:6d:e8:72:
ff:94:24:6a:4c:8c:ac:52:47:c7:cc:28:57:b2:d4:
3b:29:0b:5c:28:fe:d7:d5:27:06:01:12:c3:f6:54:
ce:d0:ff:cf:32:b8:f2:87:bc:5e:fa:c3:55:95:39:
7b:a5:89:21:73:bd:af:e9:c2:fe:20:24:8a:4c:f4:
69:12:e6:21:39:1c:1b:3e:2f:fc:14:eb:bf:81:fd:
f4:b9:7c:8c:2b:bf:34:3f:53:5a:e4:c8:cc:4b:bc:
17:32:49:b9:3a:7b:ab:5d:73:ce:21:9a:14:de:27:
a6:b1:7c:69:40:5d:44:ce:68:90:25:20:42:71:32:
8f:33:61:a8:28:e3:f8:2e:2a:22:14:05:74:c5:0e:
20:47:34:b4:45:7d:2b:52:fb:d4:6d:aa:c3:22:04:
a0:b8:dd:23:19:17:6d:f4:0a:a2:85:5f:56:be:fe:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:D5:36:9B:E9:6E:74:56:4A:8C:6D:71:0D:80:96:FD:8A:59:D7
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:91:44:b2:f5:6e:cb:30:7e:1e:0a:8a:95:bb:3a:53:d0:f1:
2e:ba:bd:51:a3:e5:5e:d3:ce:9f:2f:6b:eb:ac:36:57:ac:3f:
56:c8:58:0e:9b:94:99:0b:f9:4a:f3:b4:4b:1a:a9:77:c0:01:
0c:03:6b:21:6b:ea:79:1d:33:20:22:87:0d:d7:69:2c:98:21:
28:d7:b1:9a:c2:e8:d7:a1:5f:fc:f5:bc:39:0a:a0:8a:0d:93:
1e:94:0c:8a:12:a5:ae:2b:7e:c3:3b:f9:84:bd:a8:23:fd:ca:
61:f8:9b:ef:39:3a:8a:47:d0:e9:cf:08:fe:d4:07:4a:a5:8f:
ec:cc:4e:aa:d6:2e:96:e3:55:4d:09:a5:57:8e:49:79:1c:ac:
04:e5:38:98:7a:19:ca:e8:a1:ca:a5:85:c6:aa:12:67:00:12:
96:a0:95:e3:31:2d:0b:85:26:df:15:5a:5b:e0:1d:b4:56:90:
12:5c:b0:c3:52:df:bb:55:aa:00:30:b7:8b:93:e7:66:d9:4a:
e8:4f:f1:f6:15:53:c4:56:ad:74:ae:0a:98:fb:cb:90:9a:61:
16:a0:36:83:b1:13:aa:6d:f9:fc:b2:b7:63:71:28:a1:64:2c:
42:11:b6:60:24:8c:4a:65:ee:dc:f8:ea:25:fb:ee:a4:fe:90:
cc:c0:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:26:17 2025 by rpki-client