Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: 2NXMEWuvRh8Xkphu9ceoxUU83uMBLi7ioM1CS7wiii0=
Subject key identifier: 3A:61:67:FD:54:30:55:C1:71:F4:A8:5A:42:7B:C2:F5:13:CD:02:71
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 01983ACDFA29374742A02E544C05BFCA115F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 15A7
Signing time: Thu 24 Jul 2025 05:00:33 +0000
Manifest this update: Thu 24 Jul 2025 05:00:33 +0000
Manifest next update: Fri 25 Jul 2025 05:00:33 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: eNQyOQN4ioru80foUKBlzaKpQKclGMUndETKvcwG7Ag=)
2: XWiker2v7GIlhkuZZtR48lVm108.roa (hash: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=)
3: zJ5MYEMzWfucEDGxLfmRzsaSeEg.roa (hash: 13et8HkfUmrO0+ptVe41OzMBwG62Ru5G13R9afNJkP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:cd:fa:29:37:47:42:a0:2e:54:4c:05:bf:ca:11:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Jul 24 05:00:33 2025 GMT
Not After : Jul 25 05:00:33 2025 GMT
Subject: CN=3a6167fd543055c171f4a85a427bc2f513cd0271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:b0:fd:00:e8:4e:56:09:a8:19:e8:61:89:
ac:10:5e:d9:e0:e6:a6:49:9f:d6:d5:c3:9d:02:cb:
6e:63:38:a4:8d:db:26:ea:e1:1d:8f:0f:08:82:75:
ea:fe:e1:d1:d1:60:61:b7:ee:7b:e5:ba:57:94:15:
82:52:68:b7:59:6b:65:33:34:65:a8:f4:ab:a2:06:
b2:36:fd:dc:39:ab:15:c9:60:c5:d4:e4:d0:68:c9:
ec:cb:ec:c6:d0:8b:4b:0b:e7:b5:a3:ec:3f:39:09:
55:68:9a:55:7c:f1:97:a9:da:2a:ed:8f:52:91:93:
5e:e6:2c:cc:f8:3d:88:8a:63:5c:1b:69:88:96:6b:
d6:07:ca:a5:ff:9c:77:ef:e4:ba:54:61:60:9d:e3:
3b:9d:b9:35:a6:3d:ea:c9:e8:4c:03:d0:5a:07:58:
33:b9:35:20:bd:10:32:51:a7:ea:98:db:4a:47:bf:
62:36:e3:9e:05:b0:08:04:d9:6c:d2:0f:04:54:d6:
ae:98:7a:b6:cf:69:1a:f9:6a:69:8d:a7:b7:1b:20:
69:14:e3:54:af:fd:17:89:f6:c4:c6:c4:27:99:d2:
a1:ee:ba:57:4f:72:45:64:a6:9e:30:ae:86:04:5d:
ee:68:25:5c:99:7a:a5:1e:a9:05:96:c8:40:c6:57:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:61:67:FD:54:30:55:C1:71:F4:A8:5A:42:7B:C2:F5:13:CD:02:71
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1d:79:b1:4c:34:a0:cb:5f:72:fe:a8:81:d3:b2:05:24:91:
37:1a:97:06:95:f0:2a:02:04:17:49:59:11:e0:d6:df:f9:7e:
bf:81:a2:86:84:75:58:55:0d:0c:de:fa:ae:66:c1:a5:d1:d6:
de:31:90:00:81:d5:37:59:79:6b:e8:87:1b:2c:80:0f:29:92:
6c:54:e4:af:61:92:ce:84:d0:d3:47:9d:61:40:3c:3b:da:41:
66:e3:44:ce:25:48:af:7b:42:30:23:f9:0f:89:fe:5c:8e:76:
9f:d4:f5:4e:d0:9f:65:8d:77:03:e1:86:fe:fd:d3:ba:6e:dc:
9a:9a:d1:39:ab:0b:de:84:4c:6a:73:f2:ba:0f:6a:37:4f:c4:
da:ff:c4:4c:6d:84:05:dd:d8:e9:7a:5c:8e:2d:d4:39:8e:3d:
36:38:2e:4a:f6:5b:bb:ac:5e:fb:14:cc:a2:76:ea:fc:fa:f8:
ff:47:e9:24:34:d4:80:1e:8b:24:07:ec:84:bd:cd:2e:91:1c:
b4:34:44:dc:c9:b1:79:99:6f:06:5d:71:a2:20:d2:53:ab:5a:
25:c1:b6:07:f2:ba:8b:15:d2:3d:b7:25:57:7e:d0:9e:52:87:
a0:c5:f2:d3:10:78:e2:45:cc:83:7b:f0:4b:4a:3f:4f:ce:5c:
93:e4:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:28:57 2025 by rpki-client