Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: VI2npP4v+ewz0ZCkooZ4OnBoKXs/tdsl+KiIiMGrzjE=
Subject key identifier: 92:55:CE:E9:8E:85:88:70:8C:B9:A9:62:43:00:4A:21:07:27:9B:91
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 01984A413B358A6AEA5592FE2AE3BACE1ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 13B9
Signing time: Sun 27 Jul 2025 05:00:45 +0000
Manifest this update: Sun 27 Jul 2025 05:00:45 +0000
Manifest next update: Mon 28 Jul 2025 05:00:45 +0000
Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
2: 8v_aiBgvpLDJT4bE3zxJWwrf4Ao.roa (hash: wcB7NvMB7REyv6Xd72Vh3AOoxDTtyyThVZ07XtgTGL0=)
3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: K/qvVvN+WYSsBJ/djKz0XMM9Gp8ICqH+/3U18JxO6/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:3b:35:8a:6a:ea:55:92:fe:2a:e3:ba:ce:1e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Jul 27 05:00:45 2025 GMT
Not After : Jul 28 05:00:45 2025 GMT
Subject: CN=9255cee98e8588708cb9a96243004a2107279b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:eb:c8:48:36:00:f5:bb:5b:e9:6a:f4:b9:
bc:c3:cc:eb:a1:fe:56:68:e3:79:a1:d3:79:eb:c2:
aa:7c:d4:ae:da:f6:06:73:e9:da:b1:a6:13:56:01:
22:31:c7:7e:96:f5:87:95:28:d8:f8:dc:c3:e0:43:
18:b8:f7:6f:1e:69:88:ad:a0:f4:2f:0c:64:1b:fa:
de:58:61:7d:4e:58:2b:6b:87:82:0f:81:3b:ee:bf:
f1:c8:c5:1b:5d:49:6e:3e:4e:c8:65:64:c6:60:62:
9e:e8:96:44:de:44:f4:90:99:e6:93:25:0a:30:31:
6b:2a:75:b3:2b:11:92:26:ba:71:a3:5a:c2:9b:c7:
f4:10:04:04:6b:6f:d1:f3:20:ac:8c:04:70:7c:27:
3c:0d:15:d7:87:30:05:91:a5:08:64:fd:84:6a:8a:
21:ac:48:56:cf:a6:0f:17:4e:97:8a:c0:49:73:06:
f9:ad:41:bb:32:d8:91:1b:a0:02:2e:8a:46:53:8f:
03:8e:d3:5c:1c:2f:50:b7:5e:28:00:f4:60:e3:71:
23:dc:a9:77:c7:30:7a:ac:bc:a1:13:b8:fc:a8:45:
ca:8e:e6:c0:4f:1c:c2:2a:fd:24:d2:47:cc:8b:d7:
0e:99:ae:df:ea:b7:40:ca:c0:fb:9b:96:26:67:bc:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:55:CE:E9:8E:85:88:70:8C:B9:A9:62:43:00:4A:21:07:27:9B:91
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c1:2f:e8:62:8f:0d:c0:40:f2:b7:fc:bb:12:89:cb:82:64:
01:df:26:2b:74:0f:9d:07:d0:f3:78:80:4c:6c:b6:1e:8c:2a:
f7:76:9d:d0:3c:d8:72:ce:4b:63:c0:70:98:da:04:39:ab:57:
83:e8:cf:e8:3e:8a:fb:c3:7c:7f:de:9d:83:f2:b5:36:af:6c:
f1:b5:60:c2:55:08:6b:90:09:2c:59:d7:1f:e3:f6:b6:1f:27:
7a:a8:c1:57:09:86:94:a8:8b:b9:19:b9:34:03:c4:a4:c3:1e:
26:04:e9:5e:c3:fc:32:cc:13:07:00:5e:15:82:9f:ac:a9:d7:
69:07:f3:45:5d:21:eb:27:b4:38:cd:21:f1:99:0c:8e:d5:8d:
75:e0:78:d1:df:3d:cf:6c:1f:e8:75:17:cc:cf:e5:42:8e:43:
2a:1b:12:5b:87:c2:c7:f6:fd:4b:8b:a1:36:f3:ef:42:93:27:
83:e7:8b:08:46:53:ff:ab:6b:ad:35:e9:de:fa:c1:d4:a2:17:
77:e6:07:11:5e:92:12:c2:a5:79:f3:0e:98:da:de:29:73:97:
7d:4d:be:d8:a2:1d:07:b2:d6:25:cc:94:e6:d1:f0:8b:15:f3:
82:65:15:ba:04:82:41:af:71:2d:ec:4e:f3:ce:98:b1:31:a2:
fa:0e:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:25 2025 by rpki-client