Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
File: FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json)
Hash identifier: Jh9JXQv8Xg0chJMf+jTe48dz6HWvR+C5HMLXR7S7PuI=
Subject key identifier: 7E:3B:5E:C6:7C:B0:45:19:48:95:04:98:AE:3D:B6:5D:C0:26:15:C8
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 0198602467B704A9CDE7A8B9DD4328925CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
Manifest number: 160B
Signing time: Thu 31 Jul 2025 11:00:55 +0000
Manifest this update: Thu 31 Jul 2025 11:00:55 +0000
Manifest next update: Fri 01 Aug 2025 11:00:55 +0000
Files and hashes: 1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: Du7DapyLVfBLeHfVIGZ4w5s5eLt8QQ+XX6zcW5hR+5s=)
2: c3go-15xGcBaQkyMFCkLYeR3zYQ.roa (hash: 4H2iOu8gLLffNi536xCsuCivAwnItfPi2vTZ/W207ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:24:67:b7:04:a9:cd:e7:a8:b9:dd:43:28:92:5c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Jul 31 11:00:55 2025 GMT
Not After : Aug 1 11:00:55 2025 GMT
Subject: CN=7e3b5ec67cb0451948950498ae3db65dc02615c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:09:56:2a:85:9b:c3:75:4d:8e:7c:66:c6:
58:fc:2f:f3:cf:84:52:96:fa:9d:64:f6:24:07:5b:
f7:c2:08:3b:c3:e4:66:f3:e4:23:80:76:cc:8a:3b:
a4:d6:08:84:e7:0c:97:7f:15:fe:65:c7:fc:b5:ee:
2f:ae:c6:bf:6c:b4:d4:74:cd:b3:c4:c2:15:f8:81:
8e:a2:c7:c1:2c:ef:54:d3:66:b2:1b:4d:eb:49:66:
05:62:23:40:1f:19:3d:09:41:fc:98:ec:42:c0:d1:
21:31:26:6b:80:91:ad:2c:19:b1:fc:ce:1d:0b:b9:
f0:11:33:08:66:4f:c5:1c:75:35:67:21:f4:e1:35:
a6:bf:23:4c:50:a5:45:2c:56:5f:41:d0:bf:07:f9:
f4:67:96:8c:51:19:85:cb:96:ec:c7:af:52:f5:fc:
08:c7:93:d6:f8:29:6b:d3:60:35:50:9e:34:bf:4a:
5f:a2:32:5b:8e:22:f8:9b:b2:7e:81:9d:3d:52:73:
fb:56:41:d4:12:6a:0d:43:28:6e:6e:33:f9:29:4c:
de:d3:3a:02:06:95:11:6a:0b:b8:db:71:d6:42:ee:
c8:e0:d8:09:28:67:24:51:f3:9f:ee:56:90:e5:5f:
43:61:1f:98:03:12:57:ac:4d:52:4f:d4:29:5f:0f:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:5E:C6:7C:B0:45:19:48:95:04:98:AE:3D:B6:5D:C0:26:15:C8
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:67:9c:af:16:93:56:6d:01:80:a0:14:51:7e:17:9b:52:9b:
41:7e:c2:fc:0b:8f:8b:f3:c4:b5:71:d9:43:1e:5d:d3:d0:dd:
fb:fd:54:b6:60:d3:54:5d:b2:91:d5:21:bc:ca:68:b6:12:12:
a9:1c:97:62:9d:66:28:3e:64:e7:15:52:cd:ed:b3:0d:bc:98:
44:21:75:c9:5d:e5:a6:64:61:67:1e:24:be:55:27:3d:ec:ca:
62:c0:4d:de:4d:e6:0b:69:df:65:68:9b:d0:e5:11:ba:af:d1:
6a:9e:be:2c:b8:3b:3c:27:da:63:c8:80:df:a0:a3:73:be:31:
70:43:75:00:38:c3:1b:ec:d3:a8:58:a4:0b:e7:a0:2b:7c:2e:
1e:ed:10:8a:53:b6:ff:1f:59:2a:54:02:9d:c9:cf:5a:7f:11:
3f:d0:fe:b5:a7:d9:36:a7:66:2c:17:ba:97:07:16:db:2f:3b:
58:6a:6c:e3:82:32:95:5e:b5:a1:78:70:c7:60:95:2a:61:7a:
49:15:68:09:33:ec:3b:7b:d9:18:22:51:fe:ff:be:2a:4f:03:
a6:87:f3:db:b4:67:5b:6f:03:30:00:7a:f7:24:64:27:4b:79:
ea:5e:52:60:36:b1:44:f9:66:09:b1:b9:ab:f8:97:7d:e8:e1:
c7:18:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 15:03:45 2025 by rpki-client