Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: 3VOI8tQqudjKSblrXW2DrO71glGqBvGpc7QfhYjsngc=
Subject key identifier: 31:63:B3:A8:81:B2:9E:5F:38:C1:1E:27:8B:5A:F3:4E:0A:B2:26:48
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 019841E2B757A29274BE98ACE995536BDF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 0ED6
Signing time: Fri 25 Jul 2025 14:00:33 +0000
Manifest this update: Fri 25 Jul 2025 14:00:33 +0000
Manifest next update: Sat 26 Jul 2025 14:00:33 +0000
Files and hashes: 1: 1skXawq2SahvYTA2mnEOEbVR1u8.roa (hash: nHycrkajnYAr9VibtJNGtsv2Ftb47ENenxgpTd+DfzI=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: K6FYuy6LbTF8tqVUgC9e28Ce2Qay1G92iYCsYjSK6lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:e2:b7:57:a2:92:74:be:98:ac:e9:95:53:6b:df:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Jul 25 14:00:33 2025 GMT
Not After : Jul 26 14:00:33 2025 GMT
Subject: CN=3163b3a881b29e5f38c11e278b5af34e0ab22648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:10:83:55:61:b3:c5:55:22:08:e0:7c:fc:
97:60:3a:52:69:c5:0f:fe:07:7b:87:92:de:68:31:
dc:64:30:09:22:a6:dc:6f:a3:14:22:57:18:69:d5:
74:a9:3d:2f:a3:42:0d:69:39:47:7f:19:5c:af:a4:
54:96:2d:60:9e:a9:8b:93:2a:6c:e2:73:19:24:9d:
8c:ac:f5:9a:c0:ee:9e:7a:0d:6a:45:ca:06:9f:f2:
21:68:06:cf:09:ef:98:5a:fc:65:cc:1d:a7:d5:55:
ad:84:cd:09:a4:fd:62:38:6d:94:d0:00:13:ba:29:
74:1f:29:29:ee:a0:84:39:2d:b8:cf:bf:2d:a6:d3:
91:9b:d0:70:a5:92:98:fb:0c:29:ef:b7:9d:ef:f1:
f5:53:d9:c7:e6:d7:6a:66:35:2d:e9:87:c8:c0:7b:
e2:62:c0:81:16:5e:de:98:83:fc:36:81:b0:71:be:
ab:06:89:d7:42:a4:bd:d7:d4:c6:b2:38:75:7d:04:
0a:cc:6c:04:95:6e:1f:39:a9:6d:a4:7f:96:ac:2e:
52:6d:c3:4a:72:e3:09:14:8b:06:2b:56:b5:b7:98:
4a:72:1e:8c:f7:a9:e9:9b:98:01:bd:5d:e4:84:23:
47:d0:dd:85:86:64:cc:28:e1:0a:dc:44:9c:2d:3c:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:63:B3:A8:81:B2:9E:5F:38:C1:1E:27:8B:5A:F3:4E:0A:B2:26:48
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cb:03:70:63:5f:62:25:88:d1:37:58:ef:25:98:23:eb:b1:
85:62:ec:ce:05:91:54:ee:e4:6d:e7:b1:6e:2f:ce:8f:69:3a:
64:27:5b:6f:86:71:dc:98:c3:b3:91:0a:d2:21:89:0b:38:a3:
c0:d0:f5:76:c1:e0:4b:be:09:c9:57:c0:80:2b:2d:c3:fb:92:
56:12:d5:1f:ed:7d:da:f7:01:92:c1:b3:c6:e6:24:82:b3:54:
7c:d7:3b:49:8b:4e:b5:71:64:ba:8d:43:73:21:06:10:36:1e:
59:f0:89:3a:1c:32:b9:b5:6a:6a:bb:1e:31:cf:12:c3:40:22:
f8:0a:57:f3:71:65:6a:5a:2a:ce:87:8e:2c:55:28:71:a5:93:
ae:37:c0:99:3c:50:27:e6:b4:a5:93:1b:0b:53:fa:17:1f:86:
ae:89:f1:ad:54:ed:b5:ba:d5:c2:ed:a3:6a:68:ca:7d:47:a6:
81:f5:1a:f2:e3:cc:73:af:55:ed:49:4a:26:51:53:a2:1a:9a:
70:e4:d5:33:bc:a2:0e:aa:76:dd:65:16:7e:09:34:d5:08:cc:
a7:8b:ee:37:a0:1c:e3:17:d2:12:d1:a6:3c:29:25:23:a7:c4:
11:8a:c9:f7:2e:94:28:fa:67:00:f0:7e:90:99:94:7e:03:67:
93:3b:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 23:59:35 2025 by rpki-client