Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: zJG3gWwVCIcaMN7sjbjOEMCkJveynKthpB27IQFqOCE=
Subject key identifier: F4:F1:4C:75:D5:A2:23:88:90:18:EE:35:C3:F1:3D:D5:D0:35:4E:25
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 0198451A70642E5E481B3B4A60981282645B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 12DF
Signing time: Sat 26 Jul 2025 05:00:17 +0000
Manifest this update: Sat 26 Jul 2025 05:00:17 +0000
Manifest next update: Sun 27 Jul 2025 05:00:17 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: h0JcWLCqxlXSfR5e8S2wMwaKQ1IXdMa9T5zounE1u9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:70:64:2e:5e:48:1b:3b:4a:60:98:12:82:64:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Jul 26 05:00:17 2025 GMT
Not After : Jul 27 05:00:17 2025 GMT
Subject: CN=f4f14c75d5a223889018ee35c3f13dd5d0354e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:27:01:cb:51:60:21:ff:17:98:14:46:17:
0c:24:d3:b6:cd:c0:39:b6:ec:a2:1d:a9:d9:11:5d:
d8:c3:ae:ca:1a:56:b0:8c:20:14:4c:06:99:d1:f9:
99:69:e5:70:c6:6a:d4:3a:f1:c5:27:2f:04:34:d9:
da:ce:bd:9f:83:2e:4f:71:35:e3:6e:a6:9a:c6:c3:
6c:b2:0c:23:e8:11:fb:6a:0b:ed:bf:d4:2c:b1:81:
51:16:c9:5e:14:21:84:13:7d:ce:c1:74:95:33:6f:
b6:11:65:a0:6c:10:9b:fb:04:f1:29:48:dc:c7:cb:
b7:cb:6b:e3:05:e8:a7:9e:70:8d:d1:3c:73:fd:92:
eb:42:32:b1:8f:4c:ed:0d:03:bc:0a:35:9c:27:c7:
27:16:d4:7c:42:86:e1:9d:91:d6:8f:67:7d:19:87:
85:b9:30:26:91:73:bb:c5:a5:59:49:22:1b:ac:a8:
4c:07:94:64:b3:b6:96:33:ca:07:e8:fc:e9:b4:92:
5d:d9:76:e5:00:33:ed:13:9e:c9:59:8f:36:bc:a3:
b1:84:79:6b:ac:75:f0:80:71:e5:dd:20:bd:c0:c9:
39:39:00:eb:23:4e:93:b5:e8:bc:70:11:5b:56:ab:
62:a6:e5:46:c7:99:88:b8:42:e4:8b:59:47:aa:9a:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:4C:75:D5:A2:23:88:90:18:EE:35:C3:F1:3D:D5:D0:35:4E:25
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:db:3b:65:cc:c4:0c:c1:39:9f:ff:45:28:9e:82:ae:61:23:
25:3e:d1:2d:fb:e8:2a:b7:e1:a6:3a:f6:4d:77:b9:59:fd:17:
52:50:ae:9b:99:ba:94:2c:0f:84:c1:10:6b:81:61:6a:f0:52:
10:25:5a:22:de:e2:d8:69:47:29:96:9b:0b:0c:87:e4:4c:4c:
c7:7f:5c:53:46:fc:a5:82:b6:7a:04:8a:12:22:b8:d2:bd:03:
0a:e1:36:5b:6f:e5:42:c0:8b:9e:a4:d5:b1:df:ff:da:8d:bb:
cf:91:01:d8:af:17:10:7c:85:6c:de:60:c4:7e:e8:b8:b6:d8:
e9:29:a2:f7:d4:ff:b3:9a:9d:73:8f:21:0d:23:6a:1b:ea:02:
6b:05:b7:fb:0b:26:b5:eb:21:3d:00:72:d0:70:d7:02:e7:31:
fe:57:7d:27:f9:53:71:93:cc:1f:dd:02:c4:8b:b6:06:fa:78:
84:eb:a3:e3:66:97:62:f4:c8:f8:f1:87:88:99:2d:1a:61:94:
ff:f4:b3:2d:03:6e:39:ad:6f:63:ec:cc:1a:f2:86:d6:bc:d8:
47:be:97:31:05:5f:47:9e:15:9e:7c:d3:ca:cf:e1:8a:57:77:
5a:e4:0a:79:df:c6:28:56:8c:a0:de:77:1b:c6:83:71:30:e2:
ca:36:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:22:39 2025 by rpki-client