Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: 0oW8HqchyUiuMg5BtzvBB33M75baElP7ymRMyU3ynlA=
Subject key identifier: 00:D6:59:53:C4:C2:22:C3:61:27:B7:B0:A6:BF:26:6C:00:DF:34:0F
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019849D3200BDDB6D498C7839C2A712A70A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0949
Signing time: Sun 27 Jul 2025 03:00:29 +0000
Manifest this update: Sun 27 Jul 2025 03:00:29 +0000
Manifest next update: Mon 28 Jul 2025 03:00:29 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: KKJFIYwjxQJaUwpVl3lnNmfCyg2fNoqs+4dea4MHYzI=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:20:0b:dd:b6:d4:98:c7:83:9c:2a:71:2a:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jul 27 03:00:29 2025 GMT
Not After : Jul 28 03:00:29 2025 GMT
Subject: CN=00d65953c4c222c36127b7b0a6bf266c00df340f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:8c:1a:15:72:95:9a:f8:9d:5c:47:f0:d5:
5a:da:d4:99:3c:39:e7:37:a8:9e:90:a4:c2:a2:a0:
6d:92:a2:63:70:d9:1a:24:53:b7:a4:0a:e0:90:aa:
30:a5:07:81:31:b5:61:0b:35:90:76:bf:b3:c8:8c:
23:d3:ed:b9:e6:2b:b8:35:e0:18:fa:d7:d4:e4:e0:
5e:86:7a:49:b4:24:37:a1:c7:ee:6d:33:f1:d0:9a:
f1:b0:62:58:3d:d7:10:a5:3f:21:7a:a9:01:45:d4:
e7:f1:0b:96:01:e3:e6:30:92:4d:12:f4:ad:1e:83:
34:fa:9d:fe:a2:a9:93:98:d4:a6:81:e7:8c:24:8e:
0f:6a:29:2f:fa:53:53:05:bd:de:50:a3:0e:81:14:
c2:a5:c2:88:51:2a:39:0d:51:f4:82:7e:3f:d0:f5:
66:0f:79:a5:bc:4a:2d:91:21:33:b4:c3:fb:5b:60:
35:c1:fe:5e:9b:36:e4:d6:9d:8e:02:4b:d4:a9:1d:
a7:ba:d7:14:ba:9b:a0:c2:e8:b8:e2:88:9e:88:ab:
09:21:c6:42:a8:4a:b2:3d:9c:9c:61:02:ba:4d:bd:
e8:13:1b:ed:6f:23:c8:b5:20:fe:7f:fe:5e:48:ce:
f0:8e:e4:77:41:ec:f7:e4:6c:92:9b:e2:d9:ac:70:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:59:53:C4:C2:22:C3:61:27:B7:B0:A6:BF:26:6C:00:DF:34:0F
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c9:6f:9f:67:34:93:2f:5e:6e:fc:a3:b3:1b:e2:32:43:13:
69:61:5b:95:fe:45:2d:10:63:8e:c1:fe:2f:04:b8:60:1b:73:
e9:71:16:1d:1b:07:25:d6:ad:ee:3d:1f:9b:ac:e2:1f:e2:09:
f7:dc:dc:f6:a1:64:04:33:bd:f1:9f:d9:07:79:4c:9b:c7:ae:
e6:00:d1:7b:06:38:d7:e1:61:3a:00:2d:4d:d2:f7:a3:a3:a7:
6e:06:56:ec:57:c9:fb:ac:be:a4:ae:e8:e3:00:28:8e:13:f0:
ab:99:f9:b0:d3:17:33:40:5a:0a:82:54:37:f1:87:d6:db:3a:
20:df:e6:b0:ae:16:8d:0a:97:03:9d:e9:4f:16:7a:d2:d0:93:
32:18:3d:2f:73:5a:d4:47:62:65:7f:63:d3:8c:91:b0:b3:49:
48:4c:81:db:53:74:ba:87:41:05:d9:0f:5e:e2:37:84:cf:d7:
4c:3a:04:c0:cc:ff:3f:ee:e7:c9:df:dd:01:15:92:47:41:cb:
f9:aa:c4:68:3a:e4:52:69:4a:f0:f0:df:53:6d:e3:8e:da:56:
3f:be:a3:80:23:0a:0f:5c:e2:83:a0:93:ae:e6:b0:d5:27:56:
70:65:be:c3:69:ae:ca:2b:3f:42:2b:57:cf:10:af:48:e7:2c:
0e:5b:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:40:58 2025 by rpki-client