Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: CLkj5vkkhIsx3KNJOSvYK21GDrMrklENvS0VJiV5LN8=
Subject key identifier: D0:E2:D1:6E:90:1E:85:41:87:D4:E6:67:72:C6:16:05:1F:DE:07:D9
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 019835A7DCE2CC58C90F76CAD7E9AFFF7C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 144C
Signing time: Wed 23 Jul 2025 05:00:50 +0000
Manifest this update: Wed 23 Jul 2025 05:00:50 +0000
Manifest next update: Thu 24 Jul 2025 05:00:50 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: 4yz3qlP09m6AEFBO9aalQu7snG5o38ArtOkKLejU+ak=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:dc:e2:cc:58:c9:0f:76:ca:d7:e9:af:ff:7c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Jul 23 05:00:50 2025 GMT
Not After : Jul 24 05:00:50 2025 GMT
Subject: CN=d0e2d16e901e854187d4e66772c616051fde07d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:5b:9c:dc:68:84:1c:94:62:68:54:76:4e:
48:26:98:ac:56:94:ce:b6:0e:0d:44:23:0a:31:2a:
dc:e8:7e:ce:31:61:45:d1:63:11:87:b0:3b:f3:ae:
5f:0f:64:63:79:5e:1c:12:f0:19:cb:13:f1:11:5f:
e5:ab:02:60:cf:21:0e:4d:7d:db:3e:23:c0:86:10:
95:47:4c:8e:01:c0:14:86:0a:47:70:c4:56:6e:99:
d0:f5:91:08:af:65:5e:07:b1:9a:8b:ee:98:a6:bc:
ea:b5:d6:a5:71:c6:c9:67:3a:4d:4b:3f:a6:07:92:
a2:a3:79:dd:06:3d:76:41:b2:29:86:e3:07:03:fa:
28:ca:d8:e3:d3:6e:0d:09:b5:18:65:91:fb:fb:96:
78:a7:f3:34:44:03:4f:de:43:a4:fa:1b:82:1e:85:
c9:62:f4:b2:87:6f:17:a9:f8:fc:d3:cd:39:20:f6:
cd:32:df:f1:1a:f6:10:f9:ad:75:de:d7:63:54:03:
59:7e:e4:0b:1f:ac:f4:7a:27:9f:d7:64:88:7a:43:
32:5a:b3:03:45:80:b9:30:a2:45:ab:e5:3a:d1:15:
e8:c8:d8:61:16:13:f4:56:d9:fe:10:81:be:00:8b:
01:9a:d1:98:a4:af:70:eb:ce:8e:5e:bc:6a:37:06:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:D1:6E:90:1E:85:41:87:D4:E6:67:72:C6:16:05:1F:DE:07:D9
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:48:02:b7:f2:eb:37:be:c0:e1:8c:f8:99:c3:5d:58:50:a0:
e6:52:f3:3c:3d:77:f2:53:8f:b9:b2:3f:b9:4c:cf:e6:a3:ae:
e0:56:70:be:3b:26:e6:fc:72:7a:11:63:14:2a:41:ac:bc:a5:
fd:40:20:ae:f3:c1:de:06:91:db:e2:77:f0:49:be:e7:44:7c:
f5:bc:5e:71:79:10:88:35:4f:d4:cf:eb:90:b0:39:42:c8:c2:
78:fa:10:74:1e:6b:37:71:e4:c6:49:cd:c5:fe:05:7c:a0:be:
a6:ce:06:7a:5b:bb:5e:1b:0c:d3:1e:cf:17:ae:d4:bb:ec:bc:
be:b7:53:50:da:84:63:5b:28:3a:94:6e:89:cb:ff:63:ea:ef:
37:4e:44:17:b8:1c:d0:fc:32:b9:b8:25:8f:de:1f:2c:16:8e:
14:61:96:63:56:69:3c:b8:40:a3:f5:85:83:78:28:33:a1:22:
e2:5a:53:39:4e:de:99:44:8b:07:b6:ed:a6:4d:21:76:2b:d9:
73:c8:0b:e3:4c:59:1e:a5:8d:4b:63:97:06:4c:53:79:31:fb:
3e:49:d0:20:1d:21:ba:e5:18:03:1a:26:f1:85:1b:7d:bb:1a:
86:3f:ba:5e:8c:75:5f:d4:7c:59:0f:29:22:15:64:6f:45:02:
57:01:53:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:23:23 2025 by rpki-client