Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File: FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier: vB9JClVj/Zi7FDpdFmfQXoZyeQGOd1H2ME+ztg2iUR0=
Subject key identifier: BD:F4:78:AD:41:A6:87:CC:74:E1:F4:D4:E3:29:0E:9A:91:F0:D1:2A
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial: 01984A779ADF1AB4B7ED6811AD4F2445FDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number: 042F
Signing time: Sun 27 Jul 2025 06:00:09 +0000
Manifest this update: Sun 27 Jul 2025 06:00:09 +0000
Manifest next update: Mon 28 Jul 2025 06:00:09 +0000
Files and hashes: 1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: pq18geqmlw7FeYyb8eBoMmCVIgx8W8aYZXThHYe1Vtk=)
2: l3kIS-H41zLKlD417TNejtnJFY4.roa (hash: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:9a:df:1a:b4:b7:ed:68:11:ad:4f:24:45:fd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Validity
Not Before: Jul 27 06:00:09 2025 GMT
Not After : Jul 28 06:00:09 2025 GMT
Subject: CN=bdf478ad41a687cc74e1f4d4e3290e9a91f0d12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:d7:27:91:ef:d1:b9:32:48:73:91:07:fb:
80:a9:0a:13:b2:d7:6f:79:85:01:f2:da:84:c5:d5:
19:51:be:3a:84:ff:35:bd:24:01:ac:54:ba:cb:ed:
56:87:2f:c4:32:69:3e:7f:47:d5:2a:05:46:7e:e4:
82:96:ab:6a:7a:a6:51:2b:0a:30:06:55:0d:27:75:
f4:ac:dd:36:9f:fd:a0:6e:45:6e:b1:39:77:49:12:
b0:8b:d1:f6:6a:2a:94:b0:12:61:b9:b0:0e:d5:46:
4b:ac:ac:f1:e4:c4:3a:ec:d7:db:f8:b8:f2:7d:38:
b7:e7:61:45:6b:c0:fe:49:fd:85:6e:32:93:47:3f:
d2:70:d2:2a:4f:48:20:9e:5e:8a:0d:fb:f5:bc:e8:
e6:89:34:54:89:b3:d7:41:85:b9:43:25:dc:f5:b6:
10:49:11:c4:44:8b:d0:af:0f:2e:6f:ff:30:37:e7:
88:d0:b0:30:96:99:13:8f:28:02:a1:0c:4a:bf:70:
83:71:97:9c:d8:0d:2e:5c:83:bc:57:c8:ec:5b:39:
9d:12:0b:b2:73:92:c7:5d:3a:6c:06:42:34:77:44:
96:82:71:fb:b3:ee:88:f8:72:16:90:82:e2:05:69:
c0:1f:f1:31:fb:24:50:d6:3a:d9:70:0c:b1:71:2b:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:78:AD:41:A6:87:CC:74:E1:F4:D4:E3:29:0E:9A:91:F0:D1:2A
X509v3 Authority Key Identifier:
keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:32:78:d2:76:7f:02:f5:4e:33:b2:ec:df:65:c2:57:26:51:
15:1e:66:fa:c9:4a:29:58:8b:00:bc:fa:99:2e:3f:57:2b:91:
26:27:6b:3d:be:75:02:60:11:64:05:cd:48:3e:08:d1:2c:51:
ee:b2:e1:1d:a6:e7:75:f8:99:6b:88:6b:d3:16:be:82:08:73:
be:ad:a9:60:4a:59:15:3d:7b:a2:10:33:fe:c7:c7:25:39:30:
5c:ad:0d:54:80:a2:bd:ea:7e:47:3f:b8:37:af:42:99:ba:28:
1d:29:c0:76:fc:be:73:0d:b2:44:52:9b:2d:2e:82:50:50:ad:
4d:b6:0a:04:51:62:e5:5e:06:cc:be:b4:3c:1c:18:7a:d5:ac:
5b:17:54:3e:3c:4b:15:1f:34:e2:fd:f8:62:39:93:81:d0:f0:
9c:09:45:16:6f:18:e0:6e:91:d2:c9:03:89:fc:6e:ae:a6:9d:
e8:0b:7d:6f:c3:fb:06:06:21:43:e0:5e:17:5d:e7:10:1b:8a:
05:68:22:f3:c9:56:a7:de:23:bb:08:b9:3f:bb:c8:4d:b8:db:
fb:98:5b:ca:b5:03:03:45:b1:24:c6:08:89:aa:0e:19:3b:52:
bf:b7:87:23:a0:cc:b1:4b:a7:8a:62:b0:02:34:c2:84:cc:f4:
a0:7f:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:56 2025 by rpki-client