Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: Q69mD22PGOmse/IEe1iHL3pXzUbyiX3mhzdu7qAqR5c=
Subject key identifier: A1:9D:65:A1:FB:A6:40:C9:BB:C2:72:95:A4:60:FF:8F:FC:0D:40:AC
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 01982935E39C93E57870ABB744EDFA6BE039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 0554
Signing time: Sun 20 Jul 2025 19:00:54 +0000
Manifest this update: Sun 20 Jul 2025 19:00:54 +0000
Manifest next update: Mon 21 Jul 2025 19:00:54 +0000
Files and hashes: 1: 2DvVU95orox5IeGSdibufOYyF_M.roa (hash: zYc2kejhvwZAMUP9rtgZ0VImRS6xXrZBfW+6RhgOP2c=)
2: _vBlwHfpCbgKUBFoqSs3ggu60nI.roa (hash: AsAILNa2VMgTcOZ13cTcAxG+d9Mwo5a4AZ6ZUVGbk/c=)
3: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: 7Odm7GFygoNZcG+ISQEag084uR2djglqzcvJQPOMtW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:35:e3:9c:93:e5:78:70:ab:b7:44:ed:fa:6b:e0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: Jul 20 19:00:54 2025 GMT
Not After : Jul 21 19:00:54 2025 GMT
Subject: CN=a19d65a1fba640c9bbc27295a460ff8ffc0d40ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:c4:cc:30:18:68:5f:be:85:04:b1:76:c7:
30:14:0f:1d:3d:e5:99:b4:13:9a:54:a2:96:3f:d8:
e5:93:45:53:25:42:0a:9a:99:c6:58:76:20:95:41:
8e:ff:59:7f:cd:35:5d:8e:cb:ad:fe:df:63:af:17:
67:88:f2:29:f0:e3:42:07:a5:91:83:27:54:35:b6:
22:5f:a3:d2:44:81:99:ec:71:a6:2d:87:55:c5:ae:
0a:90:8b:86:e8:5e:d5:92:7b:38:d8:d5:94:ca:f3:
5f:a0:23:71:93:3c:1b:31:ac:db:08:f7:29:6f:42:
01:39:ce:63:d1:14:5e:df:4e:10:9f:35:c3:4b:fc:
94:63:18:e3:30:6d:90:b5:ad:6a:a4:90:9e:08:62:
cb:67:1e:29:0f:8e:f7:96:3b:a7:b7:04:4c:01:ee:
b2:5d:f3:8f:4b:30:71:84:22:5d:89:bf:15:7a:94:
58:1a:3e:a6:03:2c:ba:a5:a9:62:6c:6d:b0:87:f4:
da:b4:da:c5:fd:8d:52:1a:46:c3:eb:70:78:83:fd:
d5:09:17:f5:7a:e7:15:4b:a4:1c:b1:6c:f9:ae:ae:
0b:3f:a3:b1:66:74:24:d3:42:1c:02:92:24:db:e8:
91:30:70:dd:e8:53:ef:3a:dd:35:0e:f6:ac:80:87:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:65:A1:FB:A6:40:C9:BB:C2:72:95:A4:60:FF:8F:FC:0D:40:AC
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cd:cf:8e:a5:10:65:1c:a5:66:f8:2f:6c:65:b0:c7:4c:1a:
56:b0:27:1f:e9:33:b7:cc:30:64:0e:af:f3:46:f6:2f:f6:84:
f6:1e:33:c7:de:08:bd:33:02:c7:60:03:d9:46:53:20:e7:a9:
8d:a7:0f:28:03:37:be:7f:da:65:ef:69:d2:d5:2c:b4:ff:98:
21:69:37:87:f7:4f:c2:81:12:b9:ab:7d:07:f3:69:bb:d9:ed:
83:e3:ee:05:4d:e0:4e:25:98:63:22:1c:22:11:be:04:86:99:
ad:f0:82:1b:aa:8d:5f:aa:99:5d:81:a1:72:04:b9:5c:94:67:
ca:4c:0d:43:46:7e:a5:f1:7e:22:65:ef:91:cc:91:37:dc:d2:
5d:54:47:55:51:2f:76:9b:3e:79:a2:6f:58:b5:66:c4:83:cf:
8a:a4:c2:78:1e:4b:d3:22:7b:d8:0d:6d:6c:8a:ad:4b:71:97:
72:f4:ae:7e:b9:25:0c:8b:8b:56:fe:76:fa:83:16:49:74:7d:
77:1a:ff:07:6d:db:61:c8:13:71:d6:bb:c8:b0:00:36:0f:a6:
a8:f2:87:fe:83:76:17:f5:36:76:3b:15:51:23:7a:1c:fb:7b:
5b:da:fc:60:d2:e6:e8:a2:9e:d6:8c:5b:dd:0e:66:b5:fb:29:
97:27:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:43:54 2025 by rpki-client