Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
File: fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft (raw, json)
Hash identifier: rBLB0ZucoDmHrFgjxIodzwugiOjyrTNHM0+Vasjte3k=
Subject key identifier: CD:EC:C1:86:4D:62:D8:14:0A:AE:4B:1D:35:AD:31:D6:85:42:92:B7
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Certificate issuer: /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial: 01984A77C75FE742005378D2CF53224A74BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
Manifest number: 0AE3
Signing time: Sun 27 Jul 2025 06:00:20 +0000
Manifest this update: Sun 27 Jul 2025 06:00:20 +0000
Manifest next update: Mon 28 Jul 2025 06:00:20 +0000
Files and hashes: 1: fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl (hash: 8pDvIwKeY3zAvA9LzQpOMGQICOP/e9dyt0TwIqQvfJA=)
2: mCKGYv7Hn8VpwzSrofG5k1K1u28.roa (hash: LkkBVbT8cmI52OeplrbujyTxipUcCUujJaGi2zW5iDw=)
3: o74rBkwgi-OLyw8qLeq0VZnWs9M.roa (hash: XmOmIlqK0EcHoxKDnpHB1Iv3cjgrTtgXMu4pU/uNCvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c7:5f:e7:42:00:53:78:d2:cf:53:22:4a:74:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Validity
Not Before: Jul 27 06:00:20 2025 GMT
Not After : Jul 28 06:00:20 2025 GMT
Subject: CN=cdecc1864d62d8140aae4b1d35ad31d6854292b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:80:6c:44:40:74:26:56:e1:98:3d:97:e1:
a4:4d:c4:fb:b9:22:81:b0:43:e1:af:4f:27:e5:23:
74:8e:4c:37:50:d7:a9:c8:49:22:12:1d:5c:44:a4:
10:d0:d0:66:6b:9b:b6:cc:54:72:79:aa:3c:a4:c6:
42:48:2b:32:eb:b0:3f:ff:a0:97:c8:ce:3c:44:4e:
31:99:1d:80:4a:2b:04:4f:ad:84:22:25:4a:40:c6:
99:7b:e1:11:13:49:e3:9a:4f:5f:4d:b1:51:89:98:
49:e2:50:2a:fc:a3:d3:01:70:01:d8:e2:7c:e6:51:
04:5a:5c:3e:33:aa:e8:9f:11:20:98:e6:77:76:f6:
33:c2:6a:91:ea:68:0e:a8:82:bf:fc:d0:35:9e:f3:
70:c7:07:3f:a8:30:6d:ec:62:86:79:f4:ce:80:ff:
8c:35:05:ec:eb:13:eb:02:27:0e:9c:c0:22:38:d2:
32:2c:a6:38:c0:b5:b6:eb:78:9e:89:e1:c4:79:07:
88:f6:ae:dc:83:42:61:fd:95:4e:41:0c:9b:bd:e6:
3f:f0:a0:41:84:ab:16:73:35:6e:2f:19:af:4b:62:
12:ac:f0:05:b5:5c:b6:15:4d:b8:b3:b0:17:2e:7c:
9b:01:9d:d7:36:33:20:d0:a2:97:ac:40:55:2e:c2:
41:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EC:C1:86:4D:62:D8:14:0A:AE:4B:1D:35:AD:31:D6:85:42:92:B7
X509v3 Authority Key Identifier:
keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cb:1f:ba:6f:fc:26:8b:61:d7:e3:b8:22:61:01:60:65:8c:
bb:8d:53:ee:cc:47:08:6f:c4:fa:f4:5b:c6:8b:40:25:2d:0f:
d6:bd:f3:5c:ac:2d:48:ff:8e:29:16:58:fb:f9:ed:85:f8:89:
eb:bb:80:f0:29:1f:dc:d6:10:38:4c:9a:34:14:4d:f0:4f:f3:
7e:aa:ee:e7:65:a3:18:11:34:67:52:09:22:84:89:16:2c:ef:
1c:d7:db:81:82:37:db:3f:fc:38:78:a5:55:09:42:f6:fb:7b:
6b:48:59:73:f0:04:59:96:d3:fc:16:a1:70:c3:e7:a3:3c:64:
55:6a:48:6e:96:be:32:5e:48:11:e4:cc:3a:df:94:5e:d6:4a:
9b:64:dd:d7:51:34:d0:22:b9:08:34:0c:00:6b:0a:d8:a0:b9:
3b:7a:89:1e:2c:13:9f:71:b8:55:01:b6:37:d1:9d:ec:72:4a:
8d:1a:45:19:2f:6f:4c:cc:11:18:38:05:45:d1:24:c2:a3:6d:
4b:d4:4a:40:97:e0:b1:d7:ef:88:5a:8c:8a:90:d2:8b:85:04:
6f:ae:4e:d5:0e:a3:85:88:5b:53:23:45:cf:5b:86:e6:f7:a2:
28:fe:2e:0e:cd:e4:26:7a:cb:3f:e6:a9:d6:fd:83:51:40:29:
75:e7:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:35:00 2025 by rpki-client