Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier: ya/IrVjyxM4LlzkEVg9H6/z3MQyt4EEKlxBqKfplSEM=
Subject key identifier: AB:1F:19:61:CB:47:50:38:FD:8D:1B:EC:40:7D:4E:54:58:FB:49:5B
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 0198499C38C2C2FB1AD64CB0E8CD041000E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number: 0ED0
Signing time: Sun 27 Jul 2025 02:00:31 +0000
Manifest this update: Sun 27 Jul 2025 02:00:31 +0000
Manifest next update: Mon 28 Jul 2025 02:00:31 +0000
Files and hashes: 1: 1-7k1BSVErLFvFpR9s4khkCRgcx8.roa (hash: OjA0u5BcNw+jfDFu4scr2j7odbJKWBNkQN28Ky+RjrQ=)
2: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: 7GMYOxkRL94krj1ZG6BCFHaS0OaU3T/BLRvlxRne87Y=)
3: ZYpOnf_RMjUdQRpY5DSmoRhYWXo.roa (hash: 1MZ14FF0b6BfjlsKqzDJT2k9XMlDgyRHFf/YVDEx3LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:38:c2:c2:fb:1a:d6:4c:b0:e8:cd:04:10:00:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Jul 27 02:00:31 2025 GMT
Not After : Jul 28 02:00:31 2025 GMT
Subject: CN=ab1f1961cb475038fd8d1bec407d4e5458fb495b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:d0:38:df:ad:79:04:62:1b:51:1d:e0:22:
de:a0:ac:73:d8:ba:33:24:6f:64:44:92:07:da:8f:
9d:e9:1c:02:aa:98:a7:a8:17:b9:c6:39:c3:5f:88:
28:ba:7b:62:2d:08:2f:ac:7f:e6:cd:6c:2c:55:05:
cf:6e:69:17:f6:0f:8b:c5:ec:cc:ef:90:24:8b:db:
be:8d:99:78:11:21:22:a3:f9:3f:5d:d5:66:50:76:
db:55:62:ff:ac:e9:12:d3:2c:8d:9a:ad:bb:d6:37:
01:05:6f:a0:0c:52:d4:11:a6:5e:1f:99:47:5a:c6:
4c:86:d1:54:2b:94:5d:d9:fb:c8:a5:4f:51:df:d7:
c9:9b:b3:f8:d4:88:c1:4c:71:ec:b7:ea:14:86:29:
2e:17:6a:b5:fe:82:92:70:03:96:0f:fd:3e:9f:53:
4c:25:20:3d:f4:1a:2c:b9:01:e5:39:3a:fc:2f:95:
34:64:df:5f:3c:c6:17:dc:23:74:25:10:83:78:f9:
0b:ec:ef:ae:69:23:f0:57:d1:74:07:90:52:6f:14:
75:d6:76:31:f9:72:a9:64:97:5a:06:bf:bd:bd:d6:
f6:c4:56:b5:e4:22:05:cf:ef:4b:65:6d:05:0e:50:
bc:df:ee:2a:ac:76:2e:94:e5:87:d1:11:c9:91:1d:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1F:19:61:CB:47:50:38:FD:8D:1B:EC:40:7D:4E:54:58:FB:49:5B
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3b:ad:28:b5:60:f7:b1:d1:03:b9:08:35:01:71:f4:23:1a:
73:e8:96:56:b1:bf:8f:13:6b:ae:23:25:f9:1c:f5:a6:54:a6:
54:88:64:ae:8b:aa:76:cb:05:14:a1:f9:68:4b:ad:ac:38:c0:
4b:c4:44:25:e3:b0:a5:8d:84:85:f7:78:a4:a5:3f:45:8a:80:
8e:21:dc:a6:c2:e5:04:fa:6a:79:dd:a8:2d:39:fa:2f:d6:5e:
54:86:97:22:6a:4c:29:0f:2b:61:46:31:d7:d5:a7:36:bd:1f:
2c:62:d4:df:87:63:ff:6b:d2:37:fd:bf:ff:46:55:f8:20:a4:
50:1e:02:df:06:c1:97:ab:66:36:ce:e2:78:86:cb:02:e6:69:
de:20:c0:a8:b3:02:ec:49:92:9a:26:7e:98:f1:25:9e:ea:c0:
e8:32:1e:c9:02:73:83:8e:43:60:85:de:b9:b4:9b:96:de:8f:
60:05:0e:a7:90:2c:82:5e:9d:bb:48:ba:d5:6e:cb:b6:8e:d2:
0c:e5:24:2f:af:75:bf:be:4e:42:52:79:0d:e4:8e:c7:46:32:
c8:d6:b2:f1:7f:66:53:98:7d:b5:49:f9:93:55:7b:78:24:c6:
c3:b5:f8:e3:f3:e2:de:e2:64:cd:05:01:9a:7c:82:fb:50:e1:
21:fe:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:24:54 2025 by rpki-client