Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: LMeZw0sFPGjA9WWkTYPX0sLDnsONGV7nwgICRAFF5AA=
Subject key identifier: D5:DC:60:AC:AD:89:75:59:B6:96:DB:43:78:30:02:99:29:A1:F9:C0
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 01984776DBCE98C3B2092E3A825189A5280E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 16:00:28 +0000
Manifest this update: Sat 26 Jul 2025 16:00:28 +0000
Manifest next update: Sun 27 Jul 2025 16:00:28 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: mNst7y9ICJ0bSKTiVqfvnQz/RgBJFOhoizJ+ZYR3MT4=)
2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=)
3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:db:ce:98:c3:b2:09:2e:3a:82:51:89:a5:28:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jul 26 16:00:28 2025 GMT
Not After : Jul 27 16:00:28 2025 GMT
Subject: CN=d5dc60acad897559b696db437830029929a1f9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:e1:71:e6:1c:18:4c:22:d7:4b:4f:86:c6:
25:44:d4:8b:30:e3:e0:48:87:c3:25:0e:f5:e6:9a:
e5:d4:a1:06:e0:8b:94:1c:40:6c:46:a8:82:fd:5c:
74:94:65:52:d2:12:34:54:78:a9:6d:a9:4a:6d:fe:
7b:53:cb:7c:7b:0e:1a:a6:31:48:26:8e:b8:ef:c9:
e0:d9:aa:f0:c7:c1:5b:f5:34:2c:21:9a:49:d2:a1:
72:fe:c6:f3:eb:f9:5f:9f:01:e6:65:f7:57:05:f4:
25:ef:cc:bf:ad:31:d7:45:33:84:73:28:fd:e9:55:
ba:57:5b:f3:72:47:62:76:13:4e:ce:b6:b3:5d:5c:
49:e0:f4:be:20:7e:04:bb:38:e0:aa:a9:c7:84:46:
93:29:8f:68:53:e6:a9:b5:e6:4e:b1:ff:81:6d:57:
91:db:ae:8d:25:bf:c6:08:be:55:1a:5d:2e:5d:31:
f7:9c:81:7d:bd:4a:8f:8d:f5:e8:36:ec:1f:6a:e7:
36:86:7c:b9:5d:25:a0:4c:21:e9:0e:05:75:1b:e4:
96:a2:4c:4f:3e:a1:84:f5:4a:fd:12:86:e2:6e:81:
d6:f2:95:28:71:13:5e:de:25:a8:29:d1:cf:81:31:
9b:13:4d:23:df:e5:36:37:c8:df:7b:0e:bf:7b:d1:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DC:60:AC:AD:89:75:59:B6:96:DB:43:78:30:02:99:29:A1:F9:C0
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7a:5a:57:a6:a8:b1:7f:fb:f6:4e:9d:00:ca:b1:4c:16:4d:
f7:39:d9:d6:45:a2:c7:3d:e7:93:25:aa:83:49:70:12:6d:e2:
18:2a:19:e5:25:9d:59:95:44:ea:29:e3:65:9e:13:28:a9:78:
cd:6f:af:62:5c:26:2a:ab:d0:60:1b:f8:cf:01:48:09:60:3e:
79:51:fe:47:c4:13:2d:93:4e:2b:18:a9:6f:47:71:e8:65:5e:
f1:6a:e2:00:e1:8f:62:dc:c9:a4:f2:a5:31:cf:c1:fc:22:e9:
6a:4d:50:82:5b:bb:ea:56:3a:05:1b:37:df:dd:c9:20:78:a8:
a8:e9:95:42:db:bb:60:48:21:bc:69:41:39:05:95:dd:0a:89:
a2:14:73:f5:c2:33:74:a6:6d:c3:9c:3e:ab:b2:06:38:16:1d:
9a:81:74:4f:b9:e4:24:4b:15:19:05:7e:75:98:2a:8c:09:d8:
21:c6:a2:8e:7f:f2:22:87:5e:d9:33:10:cd:82:63:42:e7:03:
e5:85:c1:02:f9:a9:37:9c:b6:a6:2d:12:1a:d3:96:e2:7f:b2:
5e:74:d4:16:fc:29:24:e3:77:34:b1:c9:8f:89:f0:e4:bc:7e:
8e:29:6b:11:e2:dd:12:2c:be:0d:2a:ae:71:5f:87:42:29:f0:
e3:e4:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:27:28 2025 by rpki-client