Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: QeO5JkgdBPReY5jYxHsD7S3PZsNf46Up+3nbc6/8HDI=
Subject key identifier: 8F:89:7A:1C:84:5B:20:12:DA:72:F2:A2:43:7F:E1:DC:5E:44:87:10
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 019842BE586C13D49864C6D8E3F151159F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 1605
Signing time: Fri 25 Jul 2025 18:00:27 +0000
Manifest this update: Fri 25 Jul 2025 18:00:27 +0000
Manifest next update: Sat 26 Jul 2025 18:00:27 +0000
Files and hashes: 1: JN5O0QCPrYg2gGsd5bY4WvuMm88.roa (hash: Fx9qqqMuryeKb6+Rb+Dr8zIFkW7rIV44uKPsq4V2Qsk=)
2: bAMnl2_6RRTmNV4zQKgmKBPIhlw.roa (hash: V9YqmjnltEXUALOTq/OVrSw9uYwMaY1gDtJwBPznHa8=)
3: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: 66qEi5E50Yh69DGEse/gKYpPvBqRra61uUznpVKlq9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:be:58:6c:13:d4:98:64:c6:d8:e3:f1:51:15:9f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Jul 25 18:00:27 2025 GMT
Not After : Jul 26 18:00:27 2025 GMT
Subject: CN=8f897a1c845b2012da72f2a2437fe1dc5e448710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:b1:f3:c5:eb:44:71:e5:e1:cb:14:85:7a:
4c:34:88:ef:32:4f:83:18:9d:ec:e6:3f:36:38:cc:
fa:bf:b1:4c:84:89:7c:d1:15:fc:b2:7e:aa:87:40:
8b:76:8d:02:df:3f:fe:7b:c3:ff:11:9d:71:11:6d:
d1:c7:f7:ac:09:c0:15:6d:f6:d8:f9:5c:e2:f0:1e:
bb:51:4f:ad:21:16:eb:6f:08:a5:b1:0c:a4:d4:e8:
05:63:d9:c3:c2:86:ef:0c:0c:28:9d:5a:6f:43:21:
33:6e:34:1e:bd:ca:e0:c5:92:4a:01:06:f4:fd:75:
64:17:c3:ff:e1:4d:5d:5a:49:6e:49:c6:92:12:7f:
01:3c:21:b4:1f:eb:1b:e9:73:c8:a2:c0:e4:78:97:
e0:b4:d3:73:49:85:f4:b0:af:fe:c8:c9:82:b9:6e:
62:f0:18:7b:79:e7:41:2e:0a:94:3c:7a:eb:ef:0d:
c8:3e:63:90:14:75:ad:13:3f:70:27:a3:2e:82:2d:
79:10:25:b9:eb:00:4c:95:fa:2e:34:9a:3d:3c:ef:
3a:94:f2:c1:eb:49:1f:e2:78:18:a0:b4:47:a0:c3:
d0:ef:41:76:d5:ff:ca:6b:e4:73:20:a8:93:b7:b9:
03:4f:25:da:e5:9a:e7:8a:0e:34:8c:86:ac:b3:53:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:7A:1C:84:5B:20:12:DA:72:F2:A2:43:7F:E1:DC:5E:44:87:10
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:96:17:74:68:06:79:5e:05:47:69:b2:6a:2f:d4:5b:bd:bc:
20:f1:47:73:c9:b9:fd:bd:b1:6f:2f:c6:d9:25:cf:46:20:67:
e2:fd:73:31:bf:da:8d:37:4b:68:ea:71:dc:69:48:53:3d:34:
d9:6f:7b:c6:f6:b4:1c:46:1e:56:99:e1:f1:83:55:d1:c1:fb:
28:c3:a9:0c:75:8e:71:b2:a1:bf:cc:6e:2a:4d:eb:0a:4b:93:
90:6a:21:a3:5d:0d:f9:33:11:a0:5c:e4:15:3c:92:fc:e5:3a:
11:02:b3:0b:69:bc:f6:f4:f5:12:fe:d0:bd:5c:be:f0:6b:58:
8b:f9:5f:08:2d:7c:7c:31:70:85:82:45:85:82:29:58:cf:32:
7b:8c:62:62:93:37:05:f7:64:a2:ba:fa:d2:a5:7e:62:6a:ea:
ef:5d:a9:10:60:43:9b:67:b1:fb:70:d1:a1:38:dd:4f:16:3b:
f2:10:f0:54:42:c3:8c:b9:67:67:4b:c6:2c:cf:be:32:5d:bf:
4c:67:9d:18:84:60:a7:e5:7b:fa:dc:b2:55:1f:e6:11:a3:21:
1e:9f:c4:2f:49:02:61:36:d9:4f:19:0c:0d:f0:69:0f:1b:5a:
4a:89:94:9b:bd:34:52:1f:fc:ee:d4:24:4c:c2:6e:ca:d1:bb:
ee:3b:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:22:53 2025 by rpki-client