Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: OKzKEYhU49C8sXa5EdYW5Ij4ZL0oYVpxCrYUqpvZXCM=
Subject key identifier: 64:E7:CB:EA:07:DA:9A:8B:7B:AE:8D:84:61:A8:6A:BA:6E:BE:FA:A6
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 019848C0CB1B21E176311E4ECCAC0420643D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 22:00:51 +0000
Manifest this update: Sat 26 Jul 2025 22:00:51 +0000
Manifest next update: Sun 27 Jul 2025 22:00:51 +0000
Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: GxwbTdJYrXE+/PYvYGwGs8PJ6NVJu21A3+wgnc97BWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:cb:1b:21:e1:76:31:1e:4e:cc:ac:04:20:64:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Jul 26 22:00:51 2025 GMT
Not After : Jul 27 22:00:51 2025 GMT
Subject: CN=64e7cbea07da9a8b7bae8d8461a86aba6ebefaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:81:09:ff:c1:29:b2:7c:87:6b:4a:dd:1a:
fe:e7:b8:7f:f4:6f:96:3d:d1:17:1a:00:23:58:1d:
cc:87:22:9c:c7:b4:ae:6e:d0:4c:af:f1:f7:a4:b4:
5b:02:71:56:2a:e5:9b:b9:3f:49:5d:92:fa:75:76:
75:f0:d4:be:11:7a:00:b8:df:31:64:66:c3:3a:23:
1f:bf:62:3a:40:c5:ed:c7:6d:89:7d:bf:08:a8:54:
ee:cc:be:47:f9:2e:f5:b8:93:19:fd:a8:6a:ec:1e:
86:91:52:0f:f9:5c:ec:14:a0:89:29:ec:18:4c:06:
ba:83:cd:20:ee:3d:6f:ad:9d:4f:35:92:59:27:06:
c1:47:db:c6:d5:e1:45:b0:42:87:ae:b7:d0:f4:3c:
d6:e1:a1:52:5a:e9:7d:24:76:a0:f4:e4:69:7c:fd:
75:74:5d:87:fb:34:16:da:fe:f5:87:66:3f:d2:cc:
3d:9b:a3:1a:5e:9f:04:19:3d:9b:a9:28:31:28:32:
2a:12:68:e4:0a:73:34:f9:4e:c7:d6:f6:6a:71:68:
d5:d5:7c:cf:39:ba:2a:f6:d6:87:d1:a7:58:5f:d7:
79:82:c2:ec:1d:29:c5:48:84:b8:04:3e:71:4a:0d:
b8:20:c7:41:2a:6c:c5:d7:e4:e5:f4:7a:18:3b:42:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E7:CB:EA:07:DA:9A:8B:7B:AE:8D:84:61:A8:6A:BA:6E:BE:FA:A6
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:08:ae:10:0c:77:cf:5e:cb:60:74:bf:6c:91:41:62:a2:
b5:f1:80:a0:17:cb:02:43:d3:98:30:1f:87:1a:08:2d:70:e8:
ee:fe:00:86:db:a4:29:3d:93:64:9d:af:7f:26:cf:e7:63:9f:
31:35:40:65:39:a1:c5:4c:99:1f:61:1b:a4:9e:98:e8:b4:e4:
01:9a:62:73:03:19:1e:a9:66:4f:24:ed:2c:c9:e1:02:f1:f8:
7d:e1:0d:19:66:c8:ca:8c:3d:87:a5:89:08:83:78:64:63:64:
e4:f9:24:91:f5:48:6e:b7:b3:64:40:a8:12:2f:a1:fe:8b:e2:
77:0e:e9:36:25:b7:6c:ac:8f:a0:0f:d2:c7:e1:46:37:e3:0a:
db:ab:6a:da:33:77:09:ff:75:67:43:ac:cc:c9:8d:ee:28:af:
be:2d:9a:60:68:6d:a6:27:cb:6b:cf:76:8b:9e:99:c3:78:c8:
23:91:94:a8:ef:b2:33:da:65:06:cf:c3:ca:db:dc:c7:f5:17:
a6:db:14:8a:80:07:a3:3c:d0:13:db:3f:56:84:5e:f8:3a:e3:
f4:54:77:1e:81:af:f0:1c:d2:fe:b5:97:61:72:a9:3b:ac:cb:
0d:b0:d2:24:b5:ba:cb:ee:c7:d8:a2:5a:40:38:ee:4d:59:c8:
a1:2c:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:23:16 2025 by rpki-client