Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: VNGHwlDi1phcdyFTMbQ0o7gToeUGELr6Rf9dpir3K+E=
Subject key identifier: B2:1F:24:98:DB:F3:CB:F4:61:9B:0A:8B:E7:B9:18:6A:16:E6:5A:4B
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 01985E362A42449DFB9DCCE174FD71F13BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 10B0
Signing time: Thu 31 Jul 2025 02:01:04 +0000
Manifest this update: Thu 31 Jul 2025 02:01:04 +0000
Manifest next update: Fri 01 Aug 2025 02:01:04 +0000
Files and hashes: 1: 8m52WXmC6DqVDLH9lI-6WR69u6s.roa (hash: 0BZo5xqp89NE8ExAG9qblE2VcBVND0AxeF/zdrSRKa8=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: QXudkJWIs51Yh2hCaJCjzAx4MnD7LKK09cMfbQefG5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5e:36:2a:42:44:9d:fb:9d:cc:e1:74:fd:71:f1:3b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Jul 31 02:01:04 2025 GMT
Not After : Aug 1 02:01:04 2025 GMT
Subject: CN=b21f2498dbf3cbf4619b0a8be7b9186a16e65a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:29:68:12:b9:30:48:1b:69:cc:51:c0:6c:0d:
a8:67:84:fd:ca:99:8e:64:2d:61:d8:da:08:82:3f:
6b:2a:49:6e:bf:c5:a9:c8:ca:5a:31:d2:7c:55:a7:
56:b4:92:71:71:ca:e4:ac:5f:11:b5:a6:4c:9b:88:
d0:88:f2:0c:95:ec:48:7a:5b:eb:5a:85:dc:93:ad:
6f:9a:39:bb:00:c8:9a:01:3d:79:01:b3:7b:d6:e1:
8c:3d:1e:fe:84:2f:5f:78:cc:21:52:4e:be:68:f6:
2a:c7:f5:cf:f7:d1:9d:f8:5b:cd:b7:fa:d4:88:61:
2e:34:4a:ea:cf:a9:fe:4a:21:36:8f:ec:c6:77:d9:
49:8f:18:0e:38:ec:fc:e0:cc:09:ea:2d:c4:fb:dc:
7c:a5:bb:90:62:df:09:58:8e:da:a9:f1:84:53:50:
99:1e:4b:8d:07:bf:22:89:46:af:ad:57:df:ed:c0:
5e:cf:2a:46:f6:b5:14:0b:00:3d:13:d8:3f:6b:51:
2d:cf:6c:de:29:97:55:df:d1:21:2e:07:13:39:da:
a7:a3:3a:99:48:80:23:50:35:c2:ad:90:7e:50:27:
e2:5a:df:2f:ad:47:4a:5a:4f:d6:ca:72:41:87:a0:
e8:a2:e5:a4:f3:31:e4:fd:20:28:fb:36:55:f0:8a:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:24:98:DB:F3:CB:F4:61:9B:0A:8B:E7:B9:18:6A:16:E6:5A:4B
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0e:91:da:73:e4:ef:8e:a8:b8:94:1a:a3:69:ad:90:d6:60:
3c:38:cd:dd:1b:5d:eb:ed:8d:37:d2:53:09:23:fc:d9:9c:c1:
e1:40:fc:8f:d7:76:09:d5:eb:f4:e1:07:1b:36:b5:db:4a:b1:
b9:33:b9:29:9e:87:12:9e:65:b5:7f:b5:13:6a:77:91:38:0f:
37:b8:64:f2:eb:b9:21:dd:46:68:e0:e3:1f:21:1b:28:f1:1f:
74:ed:9d:de:40:0f:bf:11:7b:17:1f:71:8b:99:8d:bd:b5:73:
97:95:f5:ca:83:73:78:db:36:1a:0a:ca:80:60:d5:fd:23:ff:
4a:56:80:24:99:0a:1e:1e:39:51:7d:80:71:2e:cc:f2:39:56:
09:b1:d6:ef:32:b4:38:e4:8a:05:93:36:19:cf:89:86:b5:ae:
35:b9:20:5f:34:cb:24:b2:b7:18:c4:21:c3:76:dd:1b:ee:ed:
f8:a3:e5:7c:04:ae:c1:1d:63:90:32:0f:67:72:5c:91:f9:7c:
e8:fb:aa:e2:8e:24:25:e1:16:a9:83:18:91:84:e5:3a:ef:07:
40:96:1d:38:bd:6e:00:ff:a1:d7:5b:ef:36:f4:a7:07:28:27:
89:06:87:42:ef:43:e2:ff:f6:b1:62:ec:a3:0a:d9:11:97:31:
8d:5c:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 04:03:24 2025 by rpki-client