Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: 6xMaFbIS+PYGoaFRqGpj0tQFavHj1cXMDWaPe2pIJWM=
Subject key identifier: E1:2A:FC:D5:DF:9A:E2:02:70:F6:E5:11:99:B5:62:15:1F:F0:D7:C3
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 0198353A38A0BE59E6B9143DFCD81C82D00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0A65
Signing time: Wed 23 Jul 2025 03:01:04 +0000
Manifest this update: Wed 23 Jul 2025 03:01:04 +0000
Manifest next update: Thu 24 Jul 2025 03:01:04 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: yXtGe+NJnMaXb8doOhfCHhMQpLvrnCm7QuRrN5uNgUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:38:a0:be:59:e6:b9:14:3d:fc:d8:1c:82:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Jul 23 03:01:04 2025 GMT
Not After : Jul 24 03:01:04 2025 GMT
Subject: CN=e12afcd5df9ae20270f6e51199b562151ff0d7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:ba:ca:e0:b4:b9:79:27:ef:ed:c1:a7:a3:
e3:46:07:9d:5e:6d:fe:0b:fc:ec:af:82:ea:5e:b6:
d2:5a:bf:81:70:47:92:ba:a1:31:7a:58:64:ef:b6:
51:2f:5e:87:50:35:aa:99:83:2d:33:eb:db:06:f9:
d3:f0:dc:59:c6:c1:0d:a5:88:75:04:94:f9:26:ab:
89:dd:06:23:fd:cf:3a:80:97:b3:b6:36:4f:5e:b9:
4b:e6:f2:ea:a3:cd:01:8e:0d:8c:29:55:2d:0a:95:
f6:7c:0a:c8:02:ac:f9:15:26:c7:45:db:97:c4:f0:
7a:1e:c6:df:68:0a:13:c2:05:6d:98:e3:24:16:a7:
42:4a:f1:9a:0c:52:d9:2a:50:f3:e0:d9:d1:23:ed:
83:49:2c:04:77:4f:e4:8a:4c:54:8d:38:18:53:b0:
39:ac:b9:18:c5:fd:8a:ba:94:ce:87:82:c7:7a:c0:
52:4e:55:4b:46:b7:a4:e4:32:ce:75:46:90:38:7a:
0d:34:18:0f:ac:68:e8:97:94:7a:bf:87:4a:dc:99:
fc:07:75:56:06:0f:a0:d3:52:d8:7e:46:ed:0c:f2:
bb:e8:4e:bd:04:fb:5e:27:f3:69:b3:12:8c:04:ee:
9b:de:96:dd:42:e2:be:82:20:cb:86:7f:57:92:0e:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2A:FC:D5:DF:9A:E2:02:70:F6:E5:11:99:B5:62:15:1F:F0:D7:C3
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b0:2e:0a:f1:a5:7b:ee:df:1a:22:d5:a1:45:48:7c:ce:1f:
0c:e2:8c:6b:5b:68:7b:3b:af:1f:62:0a:d8:92:10:0b:6f:dc:
7f:fd:36:88:be:e3:93:24:20:32:81:ea:e8:12:27:ac:f3:25:
de:c5:c8:df:d0:42:22:7f:32:d2:af:4d:e7:02:02:e8:9f:ea:
33:c8:4d:56:37:e8:80:af:93:36:a8:e4:8c:18:ae:85:44:5d:
dd:25:b3:85:9c:eb:56:7a:4b:18:be:d5:af:64:b9:7f:3c:d5:
77:63:bc:b2:76:92:4a:6a:35:64:d3:d3:fa:42:5d:ef:84:0a:
49:38:2a:9f:10:c2:02:bf:05:92:d9:82:13:96:ba:e2:9b:03:
6d:c8:bb:d7:90:ae:be:b2:39:b1:81:f5:b5:70:f1:e2:56:3e:
18:40:7e:b7:2f:eb:4b:6b:29:04:81:29:44:84:9c:22:54:ba:
72:55:36:04:63:82:05:45:b2:af:2b:0c:25:3c:5c:4a:23:15:
08:42:d3:ce:b3:cf:78:97:9d:d5:71:a1:8e:e3:65:af:a4:b3:
4f:24:3b:38:a9:9e:22:8b:ea:6d:c8:69:37:a5:ea:8d:c6:3c:
26:4a:f9:f7:6b:8e:08:f1:e2:80:96:de:de:6b:33:cf:58:04:
69:f3:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:22:59 2025 by rpki-client