Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: 2vdnqZr2BTvaGA0mzNQKqtxU6IUI4U0TubO+te0AXUM=
Subject key identifier: 92:AD:FA:23:EA:90:7E:F6:E3:90:50:3A:FB:1A:59:5C:58:25:C4:6B
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 01985AFE4A15B790DE91971E0A427B9062BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 1349
Signing time: Wed 30 Jul 2025 11:01:11 +0000
Manifest this update: Wed 30 Jul 2025 11:01:11 +0000
Manifest next update: Thu 31 Jul 2025 11:01:11 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=)
3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: Crq5G3l6YNsB/LiWtORmqJUGWLxdoefJjzY8yPC8CM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:fe:4a:15:b7:90:de:91:97:1e:0a:42:7b:90:62:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Jul 30 11:01:11 2025 GMT
Not After : Jul 31 11:01:11 2025 GMT
Subject: CN=92adfa23ea907ef6e390503afb1a595c5825c46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:e2:97:d8:53:13:71:fc:2c:2e:a2:99:1b:
a0:19:1e:45:e5:67:97:aa:18:f9:89:09:bc:e4:9e:
26:38:37:a5:00:09:be:fa:73:d4:b7:cc:b2:69:ac:
05:20:53:3f:6f:26:75:94:60:c3:ff:61:22:02:f2:
1b:26:d1:95:c9:0d:3a:b6:95:81:7a:d9:cf:20:68:
87:88:bd:fd:f1:96:93:1e:96:f1:93:0b:b7:2e:2e:
79:8a:07:b3:bb:8c:ae:44:75:98:b9:5f:89:c3:c2:
07:8d:21:7a:9f:a0:17:e7:2c:c7:09:fb:3e:18:d8:
00:2c:8a:2d:9a:ff:a4:b4:a7:f8:e3:2c:a1:91:aa:
a8:b6:20:86:c6:f6:6b:28:f6:8d:fc:0b:c2:72:ef:
29:35:24:27:bf:80:7d:f9:f6:4e:27:7c:ed:37:86:
5b:85:58:e8:0d:ad:e3:ce:3b:1a:93:1a:a6:82:b6:
3e:10:71:44:99:a4:19:12:59:7d:7c:cb:9f:91:78:
72:88:77:a5:b0:05:cc:0b:5e:2d:0d:43:ff:44:f3:
5e:08:de:b6:0f:0e:f3:01:e2:e4:5a:51:2c:79:0e:
18:6e:eb:2a:e9:87:32:c8:fe:d9:7d:92:30:1a:16:
5d:4c:61:9e:ad:f9:d4:1b:9a:b8:8b:64:c8:d5:c8:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:FA:23:EA:90:7E:F6:E3:90:50:3A:FB:1A:59:5C:58:25:C4:6B
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:31:54:2b:40:99:54:c2:87:91:52:dc:a8:a5:0f:c4:8d:d7:
56:7f:71:fe:57:d4:8a:c5:4c:62:7e:63:7b:b4:63:e1:77:c1:
a9:93:ec:91:56:73:ef:2f:13:1a:5b:8d:90:83:8d:fd:d8:01:
b1:c8:3b:f0:27:e7:a8:77:e8:bb:05:a9:2f:7c:f4:68:64:ec:
2b:ed:ec:05:26:0f:0e:ad:31:8e:f0:cf:3d:fc:d0:6d:c8:31:
07:7e:d5:24:ec:41:ae:07:f4:39:da:35:c1:18:41:43:13:78:
de:aa:e7:26:4d:3e:ad:d2:16:33:35:c0:20:cf:32:54:0e:ae:
ee:cd:34:74:52:3f:69:18:78:bb:a8:49:c4:11:5e:80:db:2f:
04:7d:72:36:71:e3:23:f9:df:27:cc:58:7d:d3:56:2e:69:06:
2a:7c:73:7e:30:e1:6c:3d:b0:a2:a3:10:84:ce:43:2a:1b:28:
bf:f3:78:64:95:31:01:0c:c7:a7:52:e8:1f:f9:4f:6f:e6:ab:
df:ce:3c:16:d7:87:d6:ed:1b:7a:5a:bb:1d:e9:85:40:c3:c1:
d4:75:98:2e:84:45:c5:6c:bc:3b:6f:02:ca:17:3e:ba:82:be:
53:7d:cf:9a:4e:d4:0c:7a:29:a7:90:99:d2:98:d8:2d:99:2b:
95:8b:3d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 15:10:11 2025 by rpki-client