Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: vqbzo2wV0MC/e1RcM2YQ9kJ2G1AHKf3TMnaDY3FddMs=
Subject key identifier: 74:05:B8:D7:BD:E2:98:2D:BA:22:9E:AF:0A:6F:DC:FC:07:11:A6:56
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 01984A09C2F19871BE2168EAB54EBE8F3638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 04:00:10 +0000
Manifest this update: Sun 27 Jul 2025 04:00:10 +0000
Manifest next update: Mon 28 Jul 2025 04:00:10 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: aTn2Q6uDOw7txGz8v5MB3zu+o2JHDLsMtTapol1mbOk=)
2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c2:f1:98:71:be:21:68:ea:b5:4e:be:8f:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Jul 27 04:00:10 2025 GMT
Not After : Jul 28 04:00:10 2025 GMT
Subject: CN=7405b8d7bde2982dba229eaf0a6fdcfc0711a656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:88:13:61:b9:2a:79:a4:8f:77:e0:f3:96:
46:23:e3:67:b9:a1:b5:46:36:b9:c4:b4:cb:92:17:
49:1b:bd:e3:94:a6:c6:b1:bb:98:a3:b6:a8:7c:a2:
de:fe:c3:35:44:06:6c:73:21:cc:a8:11:b9:92:c6:
01:51:37:ca:51:1a:c6:0c:28:58:f5:b5:3f:d2:1c:
95:ea:7a:91:90:24:3f:ed:ce:55:ba:25:4f:d5:92:
f7:b5:02:5c:79:16:43:11:02:46:aa:89:6d:ac:63:
41:ba:6d:e6:39:ea:bc:69:0b:2f:5f:a4:b8:35:9c:
ce:b2:32:e9:70:d5:e1:90:00:dc:b2:d6:94:ed:ed:
ba:e3:b4:f0:a5:fa:56:5b:50:18:b8:cf:7a:9c:d4:
45:b2:ff:2c:2b:cf:b0:18:e3:2b:9e:b1:10:c6:15:
0b:7b:f5:1b:31:d4:12:c4:24:09:dd:ee:6d:7c:2e:
65:8f:58:b4:2b:10:5e:92:b6:87:93:91:13:f2:0e:
16:a0:88:31:12:84:c9:27:50:10:2c:15:2e:55:8d:
a9:ba:fd:17:38:90:e9:cd:76:d9:33:b8:4a:67:65:
4e:c4:c3:cc:55:e3:b1:50:c2:d3:99:64:53:a6:9f:
45:ec:2b:79:d8:63:5e:e1:88:3e:e0:20:4b:4c:40:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:B8:D7:BD:E2:98:2D:BA:22:9E:AF:0A:6F:DC:FC:07:11:A6:56
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:65:6b:ea:b2:89:4f:80:6e:f1:95:90:35:ec:6b:70:e0:10:
80:b3:79:57:23:f9:95:58:ad:37:d1:c0:11:00:78:fb:56:c1:
ec:56:19:ef:4b:0e:af:73:31:08:b2:de:63:64:17:df:54:01:
c0:71:c8:e3:e8:7d:6b:89:dc:62:4c:dc:18:6b:ce:6a:0f:f3:
eb:8f:1a:26:b2:99:ce:01:c4:4f:c7:b9:97:22:eb:e2:e3:5f:
60:5d:ac:30:32:47:17:d0:53:a1:75:bc:17:8d:54:e0:59:0a:
f1:83:ff:a8:4a:e2:f0:38:c4:6d:0e:b2:65:39:45:49:5d:2c:
a3:df:d2:a0:4e:94:dd:16:e0:5d:4c:e2:ed:9f:d9:5e:8a:26:
f0:fe:40:d2:45:e8:8d:60:85:c6:13:8f:8c:66:d5:45:89:17:
4a:d4:cb:83:b9:d8:2c:36:b0:d4:e8:70:92:28:b1:7e:65:a8:
a0:b2:39:2b:e0:c0:9a:33:1e:8f:37:b4:4e:ce:2d:b9:23:cf:
5f:29:b9:85:06:c7:66:94:d2:7d:f3:15:04:51:06:23:e4:0e:
f3:a4:60:09:00:7b:12:b5:03:4f:50:4e:50:b9:25:46:ac:63:
36:bd:bc:15:e8:d0:9d:32:c8:74:57:ad:2e:21:96:69:9a:95:
4d:e3:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:04 2025 by rpki-client