Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: GQ3rjnjgs//Hv+E+rTBpPrqEDaDy7zdyDrJXgNjDjyA=
Subject key identifier: 5E:43:E8:DE:58:4F:A7:64:75:23:F9:6D:F4:C4:B2:6B:A1:96:8B:11
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 01984965A0BCEB21FE7C989283FEF1C9FF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 143B
Signing time: Sun 27 Jul 2025 01:00:53 +0000
Manifest this update: Sun 27 Jul 2025 01:00:53 +0000
Manifest next update: Mon 28 Jul 2025 01:00:53 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: sFbmC/bMxip3k7hHGtwPsQvjAmllujC/8Sdn7hSN/IY=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a0:bc:eb:21:fe:7c:98:92:83:fe:f1:c9:ff:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Jul 27 01:00:53 2025 GMT
Not After : Jul 28 01:00:53 2025 GMT
Subject: CN=5e43e8de584fa7647523f96df4c4b26ba1968b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:68:56:80:46:99:e7:21:ea:00:7a:f8:ed:
8f:5c:33:17:f0:ca:71:ca:f5:1a:20:9f:4b:db:19:
d8:a6:01:88:f5:87:d7:33:1c:ea:76:af:3d:65:73:
31:a2:16:47:0c:e1:0c:42:7f:bd:50:5c:7f:05:64:
ef:15:40:3f:3b:7c:6c:db:64:56:b1:c6:09:63:c2:
9f:ba:ff:fb:25:d9:01:9a:6a:a0:4e:1b:59:43:6b:
b8:6a:62:5f:cf:83:34:6e:5d:ea:3a:a4:e7:00:8e:
71:37:86:93:9e:56:0a:5f:52:df:91:bc:b9:16:58:
04:48:27:24:4e:33:e3:f8:73:78:6d:94:a6:2c:1a:
5a:32:8c:b8:25:e1:c5:72:d7:61:ca:bf:f5:00:97:
c8:ea:66:fa:89:48:93:86:1f:5f:c4:6a:ae:93:0d:
83:ff:af:a9:03:01:cb:8e:cc:36:9f:67:9c:6c:ab:
21:72:bc:d2:ff:ce:e9:a3:3d:69:29:18:10:4c:d5:
81:b9:a3:70:c5:79:9b:0c:8b:f4:95:77:90:f3:14:
ce:8e:43:24:3c:ab:ee:d8:69:e1:55:00:ab:ca:33:
38:a3:c6:df:87:d5:3d:59:b6:f6:a1:98:5a:49:d8:
36:5e:db:6e:c7:e3:33:8d:ce:fd:ba:57:78:0b:f6:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:43:E8:DE:58:4F:A7:64:75:23:F9:6D:F4:C4:B2:6B:A1:96:8B:11
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1c:8c:2d:3a:d4:27:0e:64:0a:12:6b:bb:85:2d:dd:26:87:
1a:28:84:f0:c8:29:c4:5b:3e:c0:81:bb:73:ae:63:2f:9a:06:
cc:f5:5c:7f:2d:5f:81:8b:70:62:95:20:df:0f:15:f2:f5:01:
4c:2a:dc:f8:ea:06:4f:3b:34:cc:02:97:5d:52:e3:0b:62:29:
cd:43:e1:7a:0f:e9:ed:30:78:a8:c9:ff:78:55:35:18:ae:3e:
88:d6:48:9d:34:9a:ed:f5:65:5e:1e:ab:9f:17:05:c7:5e:3c:
1a:e1:6e:18:fb:99:37:dd:22:25:84:0b:50:e3:2d:a1:ec:72:
cf:aa:ac:98:2e:4d:77:97:14:83:66:aa:68:5d:31:20:f8:a7:
72:9d:83:a7:b0:43:a6:98:ca:ea:59:f1:4f:ac:98:1e:46:94:
a6:27:71:8e:4b:3e:8a:de:69:2b:af:1b:3a:54:a1:41:32:e6:
d3:57:91:5b:85:8b:a8:bb:e1:f7:11:f9:fe:13:eb:77:3b:83:
fd:29:d9:7c:ef:71:2a:88:c8:af:33:e4:d1:a7:76:eb:e0:4b:
39:d2:e2:8e:0e:48:8c:2c:34:cb:36:6d:7b:23:78:c7:23:60:
bb:b2:52:21:9a:0a:ab:c7:3a:f5:6f:7b:e7:14:d7:63:91:8a:
fb:d3:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:24:05 2025 by rpki-client