Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: UV5sBxtqVmaxtS1rSNGy5qt6EguexcjA3v/NCmpiOHE=
Subject key identifier: 10:8C:97:5C:E0:E9:EE:04:90:C5:C1:82:B7:23:98:F8:34:A2:83:E5
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019848C0B858E8E9CE8BAD63F40AA27F6AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0962
Signing time: Sat 26 Jul 2025 22:00:46 +0000
Manifest this update: Sat 26 Jul 2025 22:00:46 +0000
Manifest next update: Sun 27 Jul 2025 22:00:46 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: qnDJn48O9u1o7rMszpdnRmD0SwN2Zugiq2Ww4SSd39I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:b8:58:e8:e9:ce:8b:ad:63:f4:0a:a2:7f:6a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jul 26 22:00:46 2025 GMT
Not After : Jul 27 22:00:46 2025 GMT
Subject: CN=108c975ce0e9ee0490c5c182b72398f834a283e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:44:41:b7:82:25:c8:fe:00:36:9c:f2:6c:
aa:4e:4f:d6:8b:e5:df:3e:21:c7:ca:c7:26:eb:97:
32:92:4d:20:57:85:aa:8d:7f:e5:11:4a:0c:71:b7:
77:66:8e:a0:c9:ac:be:43:6d:c5:c9:2c:52:d7:87:
04:69:e5:a6:28:e8:91:f9:ca:b9:15:2f:29:c7:25:
12:ae:7c:28:46:e5:44:2a:96:f1:60:42:70:17:c4:
9a:18:ae:ff:ef:ad:d4:a8:21:0d:1c:7d:5d:72:86:
54:4e:0e:70:75:92:46:6d:0d:34:a4:63:94:e8:8f:
3f:fc:d9:a8:ab:da:d1:81:70:24:3f:23:dc:18:f0:
82:91:d9:02:7b:91:85:7f:8e:7b:d9:0b:bf:9d:ce:
53:9f:5c:37:d3:b8:4b:f5:c7:a8:bf:8d:db:da:e4:
a7:02:0c:41:d8:2d:08:2a:a5:73:e5:86:a2:88:0f:
fa:99:35:f4:9e:43:c0:b4:f3:1d:0b:ac:8a:5d:f1:
c9:85:57:30:75:eb:e3:76:8c:25:ee:76:dc:f7:16:
0f:43:57:b3:a1:c8:cb:11:c7:0b:e0:aa:38:72:a0:
d2:a3:c7:e7:f6:9f:12:7b:32:6b:86:ba:b0:36:1d:
e6:bd:01:51:53:8a:5b:f9:91:f5:0c:f7:40:a6:74:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:97:5C:E0:E9:EE:04:90:C5:C1:82:B7:23:98:F8:34:A2:83:E5
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:31:d3:36:83:1b:c9:56:03:95:04:b1:cb:49:62:88:3b:a1:
78:27:11:00:95:40:b9:66:23:f1:38:13:82:9c:d9:c4:d2:e3:
76:5f:99:7b:65:99:80:ba:5e:18:51:08:98:08:f1:b9:03:b4:
57:89:c0:b4:3a:b5:8a:91:81:9f:8b:56:39:f8:29:5b:7d:ad:
be:67:65:44:7e:6f:b6:cf:dd:0d:dc:55:ac:2d:d7:05:6e:40:
2a:72:94:99:74:b7:74:af:ae:2f:65:6a:f1:2b:76:8e:d1:2f:
a4:22:ea:ec:47:40:b6:c5:f8:d7:d6:b0:46:29:43:ae:08:1f:
0e:58:a1:a1:9c:3e:83:a9:9f:56:da:3e:11:e9:78:76:99:24:
de:4a:85:dd:16:95:a5:d5:85:f3:88:fe:4b:fc:f6:7f:e3:8d:
ba:a4:12:0b:e3:95:5e:52:86:a0:8b:b1:56:94:31:a2:c4:c7:
d0:a1:f5:2c:ff:bd:0c:2d:f5:73:b5:ad:15:ff:81:f8:e8:51:
07:8e:44:79:c0:15:7f:38:6d:26:15:84:aa:8c:42:cd:be:8b:
7b:e7:92:23:66:af:1f:d3:26:53:7a:5f:1d:e1:47:f9:c0:02:
ce:1f:79:dd:01:b4:c7:8c:b2:b9:92:0d:f7:ed:d2:60:5c:4d:
73:23:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:13 2025 by rpki-client