Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: /wdp1H8ywzDg6SGQi04Xbh/3W9ZosB0o5Whw1lPm+ns=
Subject key identifier: 02:E5:4D:76:69:4C:D9:63:05:96:8F:BE:2A:47:D3:7F:F7:3B:0C:CE
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 019848C0DD9347DEBCF240892B7782C6891F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 10C7
Signing time: Sat 26 Jul 2025 22:00:55 +0000
Manifest this update: Sat 26 Jul 2025 22:00:55 +0000
Manifest next update: Sun 27 Jul 2025 22:00:55 +0000
Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: nmxNAcjDM9Jue2ISwlUeVn+hcmB9R9+UrCnRgxC4lAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:dd:93:47:de:bc:f2:40:89:2b:77:82:c6:89:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Jul 26 22:00:55 2025 GMT
Not After : Jul 27 22:00:55 2025 GMT
Subject: CN=02e54d76694cd96305968fbe2a47d37ff73b0cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:2b:6a:03:f7:aa:8c:7b:d3:62:87:f0:88:
0a:55:8c:7c:8b:5c:42:58:0f:3b:8b:9e:4f:cf:51:
b7:51:5c:81:58:72:1e:98:c6:3e:7f:d0:6f:17:87:
0e:2a:d0:7e:15:e5:77:a1:94:60:96:8f:26:9f:a9:
d4:ee:09:75:92:05:d9:2a:07:91:00:d4:0d:b9:2a:
ca:56:4c:ad:93:2f:45:7d:99:0a:c8:20:09:99:a4:
20:3c:1e:d2:3f:90:36:84:76:cf:20:55:5b:b5:2f:
c0:89:fb:1c:03:04:01:e1:07:69:00:cb:5a:58:52:
44:fb:89:d6:a6:39:81:38:a7:50:2e:c9:61:2d:5f:
07:c3:35:c9:ad:0a:61:b1:c0:2a:7a:e8:fd:14:e8:
f1:49:52:08:fa:da:f0:6d:e7:1c:f2:47:62:f6:08:
c2:0d:10:7d:94:3c:41:e4:18:aa:69:9f:2a:24:cc:
a1:88:52:ba:43:69:c3:e2:7c:85:b4:a8:fa:67:ad:
55:3c:de:81:28:a9:e5:94:6d:3e:ed:58:81:c1:ca:
51:a8:5b:cb:8d:d0:2b:85:8a:73:84:4b:d8:8d:68:
a2:a8:b5:c2:e3:de:a5:a8:06:92:f9:17:29:c0:ec:
d8:42:2e:d4:fb:bd:0b:c4:8f:68:f8:ee:4b:18:3d:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:4D:76:69:4C:D9:63:05:96:8F:BE:2A:47:D3:7F:F7:3B:0C:CE
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c9:4f:38:f9:ac:6e:1f:63:f1:b3:c2:3f:7d:44:00:e7:f7:
d8:af:ff:49:1f:a8:c5:a5:dd:e1:c6:ab:7c:ea:28:47:ea:a1:
53:36:79:fd:be:86:f3:ce:8c:4c:78:b5:27:49:7d:2b:fd:bd:
b3:38:34:68:ac:f3:70:ae:e6:8e:e9:67:ad:b1:66:b9:81:31:
b3:46:86:30:a9:0e:ae:f8:7e:88:41:e8:3f:c0:a2:a1:a2:4b:
55:dd:5d:0a:17:06:d4:31:0c:41:51:bf:ee:0c:3d:50:5b:96:
ca:52:3f:d0:b5:ef:59:3e:c3:0d:d0:48:b4:13:e6:ba:f3:51:
b0:b1:0f:14:35:95:78:2f:4b:3a:74:65:b8:2c:6c:9f:82:d2:
9a:5e:c4:c4:9d:c6:1b:a5:9b:75:4a:4f:52:6a:49:0e:f6:38:
69:d6:9d:e2:40:9b:c9:18:3f:72:5a:3f:93:51:f4:8a:c7:83:
b2:9d:dc:4e:66:0b:a3:79:7b:be:8c:0b:95:72:ca:60:ad:c3:
2d:b2:9a:e9:41:95:a2:a2:57:30:6f:ce:ca:1f:11:61:37:f8:
fa:29:6b:1a:12:c1:d8:ac:eb:33:d8:fa:5c:14:bf:e4:cb:26:
40:dd:f2:2e:fd:9b:8f:54:99:2f:7e:35:ac:94:2d:9e:70:a3:
56:fa:68:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:43 2025 by rpki-client