Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: GcyiB6svTPhPiVPeiYTE86lv9u2R8B28sqjma1UuZM8=
Subject key identifier: 47:72:B8:DE:DE:00:40:FA:45:ED:F4:54:97:27:E2:86:F1:A9:CB:93
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 01992B8FD866A7FFCF7F0FE186F68B441979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0A9C
Signing time: Mon 08 Sep 2025 23:01:11 +0000
Manifest this update: Mon 08 Sep 2025 23:01:11 +0000
Manifest next update: Tue 09 Sep 2025 23:01:11 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: KmXMTfAmkMOiN3bhs6ldiymLxonlJu7gNq7q/gE2hrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:8f:d8:66:a7:ff:cf:7f:0f:e1:86:f6:8b:44:19:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Sep 8 23:01:11 2025 GMT
Not After : Sep 9 23:01:11 2025 GMT
Subject: CN=4772b8dede0040fa45edf4549727e286f1a9cb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:d5:cc:61:8d:21:9a:7e:a8:fe:dc:a6:d8:
0d:e8:91:4e:91:47:85:ec:e1:63:4f:00:5f:08:b7:
0f:91:f1:98:66:be:fc:ee:b0:0e:af:8a:cf:d9:97:
cc:45:ed:51:03:8e:d1:41:04:f9:6a:66:5a:ab:8c:
4c:99:c7:28:c9:52:7c:ea:f5:c6:46:33:7d:23:07:
1e:76:8a:d1:bc:c1:0e:9d:46:c3:ec:f7:23:49:90:
fa:08:04:c8:dc:42:36:6c:9e:99:d2:ef:51:ec:77:
73:d4:f3:ff:8f:2a:ef:f9:5c:9d:00:8b:99:be:ce:
62:c8:b3:50:ac:4e:61:12:33:44:49:4b:26:b6:73:
8a:70:72:45:a4:ec:01:77:ff:e3:5f:47:5b:aa:a0:
79:73:9d:93:d8:17:5e:4a:64:75:bc:d9:b9:63:6a:
19:06:d8:af:d1:fa:25:33:3e:e0:c7:d8:c9:00:51:
96:15:03:bb:67:60:c3:80:dc:62:c7:2e:11:68:9c:
9b:2b:9a:5a:1a:93:ee:53:73:90:4e:b0:ec:52:35:
5b:59:18:16:93:e6:ec:ac:55:04:f2:36:0f:06:3b:
59:7c:4c:3f:6f:5c:4d:6f:83:f1:b9:68:70:b4:9f:
ec:60:0f:50:4c:87:76:f3:f4:f5:34:b1:bf:5e:5b:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:B8:DE:DE:00:40:FA:45:ED:F4:54:97:27:E2:86:F1:A9:CB:93
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:f8:4d:ba:df:a5:5f:28:df:7c:de:a3:33:90:07:68:a2:
5d:fc:6a:28:bd:ec:91:cb:b2:f4:ef:95:54:eb:44:1c:c2:64:
f4:33:ab:33:b1:5b:a2:80:de:0d:32:9b:6b:cc:6d:8b:b6:e7:
c8:d3:f2:95:42:96:bb:1e:d4:f4:90:39:7f:43:d4:60:80:70:
f6:6b:ff:a8:64:ce:74:b2:11:55:31:81:4c:37:27:60:63:05:
95:0e:d7:0c:ab:d5:73:b4:98:db:b8:97:3b:74:ad:cf:1d:a2:
22:64:36:d8:e4:29:38:6c:ba:25:22:98:4a:75:75:ef:ee:5c:
a0:be:0c:be:a7:0a:98:92:5f:98:5f:e2:1c:c5:34:ef:73:55:
5c:c0:b2:0d:0a:01:1e:8e:bf:b5:0f:61:b7:27:6d:03:ad:ea:
d0:36:dc:33:94:e8:b7:ea:9d:b5:d6:56:13:b0:44:6f:5b:0f:
49:13:cb:f1:ef:86:b2:fc:42:86:81:fd:3c:ba:87:d5:7d:58:
82:e0:a1:34:05:b4:55:52:65:25:79:f6:f0:c9:85:37:2d:87:
04:e6:9e:62:c0:e8:ee:7b:d0:7c:46:7f:06:43:f9:36:0a:24:
bf:f0:22:ee:6c:e9:37:ac:05:10:b9:08:5a:a9:7e:ea:45:63:
61:17:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:58:10 2025 by rpki-client