Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: ecZQ26TBVa/IOcNSauDHZGdhvHJbqI9ssZ716JEhij8=
Subject key identifier: 4D:D0:FE:78:A6:A8:62:F3:3F:0D:7F:02:2F:B3:59:82:C4:2E:44:C5
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 0199315A90BBF033B951D0FEF6676C5232F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0705
Signing time: Wed 10 Sep 2025 02:00:42 +0000
Manifest this update: Wed 10 Sep 2025 02:00:42 +0000
Manifest next update: Thu 11 Sep 2025 02:00:42 +0000
Files and hashes: 1: 9HC-dVjnSoiBjTI-wFW5Aqlq_oY.roa (hash: mG2Ma2dDqG+dXSsvT9OJk25xVpUl5+N3IsrwQpPJXsQ=)
2: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (hash: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=)
3: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: vvfsXOLR5wpdq8j9PhUAK2zRxzVFRsGVowp60dKp7H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:90:bb:f0:33:b9:51:d0:fe:f6:67:6c:52:32:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Sep 10 02:00:42 2025 GMT
Not After : Sep 11 02:00:42 2025 GMT
Subject: CN=4dd0fe78a6a862f33f0d7f022fb35982c42e44c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:73:b0:17:b1:9d:7f:5c:30:6b:6a:f4:6d:
5f:e3:9c:3c:66:ff:48:4b:fa:81:8e:48:30:83:cc:
b5:9d:1b:67:53:22:73:9c:91:43:2f:f4:dc:03:19:
e3:41:b0:98:6a:4e:e9:c4:ec:3f:70:05:07:ba:ed:
4f:86:ca:cb:15:eb:7e:e1:25:2e:76:57:93:29:c6:
2a:5e:9f:5e:92:33:a0:53:5d:58:5d:64:f6:3e:7b:
50:db:2c:0b:ae:aa:7d:c1:3a:17:79:60:ec:76:45:
47:ac:ce:e6:3d:39:d5:88:4a:11:c1:aa:14:29:5d:
88:a9:3a:cc:bc:30:7c:61:ca:03:b5:e0:4e:a1:ed:
42:ad:bb:36:5b:aa:e8:cd:6d:8f:36:c3:a2:88:8f:
26:12:b4:2a:69:7b:df:ea:18:f8:7b:e5:fc:2c:94:
9d:75:56:8e:6e:d6:75:d2:25:1c:04:be:52:de:72:
ae:59:55:ef:b6:0f:b6:78:ea:96:f1:5a:d1:b8:b8:
b7:11:c1:0d:bb:9a:56:52:b5:bb:db:76:06:b5:77:
b3:6a:80:2e:c1:88:1b:d2:0d:9c:ba:7d:75:9d:fa:
9c:cb:54:6e:07:4b:69:cd:60:61:41:cf:49:28:ea:
7a:81:9e:10:df:1d:7b:17:9a:9e:58:92:15:32:8d:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:FE:78:A6:A8:62:F3:3F:0D:7F:02:2F:B3:59:82:C4:2E:44:C5
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:45:83:61:fc:d0:7a:bf:aa:21:70:8f:50:47:0d:7a:2a:e3:
c6:63:dd:e1:51:d4:d3:6d:46:29:32:07:a6:6f:f5:73:25:be:
3c:ab:cd:35:52:eb:47:00:0f:a0:99:b5:7b:ef:53:d4:d4:25:
c8:bb:fb:d5:59:ac:0c:4e:20:21:1c:9b:7e:8d:b5:8e:37:6b:
69:71:0c:46:fe:ef:1a:3a:d2:83:d6:a3:71:d4:c1:21:ff:b9:
37:b2:c3:c2:72:84:67:aa:f8:bf:d1:9b:39:1a:21:b1:24:63:
c2:f0:0a:c2:ae:9b:e7:81:b8:4f:d1:2d:02:f8:33:3d:12:c8:
11:70:c9:cf:95:05:96:00:85:d7:91:a7:8f:14:36:b8:33:b8:
0a:6c:1d:c7:fe:46:9c:f7:06:d9:91:d9:87:bd:7e:a7:5c:91:
4d:63:c2:aa:ee:48:5b:e3:72:3e:41:79:a5:1f:9d:d9:ea:fb:
65:e6:ab:e4:06:88:41:1a:ca:43:85:fb:f9:51:41:2a:0c:c4:
14:88:85:a3:10:54:27:b7:e9:64:8d:35:58:2e:1e:c7:88:07:
84:1b:03:31:c8:31:c8:a0:6b:d4:bd:8b:6a:40:76:8e:5c:4a:
b6:93:33:f7:ea:c8:12:07:86:29:47:5c:32:77:21:5b:06:dd:
30:67:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:26:49 2025 by rpki-client