Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier: lf0MlJd6Wck7bnShkh11raRA8uR+bBUJcek1cmHpUfk=
Subject key identifier: 27:5D:74:BF:4A:12:09:8B:EE:43:1F:46:ED:F4:3D:FC:EC:53:5C:03
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 01991C542677A5D191BC724729698F713934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number: 1172
Signing time: Sat 06 Sep 2025 00:01:40 +0000
Manifest this update: Sat 06 Sep 2025 00:01:40 +0000
Manifest next update: Sun 07 Sep 2025 00:01:40 +0000
Files and hashes: 1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=)
2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=)
3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=)
4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=)
5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: MQzYMGBbUDZuB0Myu1KroWFwKA47z6iNQcqPBSrgo8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:54:26:77:a5:d1:91:bc:72:47:29:69:8f:71:39:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Sep 6 00:01:40 2025 GMT
Not After : Sep 7 00:01:40 2025 GMT
Subject: CN=275d74bf4a12098bee431f46edf43dfcec535c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:ad:bc:49:9d:03:75:74:12:a3:de:df:0c:
79:e8:98:ce:16:ba:14:4e:e6:cc:91:63:79:e6:b5:
24:5f:bb:d3:a3:a8:ae:78:44:1d:6b:4b:7e:22:93:
06:42:db:d7:9f:2a:0d:8c:b6:e2:e8:bc:b6:6a:de:
93:25:97:91:08:c8:d6:09:07:5c:3a:f2:47:2d:3a:
e5:09:73:92:4b:6d:bb:fc:70:a9:03:e2:e1:e4:90:
5b:5c:89:ee:26:97:8b:19:dc:ae:fe:19:ac:b9:6f:
e0:34:72:bf:14:8e:9f:15:52:15:e4:24:5a:c9:de:
bd:3e:db:ee:2b:84:c6:a8:75:b4:7c:48:dd:4a:5d:
73:c3:3e:a5:08:c9:83:bd:8d:67:47:8d:87:2e:03:
a5:a9:4c:51:53:76:4f:ba:08:7e:3c:58:34:8a:b6:
86:3b:1b:28:6f:bf:e3:8c:5d:5b:1c:30:76:fc:bc:
61:11:83:d1:ce:26:e5:5a:c4:91:8a:b8:2b:18:d8:
2f:49:66:0c:7c:d0:de:9b:95:c9:a0:2c:d6:b1:e9:
6d:6f:5d:4b:ff:0f:0a:25:51:e5:aa:43:11:cb:0c:
a2:40:38:c2:a1:80:34:3e:62:b2:88:fd:81:d4:5f:
e4:fa:ed:f6:95:0a:18:0d:30:73:ea:dc:43:66:bb:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5D:74:BF:4A:12:09:8B:EE:43:1F:46:ED:F4:3D:FC:EC:53:5C:03
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ca:85:58:7f:33:11:77:d7:4a:29:28:21:90:a7:d9:29:50:
87:65:ef:71:df:79:51:b6:bb:54:c3:df:82:80:8b:56:08:50:
77:5e:ed:55:4a:4b:92:7a:2f:4f:90:bc:c5:09:56:7b:b5:7f:
e5:63:1a:72:e8:61:dd:80:f1:22:2f:b6:72:be:92:25:05:80:
99:41:b3:2a:12:95:16:65:f0:a3:cb:d0:a0:ca:7c:d6:11:20:
2c:80:60:41:0b:c9:5b:0e:ea:4f:6d:11:5a:8d:3a:36:a1:d9:
51:04:0a:ca:a9:7d:41:54:bf:d3:14:2b:b0:dd:9c:ea:bf:d2:
92:d7:56:23:3a:4b:1d:30:84:51:8f:6f:70:6e:c3:8a:b8:e8:
83:e7:45:ba:bd:57:34:00:b8:20:8e:fe:6a:a2:e4:6a:89:d8:
b9:5b:6b:92:ca:b1:9f:7f:89:dc:20:65:1d:0d:6c:ec:82:ba:
75:5b:27:3d:6c:f6:6f:78:04:12:f0:f9:2b:91:ab:78:a1:55:
10:7a:0d:65:44:47:28:98:c5:d1:db:17:ea:cb:4e:05:2e:ae:
ff:b5:48:a6:c4:95:bc:88:0f:a1:b6:ed:27:d9:f6:45:87:c1:
7a:1d:d5:f2:dd:b2:77:eb:4f:d6:bf:d9:f1:ac:a5:95:15:f4:
07:7e:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:09:26 2025 by rpki-client