Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier: kFnTygwxy+Vn4bmkCJxKpG6WJNx3ijQ4Qcwkcb1yObc=
Subject key identifier: C7:E6:B0:B9:4C:13:BF:73:FC:48:C7:F7:F0:FA:9C:0B:35:89:AB:0E
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 0199221E7EF1B42600C70AD204B2EC11F64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number: 1415
Signing time: Sun 07 Sep 2025 03:00:47 +0000
Manifest this update: Sun 07 Sep 2025 03:00:47 +0000
Manifest next update: Mon 08 Sep 2025 03:00:47 +0000
Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: vRptIt9X5rrytG0levfZMih381PCE/XrJmUFp8b1Y8g=)
2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:7e:f1:b4:26:00:c7:0a:d2:04:b2:ec:11:f6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Sep 7 03:00:47 2025 GMT
Not After : Sep 8 03:00:47 2025 GMT
Subject: CN=c7e6b0b94c13bf73fc48c7f7f0fa9c0b3589ab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:b5:1e:5f:b5:81:ae:8e:d8:4e:6d:5c:35:
aa:c1:43:31:ec:3d:07:ad:f6:5f:d9:aa:13:29:e2:
16:5b:ff:5f:ea:28:f0:82:13:3c:62:15:3b:b6:c9:
2e:b5:41:08:2d:e0:dd:52:39:71:f5:b5:2f:c8:99:
dc:33:8d:f3:b4:2a:40:9f:b9:d0:64:70:f3:4d:4d:
97:6a:05:5c:fc:1e:69:2b:fa:6c:44:2e:7c:71:25:
f0:63:e3:eb:0c:39:1d:26:91:54:7c:41:ed:ee:3d:
88:44:19:e2:6c:46:99:42:8c:4f:8e:69:d1:a3:a1:
0a:77:6d:58:54:9f:8a:1a:72:0c:2a:e5:71:cb:64:
b1:d0:94:9e:27:c9:09:0f:eb:b6:3b:78:0c:a8:8b:
aa:89:e5:cf:64:55:1c:74:f2:60:3c:ac:46:ae:d9:
50:c6:1e:8b:18:5d:2b:88:38:b7:dd:78:1e:65:5f:
25:10:b2:10:74:ef:6f:6d:90:2f:b4:a7:51:39:e3:
73:09:96:d1:dc:da:f0:62:43:48:34:a4:3a:32:d4:
f1:3b:04:ca:28:c9:32:32:12:ab:c4:8a:9f:5b:f9:
ea:ee:ee:36:f2:6c:67:78:77:33:97:2c:ce:db:c3:
38:d5:7e:ba:37:1a:37:f4:fa:18:d1:c8:bc:45:b0:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:B0:B9:4C:13:BF:73:FC:48:C7:F7:F0:FA:9C:0B:35:89:AB:0E
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:b9:c6:8d:68:c0:7a:22:ee:9b:01:99:54:89:2a:47:d2:a0:
2b:7b:d6:11:a4:37:e9:fa:22:9f:b5:c0:ee:c3:e8:6e:d8:e6:
52:73:21:57:e1:df:19:4c:30:10:db:38:f1:1f:9a:d1:d2:96:
ea:5d:e1:cb:d9:71:7d:89:d5:e6:0d:92:ea:01:8b:5c:19:ca:
88:a7:8e:d9:a9:a2:91:a1:58:09:a4:13:19:df:de:dc:81:48:
76:83:53:ec:ce:3a:97:2b:10:46:82:bc:c7:07:fa:dd:72:18:
a7:b3:f3:ed:f5:51:33:56:fa:1f:b4:ff:c4:3b:0f:c7:28:5f:
05:0c:09:ac:93:fa:9b:bf:85:6e:bb:ab:70:04:f5:5c:cc:42:
c6:0d:2f:65:10:c0:16:4a:4b:f0:b9:03:6f:75:a1:70:d7:76:
a4:a1:80:35:6b:db:5d:0d:c7:78:7f:b2:c6:35:e0:8a:28:6e:
78:7b:14:f3:b3:6e:43:b6:92:de:ad:7b:2c:30:90:85:d6:b3:
df:e5:7d:21:c9:9c:48:95:71:12:cb:5b:01:81:76:52:38:79:
22:c1:82:a9:52:df:d8:d3:4e:8d:5c:77:52:78:63:41:90:e8:
de:06:c5:c5:c2:26:a5:d6:a8:53:62:9a:bb:81:68:b8:30:51:
cc:23:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:22 2025 by rpki-client