Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: UgQslxFmjaXM9T+s8/yLdCavSaB9/QQoWTJLeNRc8ns=
Subject key identifier: 39:EE:66:FD:23:1A:36:40:F8:1A:A9:FE:FB:DF:84:95:76:42:58:E8
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019953E68590AF20FB869456E49AA02F4BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0D9E
Signing time: Tue 16 Sep 2025 19:00:40 +0000
Manifest this update: Tue 16 Sep 2025 19:00:40 +0000
Manifest next update: Wed 17 Sep 2025 19:00:40 +0000
Files and hashes: 1: BRx8YXqDNB1GFUFqyh6QeZ00QCQ.roa (hash: o3eKIyn+wElbYPzG51u2wAS6yMUVN8sHDDwj5Rm2E/Q=)
2: W_LcH2rarIjndbdlJP8dn2zg91I.roa (hash: ABTtDVp9Hfq4kC7VPzIn0vf/HFoFzUVcLY2Iv5yLp7M=)
3: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: A5KfnYm+GecJi20nc/nhJjVPQaexiUrwrmIf4Op6qGk=)
4: nmvw5bWIi1oZlR595dhxiK83LVo.roa (hash: 6i6AlqZjdecP77aW9/z93M4lDAcDWuNi8d0hwYlB348=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 18:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:e6:85:90:af:20:fb:86:94:56:e4:9a:a0:2f:4b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Sep 16 19:00:40 2025 GMT
Not After : Sep 17 19:00:40 2025 GMT
Subject: CN=39ee66fd231a3640f81aa9fefbdf8495764258e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:76:3c:f7:76:9e:50:3e:cb:1f:50:59:c5:
21:c6:5f:56:39:f5:a7:03:3d:5a:37:0b:c5:f3:6e:
aa:5d:c7:ab:9a:6b:d9:94:ca:07:9e:2b:bd:5e:46:
fc:ed:dd:ba:8d:22:22:33:19:90:44:3a:d0:0e:f6:
21:24:d4:70:d1:fa:ba:af:12:7e:35:c4:b2:1c:e1:
54:90:61:ef:e4:6a:6d:b9:61:50:20:44:67:22:36:
d3:19:87:e6:8a:37:40:65:21:0d:62:92:b5:2d:bd:
db:ed:ba:99:ff:01:32:55:38:9a:92:3c:aa:67:57:
a8:1e:a4:aa:8f:2b:20:26:a0:5a:ac:f2:4b:c4:8d:
95:19:04:b2:59:9c:5c:02:9d:81:03:af:b5:be:ce:
60:5c:b8:f2:20:cb:fe:15:38:53:5b:d0:66:59:76:
e3:cf:28:a4:f8:dd:7e:c4:ce:53:7e:db:59:6b:49:
9f:ed:12:86:cf:ea:26:89:0a:5c:09:7b:ae:38:0f:
ba:e7:e2:41:04:10:60:00:5d:e1:f0:60:d9:3b:be:
55:02:dc:69:1d:8a:0d:51:6e:fa:9f:92:b9:6c:8e:
c4:c2:3f:90:d1:6c:88:96:40:24:7b:d0:e1:95:d3:
ce:d3:40:58:62:27:f0:7f:04:52:47:c6:23:82:d9:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EE:66:FD:23:1A:36:40:F8:1A:A9:FE:FB:DF:84:95:76:42:58:E8
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7a:33:25:4b:ad:cc:7d:b7:7f:4d:92:64:d5:2d:00:44:47:
ba:04:60:39:ba:b4:62:be:ff:72:c6:c4:c4:4d:10:a1:53:97:
9a:29:f6:77:64:77:ff:f3:e2:48:74:9d:ff:80:85:31:bb:19:
64:9f:b9:aa:6f:41:2c:4e:57:51:65:df:4b:ee:4e:43:c1:e6:
2a:ab:61:a9:a3:55:f0:30:b1:44:4c:8e:4b:2a:57:bf:ee:da:
dd:e7:19:e2:40:85:5f:d2:02:23:a5:e7:78:4c:d6:2b:12:74:
18:5b:b8:e2:2b:bd:c9:0b:79:04:d8:47:b0:3e:ee:0d:f5:ff:
e1:d9:8b:ad:98:7c:69:9c:1d:c8:8f:54:6e:4e:41:ca:f4:af:
c4:d2:c2:d7:98:32:36:3c:f3:ef:84:f0:85:48:99:f8:31:58:
6c:90:ce:9a:66:a3:5d:c2:52:a2:52:b7:6a:2e:49:7a:54:5f:
ba:bc:fa:f9:cf:31:47:66:e3:a0:f2:03:91:56:22:59:ca:14:
df:61:48:0e:1e:89:31:49:53:32:2b:ec:c1:e3:96:79:4d:49:
85:21:d0:87:45:ca:80:3e:42:25:44:3d:fc:05:0c:0d:e3:17:
eb:fd:a7:59:79:78:a5:b4:3d:c9:03:28:82:02:cb:a7:c7:4f:
76:5c:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 03:05:09 2025 by rpki-client