Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: uGRSC8/fvX6lwHTivyXK8mXhfc6BfVNchNKPggvT/u8=
Subject key identifier: C4:37:DE:C0:FB:32:3F:E6:A3:DE:14:0B:5E:D3:A5:6E:23:0E:3E:1C
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 0199228CA66EDC5B55870FE1252A32A71D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 154F
Signing time: Sun 07 Sep 2025 05:01:06 +0000
Manifest this update: Sun 07 Sep 2025 05:01:06 +0000
Manifest next update: Mon 08 Sep 2025 05:01:06 +0000
Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: mdiLd6JFV0FLfQW/pollHdbieAbA9x2ivyyXDz8fKsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a6:6e:dc:5b:55:87:0f:e1:25:2a:32:a7:1d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Sep 7 05:01:06 2025 GMT
Not After : Sep 8 05:01:06 2025 GMT
Subject: CN=c437dec0fb323fe6a3de140b5ed3a56e230e3e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:e3:99:12:94:74:ac:22:82:bf:7a:5f:74:
5b:e6:10:df:ec:31:a1:57:ec:bf:2e:ec:48:d7:52:
c3:3b:f9:47:e5:e4:5f:13:90:0e:00:9e:29:b3:2c:
ad:e2:3d:92:3a:3a:4d:88:bf:9d:90:d1:61:61:8e:
2e:3e:d0:81:ed:62:dd:34:02:7b:d4:a5:35:96:5e:
a6:db:cd:0b:33:b0:52:00:ab:c9:0b:cf:26:d9:ed:
61:76:00:55:a0:7b:24:d1:78:b2:c2:99:51:93:6f:
9a:48:83:71:79:c5:d9:3a:d1:41:f8:94:04:95:9a:
7f:32:cb:95:07:c6:77:57:c8:90:fe:ca:c1:96:d2:
b9:47:2e:f2:c4:c4:d6:75:71:70:ba:62:97:1b:65:
13:e8:cc:7c:66:a8:9d:3b:c0:7a:77:ec:76:e0:c2:
2e:41:4a:28:06:08:b8:d4:8d:97:db:85:a6:a8:01:
a8:9f:31:f3:1e:01:79:a1:e3:73:9b:4a:de:31:ab:
92:e9:c0:9a:22:55:54:eb:2d:65:0a:ae:45:b0:4a:
be:f0:80:49:8e:12:a1:50:3a:94:1e:4b:b1:02:9c:
08:39:e8:10:69:0f:24:88:35:ce:8f:07:83:c0:c4:
60:11:4a:6c:a4:0c:eb:c3:91:53:a2:54:bd:cd:9a:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:DE:C0:FB:32:3F:E6:A3:DE:14:0B:5E:D3:A5:6E:23:0E:3E:1C
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:71:8b:cd:43:b2:4e:60:4b:9c:7e:ba:d9:6e:27:9c:98:72:
7f:11:9f:b0:28:f4:82:ba:a6:55:8d:5c:81:fb:a4:a3:4f:0b:
69:83:b0:0d:17:a9:74:e9:8d:66:ba:63:72:e6:fd:e8:ed:0d:
fd:ab:5c:76:6a:59:97:83:f9:7e:2f:0c:21:e6:b4:bc:36:e5:
9f:20:64:0c:7b:c2:61:38:62:3c:3e:26:6f:fb:da:2d:a6:5d:
98:81:fa:84:26:e6:02:c0:19:c0:d4:29:cf:f5:4a:32:77:14:
ee:6f:39:54:4d:3b:c2:fa:5a:fe:95:f6:fa:01:fe:67:fb:64:
fd:85:80:7c:fa:b4:c3:6e:16:25:e8:c4:2a:79:4c:7b:78:8e:
ca:ad:dc:19:e9:3d:c3:90:52:a9:32:29:fe:19:90:54:9e:ed:
2b:79:a7:3c:a4:fc:1c:c4:9c:e8:6f:4f:ab:63:1f:ee:43:c0:
08:3b:c0:35:b8:ae:31:4d:6c:8e:0c:01:74:3a:e0:5f:57:dd:
73:a4:4a:79:34:ad:50:f2:e0:ea:4d:08:de:41:0a:88:66:e1:
d0:2b:ab:dc:95:46:88:bc:91:9b:b7:02:20:86:a6:23:da:5f:
2a:eb:87:08:be:3d:f6:18:03:14:5e:d9:77:0d:5c:dc:ac:fb:
e4:90:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:49 2025 by rpki-client