Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File: fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier: H5sPTTkdCyEeqzgwhI2J8LP31V17m9YVIC2ylSIl3ac=
Subject key identifier: D1:F6:50:B4:CC:D3:BB:5C:73:D4:BE:4B:4B:EF:3E:81:45:64:6C:58
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial: 019922FA82BCE235215AD60432ECF338B159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number: 0C25
Signing time: Sun 07 Sep 2025 07:01:06 +0000
Manifest this update: Sun 07 Sep 2025 07:01:06 +0000
Manifest next update: Mon 08 Sep 2025 07:01:06 +0000
Files and hashes: 1: 8IVwcCAer2YFK0PD_eW_7QPltRk.roa (hash: DtzwrJfpj+KzExIWMGXO37ECdwLmhMCQMNWrFN/oGf4=)
2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: qp8MG+wVMpO/2tg4BTV295nQjX92XfiFGB5RYQF4cj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:82:bc:e2:35:21:5a:d6:04:32:ec:f3:38:b1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Validity
Not Before: Sep 7 07:01:06 2025 GMT
Not After : Sep 8 07:01:06 2025 GMT
Subject: CN=d1f650b4ccd3bb5c73d4be4b4bef3e8145646c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:5a:25:63:e1:0c:d9:7c:9e:78:6e:dd:83:
6b:7a:43:72:59:98:2d:da:be:f7:25:87:af:d3:cf:
a4:00:ea:82:82:d0:95:62:25:04:9a:54:46:9d:c4:
81:a4:b4:2b:d6:f7:82:db:50:da:0b:76:ce:82:ed:
2d:9b:b3:f3:52:78:0c:b0:9a:4b:72:5f:cc:7d:14:
da:da:e6:c8:d0:8f:48:bd:17:a8:04:54:de:42:25:
09:a4:30:8a:9d:5d:52:42:d1:96:d7:c1:3e:1a:ae:
f1:c1:b3:74:0f:71:b3:c6:1d:94:c4:d8:67:ad:7a:
a9:58:84:e3:15:b4:b3:ad:bd:95:5c:0d:15:71:7f:
b3:20:23:e2:5f:4e:af:25:00:46:52:95:90:d8:6d:
65:a1:36:d0:46:26:71:65:6a:db:14:13:02:66:0a:
92:93:6a:2b:13:55:d0:fd:34:6b:25:83:a5:4d:3b:
df:9b:ed:2b:2e:9f:94:2e:97:a2:1e:6e:f1:8c:ac:
a8:cb:b2:a5:af:89:2b:01:b0:a4:92:81:34:c0:85:
25:a7:c2:25:8a:19:5d:fd:e7:77:d6:76:e2:e0:ab:
d1:8d:c4:21:9f:d9:c8:2e:98:7f:ec:8e:f1:93:18:
73:62:01:30:cf:c7:7d:14:e3:e2:64:4f:78:4a:e6:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:50:B4:CC:D3:BB:5C:73:D4:BE:4B:4B:EF:3E:81:45:64:6C:58
X509v3 Authority Key Identifier:
keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:53:8f:c7:a1:de:d2:76:60:52:db:74:54:de:7a:3f:2b:ba:
41:bc:19:4f:dd:41:23:8b:7a:ee:bb:e9:d0:e4:60:c5:33:77:
a2:bf:44:ed:f4:53:69:df:20:67:24:82:52:a4:f7:0a:ef:3c:
ff:ca:4e:ee:b2:86:0a:e4:00:31:5c:b8:73:0f:18:a5:9e:3c:
4f:9a:1a:b1:58:84:c9:89:f8:ac:fb:79:27:af:d2:29:23:d2:
34:0c:a1:55:3d:39:cd:80:0c:d9:69:d6:cb:61:24:0c:3a:2b:
28:14:16:a5:3e:12:31:2f:76:59:49:d9:c3:eb:2d:e5:46:a9:
57:fa:36:5c:1c:8e:c5:5c:bb:be:c7:38:64:61:c8:f2:68:86:
23:09:7a:20:cc:e8:a6:76:ae:e5:ee:30:15:e8:32:1b:36:e8:
69:f5:37:6d:c1:d6:63:2a:9c:0e:5b:6e:43:2a:62:88:3c:8f:
b2:bb:7c:31:5a:ac:e8:2f:15:ba:c6:6a:9f:de:06:ae:5c:03:
8b:7b:a6:5b:dc:f1:dc:4c:48:06:41:e5:50:f4:d7:2e:12:11:
58:d2:bd:1b:52:a1:5d:c7:12:07:ad:02:b1:41:98:69:dc:44:
ec:e1:57:c9:52:ca:ed:6f:f5:13:fe:57:8d:80:66:38:70:04:
ea:3e:51:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:56 2025 by rpki-client