Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: VYoTPzJQHHFx/vZ06Ab9tilIPCqt7EZLLd6oWDDzF+k=
Subject key identifier: 08:70:89:1B:17:F4:3F:75:4D:CF:B8:DA:D2:A4:AC:89:AE:7A:18:50
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 019923316420AB00FAEFD7A6B67C741D7500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 08:01:03 +0000
Manifest this update: Sun 07 Sep 2025 08:01:03 +0000
Manifest next update: Mon 08 Sep 2025 08:01:03 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: +7g4VEy1+86gI11PNYScetOCv6JostGnls//4TOYzJE=)
2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:64:20:ab:00:fa:ef:d7:a6:b6:7c:74:1d:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Sep 7 08:01:03 2025 GMT
Not After : Sep 8 08:01:03 2025 GMT
Subject: CN=0870891b17f43f754dcfb8dad2a4ac89ae7a1850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:a6:49:1a:07:15:9d:a9:c5:15:3e:f9:6b:
31:40:76:ce:61:06:a9:46:fa:24:6b:78:b9:b7:58:
2b:9c:30:4c:de:88:00:0a:9b:7e:c6:dd:9f:d5:22:
92:e8:36:48:48:95:91:5d:71:7a:3f:c8:62:3b:3f:
95:4a:2f:c1:aa:99:46:79:a8:25:d3:bb:73:ca:33:
ad:a7:18:cd:b0:47:4e:da:c6:25:b6:a6:0e:0f:1f:
ef:78:2f:c4:c8:a1:2a:f9:84:cd:37:16:f0:39:e0:
ee:de:58:37:92:ab:32:a5:09:bd:b5:02:ac:69:7b:
fc:40:a6:47:14:e9:ae:97:8d:77:bb:cd:00:a6:08:
e9:13:60:66:cf:6d:5a:d5:1f:35:55:27:84:37:9c:
ae:e9:64:a1:da:5f:76:0f:21:e8:ca:71:ee:ad:c8:
fa:f6:1d:4e:bf:67:0c:d3:37:c0:62:4b:cb:ba:72:
e0:f1:85:6f:91:e7:a8:cf:0f:83:d2:3a:19:ad:52:
3d:d9:b0:3c:ea:fd:cb:8a:5f:5c:01:9a:5b:6d:53:
2c:79:58:75:b7:9c:6b:c6:af:6e:98:be:16:1d:da:
ca:be:7f:b2:c4:34:5e:a0:fa:fa:0d:06:67:29:11:
a0:a5:77:1c:1b:d0:2d:45:26:26:7f:f7:7a:f0:41:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:70:89:1B:17:F4:3F:75:4D:CF:B8:DA:D2:A4:AC:89:AE:7A:18:50
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f6:1e:22:72:a6:75:14:d9:87:02:03:b5:81:25:ea:fa:92:
f4:cd:af:bb:df:f6:7c:61:a4:2a:96:ef:cf:0b:9c:4f:89:e4:
1b:8e:ff:5f:e0:e7:17:93:a1:bd:2b:98:9a:f4:aa:68:23:06:
79:ae:c6:34:69:e8:67:7b:10:b3:e8:66:47:f6:ed:ae:0f:df:
f6:96:33:61:69:ac:61:b8:da:eb:94:1d:60:1d:47:29:2e:d6:
66:70:9e:29:e0:dc:c0:58:32:a3:00:23:89:7f:46:e2:3b:ab:
52:e3:ee:d1:4b:a5:29:6f:ba:7a:39:b9:53:8e:61:a4:07:47:
96:0f:8d:88:1c:b7:8e:45:df:4a:31:4c:0b:1c:eb:8c:ee:32:
a9:e7:04:81:9f:27:84:f8:64:f1:b3:4f:e1:96:61:b1:8a:db:
af:fb:e4:4a:f3:89:dc:f0:ea:06:47:e7:76:50:69:c9:05:01:
fe:b4:91:da:55:2a:f8:d6:25:50:14:78:82:af:14:99:7b:7a:
51:80:f5:d3:4c:bd:9a:77:4f:c0:bd:20:c0:13:29:6b:80:70:
ce:f1:1d:24:96:fc:b4:c0:47:1e:d0:fb:85:ae:b3:75:15:fb:
f9:e8:f4:86:78:77:de:f3:ae:90:48:91:49:56:12:eb:2f:ba:
c4:51:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:50 2025 by rpki-client