Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: SlUmEExScS9Hq7vDK3hqIYsAmJAxYXfBLTyQcaemtYM=
Subject key identifier: B2:30:90:99:2C:E0:E1:DB:81:A4:50:E8:82:E1:0D:8B:66:03:03:56
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 01992D46E62B9E0B457D0C37A75E92D48D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 07AE
Signing time: Tue 09 Sep 2025 07:00:45 +0000
Manifest this update: Tue 09 Sep 2025 07:00:45 +0000
Manifest next update: Wed 10 Sep 2025 07:00:45 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: UwyQ8hJdGYiwK2QQT77tGfOap4LdizONxQ3WLm69zFk=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:e6:2b:9e:0b:45:7d:0c:37:a7:5e:92:d4:8d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Sep 9 07:00:45 2025 GMT
Not After : Sep 10 07:00:45 2025 GMT
Subject: CN=b23090992ce0e1db81a450e882e10d8b66030356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:83:9f:cf:c0:7d:fd:d7:ee:cc:66:65:41:
d9:3f:76:0e:24:67:e7:2f:c9:03:cf:3b:88:2d:94:
a7:32:09:b3:5c:10:b8:1f:50:ae:8e:9c:c1:8f:0d:
09:22:64:43:fe:51:f1:17:01:c0:60:53:5a:90:e3:
87:6a:9a:b4:52:ca:ff:20:e1:9a:5a:fb:a1:36:84:
aa:56:8e:b8:8f:51:dc:1e:50:cc:88:7b:da:44:b6:
0e:03:d3:6e:a1:6e:52:37:c4:b7:73:52:7f:44:53:
56:28:0a:e7:58:3d:2d:38:52:e7:f6:7f:96:a3:d2:
5f:77:c4:d6:4c:c0:80:4a:22:e0:e5:2a:05:43:b5:
ff:6e:32:d0:c1:d3:c3:c6:ec:8b:92:a2:1c:52:00:
58:3f:3c:89:0b:83:cb:c3:8c:4d:7b:90:91:35:c1:
9c:64:5f:36:ec:c1:75:9b:3b:01:5c:a8:5d:85:8e:
bd:21:a2:fb:8b:30:26:64:4e:21:77:c5:4d:6b:50:
6b:8d:ee:62:f8:fe:e9:d7:53:7e:d5:67:94:37:17:
d3:ce:60:db:2c:e7:3f:ee:97:e0:f5:d4:c0:23:f7:
3b:20:87:f9:0a:85:98:aa:3a:21:4d:a0:c3:81:5f:
92:f3:5e:3c:4b:7a:74:5a:72:2f:82:ba:4c:8c:43:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:30:90:99:2C:E0:E1:DB:81:A4:50:E8:82:E1:0D:8B:66:03:03:56
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:19:f4:ab:9d:5d:61:cc:f1:ee:59:e8:57:c5:dc:83:dc:55:
74:63:79:84:82:67:bd:61:8e:aa:f3:48:72:75:6b:64:f0:d4:
77:bd:09:bb:7f:5b:df:e5:a1:f9:64:92:f3:a5:34:d7:50:6c:
74:9b:3b:ff:93:67:6a:58:53:61:d3:bd:be:43:97:38:37:9f:
5c:3d:2c:9d:9f:2b:41:03:d8:e4:6a:d9:f7:56:53:26:ad:8e:
27:7f:9d:98:bd:19:c2:7b:0b:9b:35:9e:ca:c3:2e:1a:5e:55:
59:0f:6d:e3:a5:44:a4:bb:15:1b:ff:f7:04:9e:5f:45:46:24:
72:26:e3:ed:40:62:b2:af:5d:da:5e:dc:5b:dd:43:8e:20:44:
58:6a:23:db:3a:83:55:4e:0f:e5:bc:34:8b:54:f6:cd:a7:82:
27:2c:1a:be:31:f7:fd:30:6e:b6:be:2e:cc:58:52:a0:a2:52:
2c:81:4a:a3:d5:a5:d8:78:51:8c:68:51:4c:d5:bd:48:bf:9d:
e5:33:eb:ce:e7:f4:7d:d0:7e:3f:8b:6d:97:50:29:f2:29:05:
5e:7e:46:de:44:05:2f:ce:81:93:33:f6:e6:10:33:ac:ba:43:
9e:41:60:12:dd:fb:e5:13:22:8b:ba:68:d6:7b:ee:41:30:bf:
43:36:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:25:01 2025 by rpki-client