Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: uwUq+KyTM9iPF1d+RtOJM6BZNf0ODIR1kN7F2nabZeg=
Subject key identifier: 76:BA:27:D6:11:40:08:20:93:48:85:17:58:90:77:C5:FE:64:97:1D
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 0199221EDB853F11D358340BF69A5CDDDD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 0271
Signing time: Sun 07 Sep 2025 03:01:11 +0000
Manifest this update: Sun 07 Sep 2025 03:01:11 +0000
Manifest next update: Mon 08 Sep 2025 03:01:11 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: HG345iN57Nf8e3Z0fAxqzcOc/qG2wd2cDP5mFKvM/08=)
2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:db:85:3f:11:d3:58:34:0b:f6:9a:5c:dd:dd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Sep 7 03:01:11 2025 GMT
Not After : Sep 8 03:01:11 2025 GMT
Subject: CN=76ba27d61140082093488517589077c5fe64971d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:4c:f1:b6:ee:e9:d7:b0:ef:73:e9:3c:56:
57:84:72:a2:9a:93:66:fd:f4:5a:69:9f:d7:ac:94:
0d:6b:87:42:70:fe:89:ef:58:43:22:da:ef:68:86:
86:75:5e:58:a3:30:81:31:46:99:5f:16:4e:dc:f7:
5f:ce:0f:58:6d:f2:fd:8a:6f:b5:06:50:7a:af:19:
19:d5:25:0b:c0:1b:8f:b6:53:bf:b2:98:3b:4e:77:
f8:75:19:2f:16:5c:c7:ca:6b:37:75:60:b5:d4:ff:
b9:8a:95:d4:9a:38:5d:3a:16:b8:49:de:73:92:bc:
18:b8:49:39:82:09:56:2e:3b:98:eb:ef:40:d2:0b:
70:79:b5:4b:aa:db:de:58:c9:c9:36:a6:65:21:d4:
eb:0b:8e:fd:02:ea:91:4c:ea:67:4e:bb:c0:b8:55:
74:76:9e:e4:b3:b0:bb:4d:5c:fb:9f:67:23:61:13:
6e:37:59:c0:e7:49:7d:d1:c3:7d:9a:e1:3a:32:f5:
d3:49:a6:02:7f:07:4b:48:9e:c0:fd:b4:98:c6:f5:
b6:17:9e:d5:e1:44:a4:65:fa:35:5a:f8:55:59:c6:
ba:e7:20:3b:ca:86:86:4b:3c:30:ae:eb:33:1f:c9:
82:dd:bb:08:69:ae:9f:e2:3d:fb:ad:3a:fd:c9:c2:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:27:D6:11:40:08:20:93:48:85:17:58:90:77:C5:FE:64:97:1D
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:57:d2:b6:04:70:89:ac:64:e7:f5:9e:20:2e:07:12:78:9b:
68:16:a2:a7:41:88:00:2d:83:31:00:a5:9d:71:54:58:e6:bc:
a9:e9:62:04:52:a5:e7:da:3c:38:68:ac:61:ff:9f:ba:fb:ce:
0e:9f:a4:0f:f2:a9:f1:dc:cd:c6:5b:16:ad:1c:8f:f6:dc:c0:
04:ef:b6:d4:2f:eb:d6:97:9a:c0:13:3e:13:af:11:e4:f8:dd:
11:c7:15:32:18:bd:12:7b:0d:a9:74:35:56:ee:07:b4:23:3c:
35:ff:93:6a:dc:22:25:a6:6f:5f:15:ab:4b:f9:3c:ef:38:b7:
98:c4:ef:8b:2c:68:a3:c2:2f:c1:de:a4:cd:97:b4:ee:02:b7:
8f:19:1c:3d:96:b5:78:31:72:39:ae:6a:cc:5c:4c:5f:c6:1c:
5c:21:c0:da:9b:6f:be:e5:5f:3a:96:b6:28:50:22:c2:c9:32:
25:47:0b:eb:c7:84:c1:ac:4d:25:34:59:bf:90:0c:aa:55:4f:
ee:66:bc:6a:a7:84:ba:25:5f:30:4f:dc:63:5f:46:a0:47:f3:
50:6a:3c:56:5e:56:0a:80:d4:40:43:f9:77:5a:8c:5c:a0:98:
2e:92:7c:25:ec:59:de:09:20:a1:58:0b:fd:f5:96:59:6a:97:
f6:6d:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:43 2025 by rpki-client