Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: bKynKr5zrbla/Rlc+0zFS9f1OwJAvGuMnbCA2fUV9Vg=
Subject key identifier: A3:90:05:D6:90:5E:9E:3C:B7:EF:16:1A:8F:97:C1:39:2B:F7:62:6F
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 019922FA7304D5AC65FF0CAD9E8B43AD0A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:01:02 +0000
Manifest this update: Sun 07 Sep 2025 07:01:02 +0000
Manifest next update: Mon 08 Sep 2025 07:01:02 +0000
Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=)
2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=)
3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: FGExVeSSXUa/tHxsYk9RiKF1j65ZkbVla58ygX2O6DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:73:04:d5:ac:65:ff:0c:ad:9e:8b:43:ad:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Sep 7 07:01:02 2025 GMT
Not After : Sep 8 07:01:02 2025 GMT
Subject: CN=a39005d6905e9e3cb7ef161a8f97c1392bf7626f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:e1:5e:67:1e:14:46:5c:08:e9:9f:30:61:
5c:b5:26:00:ad:a1:a1:d0:38:32:fe:2c:b6:48:57:
44:b7:f9:c4:5d:ef:f6:1b:a9:63:3f:f9:38:74:3a:
22:bd:be:e3:de:63:33:1e:02:7d:38:bd:10:9d:de:
ed:02:7f:c5:9f:7e:3c:1d:17:27:b8:6c:4a:4a:62:
54:9d:74:ba:7a:40:fe:5b:be:2a:48:8b:84:a4:8c:
a0:39:d7:22:03:2b:90:a3:23:48:3a:81:86:be:78:
3c:fe:e0:23:da:01:08:e3:55:21:94:45:5d:7f:5d:
42:45:7d:7b:34:5e:5c:d0:b1:f5:5e:2e:30:58:51:
4b:b1:cf:2a:40:14:47:aa:10:d9:14:a8:82:99:31:
2b:84:95:2b:68:57:f0:86:9f:a1:10:59:24:02:97:
6d:73:29:b4:13:08:cf:aa:4f:1f:d3:41:3f:f0:17:
18:25:84:da:e8:70:ba:4a:0b:e0:60:e5:98:1c:af:
d6:9e:38:b5:d3:08:42:ca:89:94:82:7a:3c:35:12:
5c:74:85:a7:99:d5:be:de:aa:ec:c4:cc:31:02:9f:
77:f6:bc:ce:0b:98:b6:06:a8:e1:bf:88:9e:df:3a:
6c:5d:29:19:2f:91:c9:d8:b0:b0:48:bf:92:1b:91:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:90:05:D6:90:5E:9E:3C:B7:EF:16:1A:8F:97:C1:39:2B:F7:62:6F
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:ca:38:72:c6:90:2c:3e:01:57:b8:2e:4a:75:da:21:ee:
a9:f7:eb:ae:5f:ba:4a:4c:9a:4e:c0:33:8c:47:d5:e8:2a:7e:
03:40:29:de:4e:81:85:4e:15:eb:96:a1:59:0e:41:31:09:d3:
4c:dd:91:88:b3:33:cb:e4:53:d7:44:08:2a:77:8c:94:a7:7c:
78:08:70:1b:d9:ea:ac:54:7e:a3:56:ab:e0:09:81:04:3c:6b:
04:1e:33:93:06:0c:d2:8c:65:48:ef:55:96:56:85:c9:97:9f:
51:c5:9f:84:86:ec:cd:90:aa:09:c4:94:ce:2b:e3:4b:cf:a2:
c1:8a:51:d8:6d:06:3e:8c:f8:17:49:8e:48:f0:31:25:45:dc:
b0:ed:f5:09:d9:d2:8e:02:47:8e:20:34:33:8b:2d:a2:0e:37:
01:3a:d6:aa:ea:42:1f:f3:a4:97:3c:6a:b0:b8:0d:2f:31:f4:
b6:50:85:6d:a7:9e:ff:b7:cb:b2:7e:dd:9e:72:ea:09:e5:bb:
96:2e:6f:10:19:a3:c4:ec:f7:f8:d1:b0:82:5f:85:79:c8:1d:
fc:17:ee:4b:66:d7:c8:b6:c3:4c:5f:43:b8:f5:63:79:27:1d:
23:42:01:41:ff:cb:b7:3c:ab:4b:2a:fc:63:58:c9:52:a2:a4:
95:bf:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:19 2025 by rpki-client