Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: IK/HQOj/1KZJYKiBM8xS1EEpvqZDxFqWCrUV1cHEfvk=
Subject key identifier: D1:42:B4:EF:A5:1D:5B:BF:0E:0E:BE:82:C4:32:18:FB:BE:BC:A8:F3
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 0199228C5B629103502A5274F8EFAD0340FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0D59
Signing time: Sun 07 Sep 2025 05:00:47 +0000
Manifest this update: Sun 07 Sep 2025 05:00:47 +0000
Manifest next update: Mon 08 Sep 2025 05:00:47 +0000
Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: 9e3nSI+NOWdj071N2x4nWelhHjJ7Q8DWe2vjTnsf820=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5b:62:91:03:50:2a:52:74:f8:ef:ad:03:40:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Sep 7 05:00:47 2025 GMT
Not After : Sep 8 05:00:47 2025 GMT
Subject: CN=d142b4efa51d5bbf0e0ebe82c43218fbbebca8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:cf:c1:3b:8a:45:39:6a:6f:c1:22:b8:80:
07:e8:3b:51:8f:89:a1:86:a5:e5:e3:d7:be:13:50:
4f:33:62:ec:75:e3:06:97:07:6a:0a:9e:bf:98:fa:
be:e1:a7:fd:90:ba:39:5c:af:98:44:94:81:09:8e:
d5:c2:32:4f:14:c7:05:67:7e:af:9b:14:55:60:01:
f8:10:df:0f:93:61:39:ed:5f:14:63:8a:e9:d1:af:
08:b5:bc:cb:a1:d9:b4:2d:8f:32:e9:d3:a4:64:0a:
5f:e2:b1:8e:8b:3a:1c:f0:76:f8:25:73:bd:2b:b4:
96:b6:50:d4:9d:9b:22:8e:77:e8:76:b0:29:d0:42:
3d:cd:89:eb:15:6f:68:e6:f9:98:1f:f2:ab:cb:1e:
55:a5:e6:79:a8:0a:64:99:ea:ac:b0:9b:c7:c4:51:
8c:12:7b:3c:ae:45:49:6c:0e:17:ad:1f:81:aa:46:
22:97:1a:70:db:2f:7f:a4:c5:7f:70:c7:b1:2b:4f:
dc:a0:66:ea:ff:a3:ae:1e:45:c5:f3:8f:e5:77:ef:
a6:72:a0:44:4e:f6:28:30:0e:79:6a:3a:3b:a1:e1:
90:90:d9:a7:c1:6f:c7:20:34:67:3e:d8:99:b2:a5:
80:21:1e:5a:4c:ce:48:21:b3:e7:3f:4c:4e:49:ca:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:42:B4:EF:A5:1D:5B:BF:0E:0E:BE:82:C4:32:18:FB:BE:BC:A8:F3
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:be:5b:ac:ea:69:5c:9e:e2:7b:4f:c5:1b:41:cd:06:6f:8f:
5b:56:39:43:cb:ab:0a:39:79:72:f7:d4:57:6e:f6:98:fe:20:
f6:2f:35:3c:44:54:b1:dc:66:e7:cf:bb:94:a2:b8:b0:4b:83:
ad:1c:6b:5e:cf:e8:2e:c3:0f:bb:96:35:57:2b:b7:2d:f7:ec:
78:69:b9:71:4d:37:fe:ca:2a:77:1d:9d:f2:e4:d5:eb:b1:42:
49:9f:5b:0a:96:4a:b8:40:8c:d8:78:3d:e8:32:6b:a2:79:de:
06:7d:d0:25:f8:01:ff:54:f1:d1:2e:55:6f:9a:d8:5e:1f:08:
a7:cc:e5:77:ad:85:41:84:b7:89:cd:dd:89:df:e4:55:0a:85:
02:b5:ea:f3:9e:15:65:77:b2:6f:bc:ef:65:8c:d2:ed:8e:1d:
44:4e:a8:75:53:0c:3f:83:d1:db:17:0b:82:da:b6:ed:f3:70:
51:ae:24:f6:bc:9b:21:41:f7:fe:62:a9:a1:86:36:e1:5b:18:
df:9b:6c:42:8f:f3:3d:a9:c4:69:c7:6e:4d:fa:c3:a3:eb:84:
45:0e:ad:38:40:ce:e5:5d:88:b4:e2:3c:98:e9:59:6d:a3:61:
d9:c7:ab:f4:16:87:b2:7d:85:2e:11:39:f5:b4:58:c9:a5:32:
63:42:df:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:36 2025 by rpki-client