Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: hLJLmxW6vALTrcBohgTaCXTfwhj6ZuaWXWlklAhnQD8=
Subject key identifier: E8:FC:C0:F6:E8:75:90:FD:C3:33:C3:C2:13:06:88:47:6A:0E:CB:85
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019922FA65449AF4C8BE20ED17A64B756B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 97
Signing time: Sun 07 Sep 2025 07:00:59 +0000
Manifest this update: Sun 07 Sep 2025 07:00:59 +0000
Manifest next update: Mon 08 Sep 2025 07:00:59 +0000
Files and hashes: 1: 9KxQLDioSqe2aYOVeKPxnDsDwuw.roa (hash: T09E0Yzsg9eTP49n/hH17rluOJ232f0wRoO/hcyQIQU=)
2: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: URxyTyPLdCqm5e4a9Gpsf8kWOeYa54bvCJ6TzPWnp5g=)
3: Q8cVRY59L3A1W2LpGOt9ieYk9RM.roa (hash: yXkhjZJyjmNgePGj4chVCFye5ELdiGcKlqAHTFsZoww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:65:44:9a:f4:c8:be:20:ed:17:a6:4b:75:6b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Sep 7 07:00:59 2025 GMT
Not After : Sep 8 07:00:59 2025 GMT
Subject: CN=e8fcc0f6e87590fdc333c3c2130688476a0ecb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:87:2a:0b:a8:33:89:5d:cf:a7:c3:b8:24:
92:85:0c:c3:ad:e3:a7:81:34:98:42:c6:3a:73:54:
ba:c4:a0:f6:44:e2:08:d0:3b:ff:1e:47:e9:33:62:
f4:f8:ab:d1:59:fe:85:58:a3:db:84:b5:00:29:9f:
8d:4f:5e:2b:91:14:7d:ce:57:0c:95:12:a0:eb:ae:
a2:66:17:0d:0d:4e:23:b9:1e:7e:92:4f:63:a0:8d:
53:a6:4a:cc:b3:c2:46:ee:c1:fc:84:a6:5c:18:a2:
5a:2f:91:40:95:65:8a:ed:72:05:a0:96:8c:b6:91:
05:5f:79:1b:c9:70:4d:91:4a:2d:f7:6c:5e:a5:45:
c7:68:42:07:ab:06:85:f7:a2:f3:03:9d:14:fe:71:
d1:65:bb:95:1e:06:2d:c2:08:da:c6:93:07:e0:2e:
f5:72:a7:f0:23:99:75:ee:9f:c4:2f:9a:e6:82:7f:
7b:7e:58:ed:b8:1f:23:5c:9b:81:1e:46:18:39:8c:
31:2a:7a:e9:da:bf:6c:0e:ce:1a:f2:e8:da:c2:3a:
dd:1b:ce:d2:9c:b4:63:e1:d4:38:56:04:7b:c1:89:
14:10:0b:e2:ac:d5:72:56:b3:20:30:4d:21:d7:8a:
e4:d3:44:3e:0f:ae:6d:1f:38:ca:14:83:1b:13:5d:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FC:C0:F6:E8:75:90:FD:C3:33:C3:C2:13:06:88:47:6A:0E:CB:85
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:09:af:f0:d8:f1:44:56:74:87:0e:7a:a4:2d:71:ba:78:
06:2b:ae:b0:96:bb:b7:ae:86:ca:1d:02:c5:63:16:e2:c8:1c:
b8:d8:fb:37:36:f3:7a:d5:04:6e:4b:18:ac:2c:f0:29:7e:f9:
f4:30:6a:d8:86:84:8d:cf:f5:a2:88:f8:15:89:5e:08:b8:ec:
d1:5f:97:e0:a7:ee:e8:cf:04:fa:ef:f4:b1:60:77:ba:42:44:
e9:db:ee:f3:6a:55:54:22:6e:9a:4e:10:d1:ab:28:16:ee:fc:
3f:f5:8f:fb:ff:5c:98:54:62:3c:da:f0:84:64:1b:39:13:43:
95:52:f9:a4:5b:76:80:74:5b:a8:67:5c:f6:59:74:a8:37:c6:
2b:3c:f4:8c:cd:66:a1:1a:e6:9c:3b:19:38:3e:0f:a4:c4:3b:
14:ca:78:ea:21:dd:02:bf:02:f5:b1:7a:08:3a:d1:d9:88:80:
1b:38:4c:de:20:43:ca:3c:23:0a:de:b0:87:41:5b:14:d3:12:
04:0f:13:57:9d:68:62:4c:74:ff:73:2a:55:eb:d6:32:76:ab:
90:99:07:ba:e6:4a:c9:00:dc:85:53:69:89:21:27:95:17:07:
b1:b7:06:8f:e6:e9:d3:20:23:c4:92:ff:ec:a5:5e:6b:ac:e4:
fc:31:55:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:55 2025 by rpki-client