Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: /HrDsJ2WpMW1Yp/2ph24sgOi2XZ7nzhviEe28Z/ANUk=
Subject key identifier: C7:34:CD:40:98:2B:BD:DF:FF:94:CC:8F:BE:95:F3:A1:38:A1:9C:20
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 019933133FA56808EEBA789E956ED458761F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 14B4
Signing time: Wed 10 Sep 2025 10:02:03 +0000
Manifest this update: Wed 10 Sep 2025 10:02:03 +0000
Manifest next update: Thu 11 Sep 2025 10:02:03 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: Zx7NQhG/DnGIGaSaxVvLHSLDCduRXR91LE0b2Zu9vkg=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:3f:a5:68:08:ee:ba:78:9e:95:6e:d4:58:76:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Sep 10 10:02:03 2025 GMT
Not After : Sep 11 10:02:03 2025 GMT
Subject: CN=c734cd40982bbddfff94cc8fbe95f3a138a19c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:28:79:f6:de:e6:f0:79:12:c2:5e:d8:9c:
fd:8e:d0:92:06:30:ee:01:fc:07:bd:6e:d2:ac:77:
d3:8f:93:75:e3:7d:18:e7:c2:ed:8d:b0:7c:06:65:
ba:9c:7e:30:8a:78:96:4b:2e:c0:80:bc:4b:c4:b5:
59:fa:e3:57:18:f8:7d:47:c1:0a:21:4b:f3:8b:65:
b0:5f:0d:a8:6b:ff:c4:aa:c8:1c:e6:13:63:20:39:
58:f5:18:96:ba:f1:15:bd:3f:d0:7a:f7:10:88:c5:
62:e4:4d:c1:66:e4:88:1a:db:c4:e8:01:d1:c4:9f:
a6:14:33:57:fb:88:69:6c:95:d3:14:d1:76:b8:11:
51:2a:19:dc:38:f9:a1:75:76:b3:fa:ca:f2:10:99:
c7:94:f5:26:59:be:4f:6b:66:ed:62:8b:d7:87:98:
43:69:71:0c:f7:f1:10:bd:92:b2:fa:b7:e0:d3:3e:
de:2f:67:56:4b:e4:09:70:50:bd:28:a6:33:b6:c3:
00:ec:ac:24:78:5a:1c:15:58:77:95:0c:46:bc:79:
85:c4:e0:2e:e8:30:35:0c:ba:4c:54:48:1f:52:52:
a7:56:f7:8f:d6:f4:61:de:33:a8:a8:f9:c6:d2:21:
80:e9:ba:ea:05:29:c7:43:69:99:6e:6e:23:2c:95:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:34:CD:40:98:2B:BD:DF:FF:94:CC:8F:BE:95:F3:A1:38:A1:9C:20
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:e8:a3:24:51:a3:f0:49:64:5f:59:8b:ce:a3:17:64:71:
16:63:f8:36:b4:8f:27:9e:60:25:8d:5b:72:ee:69:8f:d7:a1:
a0:d2:54:08:67:20:31:c5:6b:38:f8:06:4c:31:39:62:c3:79:
65:13:b7:57:35:ea:f2:d5:e3:71:9b:1e:77:fc:00:d2:6b:11:
60:33:ce:84:72:f3:ef:75:78:63:f0:de:8b:6a:9e:fe:41:0c:
b2:88:b3:62:eb:f4:6f:3e:88:83:14:d1:68:2a:58:3c:a5:6a:
1d:2a:42:8f:31:44:ee:26:db:97:16:a3:6e:e3:f8:59:f9:67:
92:28:18:c7:ed:40:c3:33:25:c8:c0:c6:10:89:40:ec:b4:e9:
c1:56:49:e5:17:e0:3e:c9:88:fa:90:20:71:0c:72:5b:92:5d:
40:47:d2:7d:21:71:19:b4:0f:4d:4f:0f:07:40:b9:51:d8:b6:
5b:8f:22:2d:f2:3c:79:6d:01:ff:0f:05:a5:04:1f:99:1d:e0:
f4:5a:c2:af:bf:5d:a9:37:d2:99:f3:59:d2:ac:b9:73:b8:44:
96:7a:2a:e3:c2:9c:92:f1:eb:22:d1:5b:9a:84:40:34:04:83:
36:cf:54:93:dc:82:82:9c:08:1c:52:65:ef:ca:a9:48:1c:75:
c6:ab:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:05:04 2025 by rpki-client