
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: 4yIR3VzaIhG6l3f7StJwMDomrRhVbGy+OI1TItmYxFo=
Subject key identifier: F7:F8:47:FE:49:7A:70:73:24:F1:5F:7D:E0:13:E2:9D:AB:57:CC:8C
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01992C6B63C62426A474923174313D326431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 16C8
Signing time: Tue 09 Sep 2025 03:00:59 +0000
Manifest this update: Tue 09 Sep 2025 03:00:59 +0000
Manifest next update: Wed 10 Sep 2025 03:00:59 +0000
Files and hashes: 1: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
2: JEcABUIWGeGAB7DoV3FGz8zRXXA.roa (hash: 7sPzS1pkPk8O4WZjl6r+glhCeSX8/f48mK6NROPhc4o=)
3: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
4: NL8Ou-iATsKp5WM-gQatVEp_ul0.roa (hash: DC+WUcLNi+F3Lcer1Mx3nWvFPfItInB9MdTm2tGHge0=)
5: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
6: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: 7h2Q35NfWJIPqvP3V7lyMVnHvLn8n5nZumnsDJXCU5U=)
7: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
8: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
9: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:63:c6:24:26:a4:74:92:31:74:31:3d:32:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Sep 9 03:00:59 2025 GMT
Not After : Sep 10 03:00:59 2025 GMT
Subject: CN=f7f847fe497a707324f15f7de013e29dab57cc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:2e:06:cf:45:fb:7c:41:20:19:7a:62:7f:
79:d4:19:0f:73:8f:1d:3c:8b:a0:1c:c5:be:09:da:
fc:0a:f6:c5:76:0c:ce:75:37:b3:0a:13:86:ef:9b:
81:e9:65:8b:0b:ad:7b:b0:57:64:01:27:6f:8a:9f:
5e:21:8a:6f:35:5c:ca:4b:42:4c:99:e8:f3:8e:68:
99:24:ba:a7:b0:03:78:86:48:45:35:9e:03:88:b2:
87:70:c7:bb:ee:41:10:24:80:92:e4:c9:82:9c:c2:
c5:6f:eb:e9:e7:bc:a5:d3:af:51:b1:c9:b9:73:10:
71:08:8d:d0:8c:f5:05:d5:c5:a5:ad:de:36:5e:0c:
94:58:a5:ff:30:b7:46:56:a9:be:2d:f7:2a:16:77:
4b:10:86:54:ff:9d:42:f5:78:5b:2f:c9:ca:f6:43:
10:c4:39:c6:1b:de:59:2d:36:da:de:4f:e9:61:fc:
c9:f8:40:a9:cc:c9:18:b2:bc:9e:9f:cd:e1:34:26:
fc:a4:05:6c:12:62:33:fe:e1:2a:eb:23:9f:6d:10:
06:1f:ea:56:f6:84:46:32:d0:2d:76:7d:f8:29:4a:
fc:c1:3a:7a:dd:fe:6c:97:d3:95:8d:57:2d:bc:92:
50:da:13:f4:d2:2d:ec:6d:dd:dc:67:b1:61:10:a5:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:47:FE:49:7A:70:73:24:F1:5F:7D:E0:13:E2:9D:AB:57:CC:8C
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d4:e3:9f:49:1b:15:e1:d2:59:4b:71:99:71:ca:d5:90:a6:
bd:a6:8d:07:5d:72:84:d1:d4:10:ff:e7:ff:1d:ca:75:45:fd:
21:34:50:8f:3f:21:8c:5a:7e:ac:1f:57:f0:a0:82:a1:e5:ca:
20:56:0e:cf:fc:45:82:2e:be:4a:2b:cc:32:97:ed:52:1f:52:
78:78:cd:21:07:78:77:c7:60:f8:71:4d:df:83:a5:82:19:92:
42:82:85:a0:b5:9c:31:1b:69:8d:83:46:71:68:85:25:df:36:
83:23:7e:ca:bc:1c:d0:ce:2a:b7:97:18:c3:fb:8a:93:97:d7:
f9:5b:f8:e8:dd:ee:3a:af:95:2c:8d:b6:91:a5:5f:f6:52:42:
0a:ef:00:76:8e:25:37:fe:a0:3d:65:2e:02:70:cd:7c:19:e4:
69:65:27:83:37:dd:6e:ea:34:82:c8:cf:a4:1e:c0:d4:af:56:
29:42:63:70:64:02:19:f5:38:ee:93:48:2b:df:3a:56:bd:8f:
e7:81:c6:33:96:6a:62:6c:53:62:b6:37:4c:7b:6a:c0:c1:4e:
6c:01:73:42:93:8a:e5:de:a3:64:fe:00:09:a1:7e:a2:3d:c0:
4f:7d:1d:4f:79:5d:1c:55:eb:ca:b5:bb:7f:4e:8b:24:12:05:
a6:aa:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 05:57:39 2025 by rpki-client