Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File: fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier: PyC+Ue3j5E7ksmlmR7s1LLnmHs2ozoWSn/LIxymsvP8=
Subject key identifier: 0B:D2:D1:DA:82:C3:31:CF:D3:D0:3A:23:B4:16:60:A1:55:C7:12:FB
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 01992B8FC6E92A23155E0234D0E743B5B921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number: 1677
Signing time: Mon 08 Sep 2025 23:01:06 +0000
Manifest this update: Mon 08 Sep 2025 23:01:06 +0000
Manifest next update: Tue 09 Sep 2025 23:01:06 +0000
Files and hashes: 1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: 4CCc0myirZkdDqWIdfwIG/zgWgrEh1drpZw8MizlkqU=)
5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:8f:c6:e9:2a:23:15:5e:02:34:d0:e7:43:b5:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Sep 8 23:01:06 2025 GMT
Not After : Sep 9 23:01:06 2025 GMT
Subject: CN=0bd2d1da82c331cfd3d03a23b41660a155c712fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:85:c2:cf:ca:09:7d:14:78:5c:8c:ce:0a:
16:74:53:15:cf:6b:95:36:13:a6:a5:e3:4b:58:1a:
c9:48:b5:ad:6b:e1:a1:37:18:aa:2b:75:cf:ea:2c:
21:6b:4d:43:4a:85:d6:27:79:8d:45:72:a3:81:c5:
29:bc:1a:a5:5c:38:25:11:69:78:74:47:c3:e2:75:
11:4a:27:25:46:15:aa:85:47:57:08:5c:cc:e3:88:
cc:85:77:03:0d:6d:5f:67:33:c7:da:d2:f1:8b:a5:
d7:f9:21:0b:ab:43:ee:21:e2:b9:1d:69:43:50:4e:
4f:67:d4:a8:99:68:09:b4:80:37:e5:12:be:69:10:
dd:c7:fd:7e:3e:ac:d4:ec:a8:c0:bd:e2:ec:6a:7e:
5c:0b:69:0e:9c:12:17:46:32:13:b0:bd:eb:76:52:
8a:e7:f3:0b:7b:7c:e7:02:36:8c:9d:d9:61:03:88:
e9:c6:b4:99:44:b0:a2:87:f5:55:0a:0c:39:47:93:
a4:a0:1e:cf:33:3f:76:20:a8:e3:24:a8:c6:77:ee:
30:15:d9:bd:9d:ae:73:75:dd:f0:09:69:58:9c:dd:
25:bb:b5:41:10:81:90:1d:15:b0:f3:53:81:a4:d5:
1c:c1:f4:87:1e:ee:a5:79:e2:31:eb:c3:ad:4d:8f:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:D1:DA:82:C3:31:CF:D3:D0:3A:23:B4:16:60:A1:55:C7:12:FB
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:15:0e:2b:b1:a5:a5:86:42:d5:2c:c9:a3:1a:65:33:40:35:
c0:47:df:60:50:35:ec:5e:6d:b9:86:f0:ed:43:9d:ba:5c:14:
ce:0c:64:26:c5:91:74:f8:95:b9:47:60:c3:cf:98:be:7f:79:
b4:f8:bf:45:41:cf:f9:1f:cb:1c:fa:0a:c5:be:1a:01:a5:a2:
2a:fe:6b:88:03:28:0f:fe:a9:c5:59:58:56:03:96:c5:df:b7:
a4:a6:95:35:00:39:d6:c7:94:49:0e:f8:2d:cd:1c:5f:33:a6:
41:03:c2:b9:ee:17:34:e2:53:06:56:6d:0c:d2:1f:9c:43:d7:
80:c3:11:68:f4:a7:65:24:39:73:dd:49:71:72:aa:b8:e2:8b:
89:51:67:c3:85:06:31:2d:6c:de:3c:5b:52:b1:5d:98:e7:cb:
51:fc:f1:2a:59:14:02:22:05:47:ba:4a:f2:97:29:e3:c6:3e:
37:07:7b:8d:02:ef:a0:ca:b9:ab:ae:f8:35:09:81:bb:53:5f:
04:f4:4f:95:84:34:6d:6d:67:3e:78:de:06:4b:27:db:e0:d1:
2c:ba:23:88:7b:b9:7e:80:c8:d1:b5:6f:7d:5f:10:51:aa:78:
48:07:18:10:eb:d7:ea:bb:c6:c7:27:01:79:8c:79:35:7b:0b:
e2:66:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:44:15 2025 by rpki-client