Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: Hwuf9nVUpWboCnfY+vcfBNwpAUwUOp5FLLVLSwbjZ3A=
Subject key identifier: B0:8C:F5:54:DC:D2:66:DB:FB:F4:9B:A2:62:B0:10:8B:21:99:B1:1B
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 0198D583D3AE81801BF28C433E947800996A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 01DA
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: z1rZd2WCQlHXVC/9Im7rJ+cJ+Pgte8hH/vneXT5yPgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d3:ae:81:80:1b:f2:8c:43:3e:94:78:00:99:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=b08cf554dcd266dbfbf49ba262b0108b2199b11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:0e:d5:3c:27:53:cf:cf:bc:11:1b:80:88:
78:70:98:49:b2:ef:2a:bf:54:6d:09:bd:ff:85:00:
14:0b:dd:02:4c:4d:4e:ec:91:b3:d2:6d:d4:68:66:
13:8b:03:59:0e:8c:21:d3:9b:08:48:b9:7e:11:2e:
f3:b9:a0:b8:cc:86:be:8e:1a:a3:85:d7:0d:ec:07:
dd:34:7e:ca:13:f8:24:2d:d9:32:98:1c:fb:a7:78:
73:2d:6d:4e:c9:7f:9a:f5:2e:1e:f6:cf:77:1e:bb:
10:be:58:ce:2f:79:ef:99:d5:45:83:08:44:8e:ca:
c0:a8:84:bf:3f:6a:ae:44:22:00:6f:f6:f6:ed:a2:
06:1e:f5:e3:70:02:a8:25:81:27:bb:a0:ca:9b:cb:
20:a3:bb:46:a5:eb:37:4a:81:ed:fb:eb:cb:ec:ab:
78:47:c2:73:b7:1b:c4:7c:a5:25:08:cd:9b:60:0c:
7a:20:d0:18:fe:ed:64:87:b0:f9:cc:a9:86:bd:43:
6c:aa:72:dd:d5:b7:49:dd:c6:37:2d:5a:a0:73:f0:
db:fb:99:9b:04:13:b9:b7:e0:de:fd:77:b6:88:54:
c1:ea:eb:59:0c:55:12:6a:3b:30:7c:cc:95:90:36:
30:45:72:c4:c9:ca:d0:4a:45:ce:ed:a5:0b:96:69:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8C:F5:54:DC:D2:66:DB:FB:F4:9B:A2:62:B0:10:8B:21:99:B1:1B
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1e:c3:02:4d:5a:74:d8:63:23:91:26:d5:96:ee:26:75:3f:
67:81:a1:8c:e6:8d:28:e9:30:08:13:e5:e1:49:5f:69:55:8c:
0f:1a:c8:70:da:27:31:d2:fb:cd:ca:d4:93:20:cb:d5:f4:4d:
7e:11:bd:81:b4:23:b9:d4:8d:44:e0:61:7b:de:50:80:4c:86:
0b:75:f8:b0:ca:ad:fd:33:8b:71:bb:d8:d2:0c:24:69:e5:36:
61:1a:86:f2:42:00:f5:ce:0e:5b:24:95:03:c5:54:9d:a6:19:
29:ba:68:8d:6a:12:45:51:05:f5:d2:a5:46:0f:97:86:6c:98:
7b:c6:c2:9c:12:2e:77:ec:60:94:db:b1:e3:77:83:78:22:61:
6b:0b:9b:57:1a:e5:bc:1c:da:e4:3d:d6:53:5a:24:56:15:5e:
2f:07:be:7a:59:d6:70:77:82:65:74:59:92:54:f9:8b:f6:f9:
29:7e:c2:a8:a5:41:4c:34:86:52:35:8d:98:27:aa:22:c0:0d:
99:ea:80:26:dc:b5:6f:c6:13:ab:93:f1:aa:a5:17:27:8e:da:
14:93:42:f9:d2:10:bf:fa:23:db:0f:d7:34:09:5e:b7:28:03:
1c:8d:9d:08:9d:86:ed:5a:5e:66:67:7e:41:fc:a7:eb:4e:da:
f8:3d:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:23 2025 by rpki-client