Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: wPVRpZF1UvNcRcllWyZ0iO6TMtPutlsT5eUd70pVZWo=
Subject key identifier: E0:6D:FC:6F:9C:45:37:5F:9E:50:4C:2B:81:C0:9D:76:05:4A:28:B4
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 0198D5BB7D4EEF018DB868703FCBC5251326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:30 +0000
Manifest this update: Sat 23 Aug 2025 07:01:30 +0000
Manifest next update: Sun 24 Aug 2025 07:01:30 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: joIZY2smwDFmM/8SftPkNTpbQc2yqbAPrb14TrEmY18=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7d:4e:ef:01:8d:b8:68:70:3f:cb:c5:25:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Aug 23 07:01:30 2025 GMT
Not After : Aug 24 07:01:30 2025 GMT
Subject: CN=e06dfc6f9c45375f9e504c2b81c09d76054a28b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:03:e1:f7:6a:26:3b:0c:4a:e6:22:31:1a:
ea:21:62:72:65:be:57:32:3d:0e:8f:e8:8c:03:df:
0a:cc:6b:a7:f9:8f:39:37:06:23:3e:4f:56:72:79:
36:32:20:4a:c2:8e:bc:53:80:d8:1e:9d:3f:a9:90:
45:f4:d2:97:fd:8b:fe:61:3a:d8:ce:83:02:5b:52:
e8:6b:cc:9b:65:c2:3c:d3:15:55:ff:cb:0e:85:bb:
05:e3:1e:13:c7:df:9d:f0:03:2c:c0:90:27:d3:95:
85:41:18:b7:33:44:12:09:34:2c:67:cb:be:0d:f9:
78:70:eb:28:bb:91:91:c3:29:5e:71:c1:32:19:91:
bb:d3:e4:b7:b8:88:9d:bc:66:8c:d9:9f:f8:06:db:
04:2b:c8:2f:49:da:aa:96:4e:a5:8c:2b:c8:56:08:
0e:c6:2a:44:04:0e:04:95:df:59:d3:b5:a9:56:3c:
05:60:1c:a0:fe:d8:4b:2e:eb:e2:91:58:64:0f:8b:
f1:ef:85:3a:e3:d4:fd:00:08:51:95:3f:c3:74:a3:
08:57:18:70:ff:8f:fb:3d:e1:5e:9d:06:2f:e2:84:
09:18:80:60:5d:ed:9f:4e:8a:a7:24:4f:4d:db:ec:
60:70:79:56:13:27:b0:1e:a0:e8:57:ed:9f:74:8d:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6D:FC:6F:9C:45:37:5F:9E:50:4C:2B:81:C0:9D:76:05:4A:28:B4
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:79:6f:21:4f:6a:7b:3c:29:90:55:2e:9d:f0:56:87:fd:d9:
fd:12:5e:61:f0:5e:07:ee:15:4e:ad:8c:63:fe:78:34:aa:a3:
b2:34:24:d3:bc:0d:78:3a:ae:c9:99:af:47:73:86:f8:de:4e:
fb:cb:34:2e:82:4d:67:82:3d:c3:f4:de:a1:8c:16:5b:73:6c:
c4:34:90:26:e2:1b:27:18:eb:65:eb:77:54:c3:af:23:de:04:
fc:ac:b2:6e:3e:ec:f9:8d:30:07:e4:f8:5b:37:6f:60:61:60:
f7:33:d6:42:b6:1c:df:fe:7e:81:eb:fe:d9:18:be:09:51:25:
c1:79:5c:aa:a3:4c:21:09:01:43:55:1b:1a:27:d4:c1:ef:8b:
00:ba:c0:de:5e:68:1a:e4:8c:63:ed:13:3d:ce:c1:91:45:ac:
a0:56:87:09:f7:6c:51:8c:23:41:78:ef:63:f4:0b:3e:57:5d:
b3:d5:dd:bd:3e:ed:29:ea:15:05:a1:3e:e8:19:10:dc:7c:0c:
d1:f0:67:f0:10:0c:e9:a7:21:43:f6:17:25:42:5b:a0:15:d2:
69:8f:1d:80:c0:c9:6e:66:99:73:31:cf:56:00:a8:15:ab:53:
05:da:4e:8e:c7:20:f8:b6:68:b7:56:b0:c2:40:0c:63:8f:46:
ab:12:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:24 2025 by rpki-client