Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: e5o/LPVmuqQ1Wt8xBn+tfP6MleVcNRK6GBMMQ3u6V/I=
Subject key identifier: E2:85:42:16:4C:B6:DE:F0:06:0A:BD:4C:55:D2:60:A9:6F:7D:51:10
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 0198D4A7E1E7318CDBF602295AD8CA305208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 06D5
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: 9HC-dVjnSoiBjTI-wFW5Aqlq_oY.roa (hash: mG2Ma2dDqG+dXSsvT9OJk25xVpUl5+N3IsrwQpPJXsQ=)
2: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (hash: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=)
3: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: a/K7YRzdkfAo/5X1OdoHsOMEFunaPQmQ7x1Ir3EtiCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e1:e7:31:8c:db:f6:02:29:5a:d8:ca:30:52:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=e28542164cb6def0060abd4c55d260a96f7d5110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:08:18:4c:61:30:3a:1b:28:69:5c:91:07:
0a:12:61:13:6b:2d:06:cc:ac:fa:a7:4d:ca:c5:ee:
c6:5c:f7:8c:fe:8d:72:0e:fc:69:43:11:42:3f:37:
20:94:36:27:3a:22:37:b6:66:f6:45:29:7e:02:13:
cc:56:b2:cd:13:a1:a8:8e:0c:99:f4:5b:1b:e8:28:
9a:cb:f0:35:af:0c:b4:9c:7d:0a:53:8a:75:51:51:
59:de:33:20:85:00:79:47:be:db:5e:5c:3c:f3:75:
1a:08:23:41:c3:c1:b9:3c:82:ba:21:64:f3:51:d5:
05:83:09:66:1d:e0:32:4f:98:ae:c3:a3:64:9e:4e:
41:20:95:2c:f6:8f:63:52:fe:a4:1d:5d:9f:2a:10:
66:ed:98:40:ea:2f:7e:1f:bb:8c:50:e1:69:3b:ea:
d2:82:bd:6c:79:a7:f0:4b:fd:8f:42:10:b1:5a:48:
4a:5d:71:34:70:b1:ed:73:d9:ee:46:df:a0:69:8b:
1d:09:f9:e1:58:60:50:a9:20:f4:28:b1:f0:2a:ae:
ea:ff:28:b5:11:d6:c1:f3:53:3c:4a:87:9f:31:51:
f0:ee:f0:e6:8f:0a:d6:bb:9a:6d:08:c9:61:62:9c:
0d:1a:4a:b5:fb:ef:28:15:6c:c8:76:13:a3:c7:8e:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:85:42:16:4C:B6:DE:F0:06:0A:BD:4C:55:D2:60:A9:6F:7D:51:10
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:79:e3:15:7a:83:35:60:ae:8f:cf:cf:05:dd:7e:dd:d0:6a:
10:a2:b5:a8:b0:72:8e:eb:d4:c1:d7:0f:d7:a0:2b:8a:f7:dc:
b1:74:90:e2:af:02:82:4e:63:73:b9:23:18:2b:cd:cd:6f:ac:
da:78:1f:da:52:19:f0:bd:03:13:a2:19:06:df:2f:79:92:0f:
9e:38:11:35:4a:d7:63:b7:3f:1c:77:d5:73:8a:7a:3c:e5:aa:
5f:2a:61:79:ea:46:ed:57:3a:3f:ba:b3:21:a3:c8:2d:1a:78:
24:df:28:c9:85:5f:00:30:4e:2a:54:5b:1d:59:1c:4d:4b:30:
c0:84:b3:99:a6:14:a3:10:a5:c4:54:c7:6e:56:01:a8:70:4a:
cd:e2:32:ec:bf:7e:5c:b1:31:02:c0:85:91:3a:f1:4b:d9:63:
6a:39:b3:fc:67:aa:32:2c:d0:db:76:aa:f5:df:3e:cf:ed:0e:
82:e5:d2:17:8a:cd:bf:67:44:0d:74:0c:ce:2c:9a:c0:d2:55:
21:e5:5a:5b:c6:42:70:19:0e:7f:a9:ff:02:24:2d:9e:fb:2d:
3e:15:fe:fa:62:31:e1:7a:dc:32:5f:78:54:e4:43:2f:dc:cd:
e4:d5:40:94:5f:94:b0:73:03:d6:7a:3a:d9:fd:93:69:c1:4d:
61:79:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:08 2025 by rpki-client