Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier: bvVFwhAJ8tjFJ/eWQWoi0MADI5Avxe1jYLTuhpdgp9o=
Subject key identifier: CE:8D:0C:5D:1F:00:D2:3A:B3:31:2D:8E:11:00:E6:EF:84:35:27:CA
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 0198D4E0B47AA9AD0B3049A73668EAC1590E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number: 114D
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=)
2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=)
3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=)
4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=)
5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: HoYAFaAVx8UCxMw3jdDRQg5zGriV+K1GfrKttQpXSuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b4:7a:a9:ad:0b:30:49:a7:36:68:ea:c1:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=ce8d0c5d1f00d23ab3312d8e1100e6ef843527ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:69:97:32:4e:d3:42:16:62:42:27:67:8d:
f1:66:40:a3:81:47:ea:2b:ce:f5:5c:ec:28:ba:79:
98:da:77:7f:99:d8:ab:21:6b:8f:96:f6:7f:c3:4d:
84:68:95:74:20:08:22:26:48:35:c3:9c:c1:d7:31:
c6:e0:1b:b6:d5:3b:0b:e7:73:4b:f7:96:a9:3f:18:
80:24:3f:30:92:8f:ca:02:38:75:76:db:c3:2b:be:
62:31:d4:ba:9a:67:ad:51:b5:69:81:7d:55:77:22:
a6:ff:76:5a:d8:fd:0d:84:f2:f4:b1:6d:42:83:e2:
3c:e2:bb:84:e3:1f:81:22:a4:61:39:12:52:cd:7d:
86:34:8a:f7:7f:7c:46:e0:f1:c1:45:c4:c8:50:ae:
08:bc:30:a6:81:ec:c9:33:87:dc:8c:b1:02:c5:12:
91:34:5b:bb:14:20:4f:e9:0f:a0:81:d7:c0:d7:3a:
40:4a:f4:10:1f:ea:67:3a:d2:f4:43:20:38:30:fa:
90:2f:b5:e6:6f:b6:df:ab:40:95:91:e9:aa:5f:10:
a4:06:1e:23:0b:73:f9:44:fe:a9:9e:54:2f:40:e2:
23:93:99:79:a0:07:f7:82:60:11:41:e1:65:7b:3f:
05:41:eb:19:9b:a7:93:21:5c:d3:2b:98:79:0f:98:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8D:0C:5D:1F:00:D2:3A:B3:31:2D:8E:11:00:E6:EF:84:35:27:CA
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b5:e8:99:05:df:f2:dc:f0:56:85:c0:41:f7:4b:40:1f:3b:
18:ee:57:eb:bb:7e:10:be:96:b0:c2:98:63:7f:0e:dc:12:08:
92:c1:d8:0d:95:04:ea:f7:e0:ce:e8:05:63:30:ac:a3:f1:69:
9f:12:44:f1:2c:01:e6:6c:06:28:d6:02:51:92:60:b2:04:74:
b6:e9:df:b1:8e:01:5c:72:28:dc:9d:ca:c1:26:a5:d7:1b:28:
09:10:77:82:1f:71:e3:25:1f:91:9c:3b:df:4a:18:66:96:14:
33:49:ff:f8:e4:74:9e:42:de:ed:ca:ad:02:c2:c1:da:5a:8e:
8e:d2:ec:58:78:50:d6:49:f1:27:91:da:64:c8:1c:b4:f7:b7:
82:2b:7e:9b:cb:30:12:af:1b:99:50:36:d3:de:a3:33:82:8e:
58:67:02:71:aa:51:a0:e6:c3:9a:d4:91:4f:ee:6b:ef:dd:e1:
14:91:f7:84:20:bc:5a:46:62:4a:10:58:bc:28:66:fe:1a:e7:
ef:4a:ee:17:4d:3f:89:66:a3:f3:68:1b:b8:c4:f2:ad:de:f4:
f1:e4:cc:c7:69:16:9a:27:b5:12:d3:5b:eb:d0:d3:d9:92:8e:
0f:33:ac:15:79:fa:55:01:80:59:3f:50:e3:0f:6f:94:b3:65:
e1:88:65:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:38 2025 by rpki-client