Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File: FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier: UQZrxkUh7j356kyIHLHlBhmrmxrSoc+dcoPR0ulhFZo=
Subject key identifier: 87:01:1B:4E:C5:EE:17:91:7B:1A:F7:F4:38:CC:BB:84:03:F3:11:C5
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer: /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial: 0198D472B2899EB7AE5AC63373070BE30B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:23 +0000
Manifest this update: Sat 23 Aug 2025 01:02:23 +0000
Manifest next update: Sun 24 Aug 2025 01:02:23 +0000
Files and hashes: 1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: SngpkIW8psbzH2T1NJymykNmn+xmIv/OmZCFhDzDhRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b2:89:9e:b7:ae:5a:c6:33:73:07:0b:e3:0b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Validity
Not Before: Aug 23 01:02:23 2025 GMT
Not After : Aug 24 01:02:23 2025 GMT
Subject: CN=87011b4ec5ee17917b1af7f438ccbb8403f311c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:0f:b7:ad:4b:0c:64:05:2d:d6:57:dc:2e:
6e:93:c2:3c:12:99:6d:14:ce:93:99:f6:f4:23:3c:
80:5d:5a:3b:63:3d:ac:6f:23:13:4e:7e:81:e9:5a:
75:d2:1a:0f:8b:86:fe:ab:0f:51:a0:9a:e5:79:09:
61:2e:fb:b4:a1:e0:8e:5a:3c:df:b2:a0:20:51:96:
b1:9c:c0:e7:00:a4:e7:7d:29:98:d8:22:b4:0a:16:
03:2f:ca:b0:20:53:76:ca:e3:81:0c:74:df:2b:07:
9e:cf:0b:83:82:ab:2a:24:c0:40:3c:44:bf:ec:db:
16:18:cf:84:29:4b:f3:86:ec:41:86:81:50:a8:2a:
6c:b7:d4:6b:7e:3c:d2:c3:ec:b8:5c:f5:10:cc:20:
31:cb:04:5c:6f:b6:42:bd:37:1a:c2:de:a3:41:23:
73:19:ca:a2:c0:e0:21:7d:1b:90:05:a9:16:4f:38:
f3:f5:4d:ae:2f:f5:9a:76:87:0f:67:69:65:dc:18:
5a:43:d2:50:b1:99:60:06:8d:a3:b3:ba:e1:c7:09:
21:4d:e8:b3:e5:0c:9e:c9:c0:f0:a9:12:fa:75:1b:
55:ef:bc:b8:80:2f:f6:ab:8e:46:93:5e:17:71:c7:
31:0e:44:20:2a:d8:c1:89:b6:06:94:27:75:d5:a3:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:01:1B:4E:C5:EE:17:91:7B:1A:F7:F4:38:CC:BB:84:03:F3:11:C5
X509v3 Authority Key Identifier:
keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:44:fc:bc:83:16:68:91:7f:66:43:78:9b:7f:22:68:89:7c:
d0:3a:79:6a:67:d7:38:9c:8a:fe:71:a9:72:8a:5e:80:d1:7a:
5e:4e:2d:af:81:0b:1d:f9:17:b4:0b:f1:1f:bf:6d:af:76:74:
ed:db:c3:70:db:2b:42:6e:10:35:d5:d4:d7:9b:1a:9c:2b:4c:
b3:47:e9:2d:4b:8f:3a:a4:f9:c6:56:b9:76:cd:e2:22:81:4e:
2e:04:ea:64:c0:46:2c:1d:4d:01:3c:97:69:a6:d0:2b:6e:0a:
e0:05:d2:0e:d4:25:93:cd:83:bb:28:d0:dc:9c:34:93:d7:49:
ce:4e:71:86:d9:dc:8d:66:62:2c:3d:dd:b8:d7:c2:12:c1:3c:
b7:20:61:b9:5c:c1:f0:b3:b9:9b:33:4c:98:47:40:a4:4e:f3:
d9:ff:bf:31:b3:f7:80:b5:c3:d4:60:44:fb:b3:03:4d:b3:f8:
8d:1c:e4:f8:de:cd:ea:8d:8e:f3:2d:a5:a8:d4:24:d0:f6:c3:
68:82:ce:f9:64:f6:7a:c6:46:bc:2a:f2:ff:a2:be:64:10:b0:
f2:d5:4c:b0:ef:f6:22:47:32:55:cd:c9:41:67:46:2d:c7:dc:
46:6f:ba:39:7b:e0:89:96:9d:9a:48:00:39:b0:e5:f0:1f:ae:
fa:03:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:37 2025 by rpki-client