Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: QSwXMDJ28u+W9rBpXhhLoM3wco8nO9Vej7PXYFy9TAM=
Subject key identifier: FF:76:8D:B1:FA:0F:30:5E:3D:24:FD:E3:80:22:8D:ED:73:B5:08:1B
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 0198D4A7AE11DA4C96AD321D7232DAAB5919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 1107
Signing time: Sat 23 Aug 2025 02:00:15 +0000
Manifest this update: Sat 23 Aug 2025 02:00:15 +0000
Manifest next update: Sun 24 Aug 2025 02:00:15 +0000
Files and hashes: 1: 9EqEs9kwmY_afaGGWiQxlVt0aF4.roa (hash: 9tO3YJsoJl/Lblpr3bNKOp6wQ25w+0SVWvdi5BP+Als=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: QS5YzQx/3VbJ0sYP9ai1z75QzbiGVnF5uJd01HRbFE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ae:11:da:4c:96:ad:32:1d:72:32:da:ab:59:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Aug 23 02:00:15 2025 GMT
Not After : Aug 24 02:00:15 2025 GMT
Subject: CN=ff768db1fa0f305e3d24fde380228ded73b5081b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:f7:ad:74:27:fa:bb:d2:22:da:24:dc:30:
06:cf:7c:02:f7:d4:64:96:d1:e4:94:b7:05:49:02:
85:82:5d:8d:b1:fa:f7:5f:03:69:c1:2d:1a:fe:18:
e5:4e:03:bf:a5:89:8f:33:d2:75:89:ec:a7:c3:88:
b8:96:6a:3a:10:19:3b:f1:52:47:38:79:44:d4:97:
a3:e4:dd:11:c3:2d:3d:a8:49:6d:82:64:39:fc:ca:
3c:ef:98:82:8a:4a:43:a9:ac:9a:ec:08:d1:54:62:
99:3c:26:1d:ab:4e:f6:ab:9b:f9:c3:c6:51:f7:d0:
96:64:3a:a2:04:ec:b3:f9:74:f2:93:d3:1a:12:e5:
49:2b:3b:af:56:a9:00:27:4d:54:53:08:b9:52:f9:
84:a3:1c:5f:49:c6:bb:85:7b:fd:b0:09:32:cc:31:
4a:36:f1:08:19:35:c9:6e:21:cb:7d:0d:e9:bc:59:
cc:cb:15:20:0c:17:8a:8e:83:57:ae:7a:c5:7c:0e:
74:63:fd:cc:f6:63:71:51:25:3f:6c:27:b0:f8:3c:
8b:23:85:83:d0:93:79:9e:90:e9:7a:a4:9d:11:d1:
f7:50:12:3a:b2:05:3b:e0:ed:63:93:72:8c:a8:f2:
38:73:a6:1e:a3:b5:be:25:99:0c:92:7c:b1:2e:84:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:8D:B1:FA:0F:30:5E:3D:24:FD:E3:80:22:8D:ED:73:B5:08:1B
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a2:1d:11:42:56:47:39:22:60:14:17:ce:0e:fd:b7:4f:6e:
56:41:54:4f:ed:c4:dd:7e:f1:71:7b:f3:27:86:92:c7:43:20:
d1:a8:fc:a1:17:26:25:0b:ea:ea:d6:c1:ba:15:45:ab:d7:c5:
2a:ab:ed:dc:33:37:bd:09:cb:a5:cf:69:ce:24:dc:67:60:6b:
99:a6:a0:bf:6d:bc:dc:44:00:61:17:a1:04:03:e3:b2:b2:d8:
76:68:7f:ba:02:d6:cb:d7:aa:22:2e:c1:48:ea:53:14:95:43:
a9:8a:5e:0e:cb:e5:f1:08:2c:b6:72:2b:35:4c:50:fc:2e:cb:
a6:08:e6:1a:78:6f:7e:e9:fc:e2:f7:8c:47:a3:59:78:ee:d3:
07:df:bb:ef:cf:2c:9c:4b:59:de:65:a7:88:88:59:b3:4c:24:
00:d0:00:30:a6:ef:0a:b5:e3:6b:d6:67:0d:a3:4e:71:10:bf:
bf:e0:de:07:a3:73:3e:0e:9d:54:97:e6:5e:23:48:a1:da:c4:
a6:56:e2:61:18:83:97:d9:db:eb:63:86:24:86:91:c1:d1:f3:
8d:b6:63:ae:f6:63:37:26:99:5d:43:c9:08:14:ef:6f:72:fb:
dd:df:8a:a6:4e:af:de:3a:3d:a1:4a:84:80:e6:37:bc:8b:e2:
f5:c9:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:41 2025 by rpki-client