Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: pbJp3312UbpHj0H7xttCrFzZ06xbm922/MtYM6kYQbA=
Subject key identifier: A9:E8:19:3D:65:4F:9A:8C:A8:CB:BE:A7:F8:EE:45:D5:F8:97:6D:EB
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 0199FB4623579621AF7DEEA94DF2CA7DA4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 1109
Signing time: Sun 19 Oct 2025 07:01:41 +0000
Manifest this update: Sun 19 Oct 2025 07:01:41 +0000
Manifest next update: Mon 20 Oct 2025 07:01:41 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: UC51N9vRbEAYre+XS2qM9o/a8duaqqAsOiw4XO4pHWQ=)
3: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (hash: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:23:57:96:21:af:7d:ee:a9:4d:f2:ca:7d:a4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Oct 19 07:01:41 2025 GMT
Not After : Oct 20 07:01:41 2025 GMT
Subject: CN=a9e8193d654f9a8ca8cbbea7f8ee45d5f8976deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:96:d1:df:61:2b:6f:ba:f3:ac:07:cb:e7:
f9:c5:69:a4:a8:9b:ce:5d:33:fd:89:16:a4:98:c7:
e9:05:0d:f1:3e:cd:2f:4c:82:23:1e:d9:9d:98:9f:
90:20:24:df:d1:ad:c5:c8:c5:b3:1f:f0:7d:1d:0c:
49:9f:fb:a7:52:60:89:9c:85:5a:31:de:8b:bf:a5:
6b:c4:79:f6:89:f2:8d:62:59:c5:3a:2f:c8:16:85:
1b:d6:43:d3:f3:d7:ef:61:ee:d4:09:dc:9a:81:b1:
7f:88:cb:8a:db:ac:da:e4:74:2c:ec:3b:0b:c7:09:
24:87:57:48:3c:33:91:0c:c3:da:c5:be:b9:8a:6d:
78:09:d5:3d:5f:2b:6e:f5:d4:1e:80:e3:73:a8:a2:
46:19:cf:07:f5:21:43:f6:e7:87:2e:7e:b7:d0:7a:
87:f5:76:38:53:22:fd:21:ad:2c:6a:a8:1a:3b:c7:
35:f2:86:9a:62:d9:36:d1:de:99:cd:eb:9e:a3:dc:
37:83:92:8a:0e:86:8e:69:a0:50:e7:79:c9:84:1f:
4e:73:fb:9a:fc:4c:33:9e:f1:a9:58:89:c7:c3:cb:
ef:5f:89:0c:b0:1a:ea:02:1e:1c:e1:de:8d:a8:16:
54:ff:6b:0e:d7:bc:e3:f0:58:23:97:8e:83:68:86:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:19:3D:65:4F:9A:8C:A8:CB:BE:A7:F8:EE:45:D5:F8:97:6D:EB
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f6:f2:33:f7:07:e2:f8:22:a4:70:80:b3:0e:8d:1e:a0:11:
ae:b9:1e:b4:22:dd:75:0d:b9:72:60:65:0e:18:36:ee:aa:d2:
a3:cd:8f:27:93:95:4b:77:87:3d:af:2d:e0:80:a1:bd:25:23:
de:58:df:31:0e:a7:ed:7f:9b:82:6e:e7:4c:63:5f:3d:8f:97:
96:0a:fd:00:0a:1d:42:0f:50:2c:39:ad:59:db:f9:c9:87:9f:
21:d8:e4:fa:7c:17:3b:9a:60:8b:e0:36:05:0b:17:72:5b:9f:
7a:dc:85:d3:bc:6e:2d:49:8f:68:d3:8e:9b:bd:90:6c:dc:5b:
a3:39:8f:1d:3a:8f:f0:c4:51:ca:d4:54:37:3d:8b:6b:a2:30:
d4:8d:f3:da:4d:a8:00:9f:c4:a9:f7:05:a8:54:09:7c:b9:a4:
6f:00:e0:40:8c:cb:39:3e:6d:95:9c:5e:ba:c1:62:c2:fd:4e:
aa:7e:eb:ea:6e:f0:a5:19:dd:e8:78:65:f3:de:e9:d5:86:49:
c9:98:43:83:fa:e2:aa:8a:01:0e:a8:b4:51:c8:11:87:1d:e1:
01:35:28:01:2c:db:27:3d:0a:05:b2:24:3d:b0:ef:05:29:ce:
e9:8f:e9:23:12:f2:97:59:b9:a6:d3:9c:d5:2a:f2:2d:79:88:
8d:32:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:15 2025 by rpki-client