Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: C25IxWlN9wcV+D/svf+BKSCfSRQdCu0JSEsQiNAW5Jw=
Subject key identifier: 40:D6:4B:18:3E:87:80:28:72:25:E2:4A:3D:5E:15:00:C7:4C:90:49
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 0198D4DFDC4350580B0685DAACF53B4258B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 114F
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: JvKPJW1IckucXiV8VqLMNr3SZ02YyN1JAjaLjC0i6m4=)
2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:dc:43:50:58:0b:06:85:da:ac:f5:3b:42:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=40d64b183e8780287225e24a3d5e1500c74c9049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:1c:c7:3d:a1:9a:e2:f5:01:9e:b0:11:51:
8f:ea:a7:30:49:f9:b1:36:49:e1:db:30:cf:a8:44:
ae:b9:2a:a1:dc:bc:49:7d:a4:d8:d8:af:0f:ad:00:
aa:f2:75:b8:b8:01:d2:36:3a:00:3f:8c:15:21:0b:
08:a2:23:e8:02:fa:00:19:b6:17:1c:31:ce:87:c3:
ed:fa:dd:1d:e8:4b:18:b6:80:a9:eb:a5:82:1a:2d:
8b:72:a9:2d:9e:dd:ba:6c:3b:85:26:a8:e2:37:4b:
38:4c:84:cf:a5:af:fe:bf:d2:44:74:9c:ab:10:b4:
9b:4a:ce:e1:5c:59:1d:a7:5c:f5:68:65:e7:ca:47:
76:04:77:da:e5:df:1f:6c:79:8d:5b:3c:d9:1f:f6:
b3:43:6f:f0:f8:ee:44:0a:35:4b:92:ec:fd:5f:66:
e3:fd:00:88:64:77:bd:71:d2:eb:52:01:22:70:6b:
e1:34:ff:10:d2:c9:c7:e6:d8:fc:33:02:eb:00:dd:
36:a4:4a:9d:1a:14:0f:6d:c5:a5:9d:d5:13:e5:37:
a7:bb:21:76:fc:73:08:01:d5:2b:cb:00:b4:03:12:
5a:ae:4c:a8:b1:31:73:28:21:d1:72:b9:1d:11:8b:
ea:90:38:b2:a3:11:8f:b0:6d:1b:09:7f:5e:d8:1e:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:4B:18:3E:87:80:28:72:25:E2:4A:3D:5E:15:00:C7:4C:90:49
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:eb:0a:9d:ec:13:f2:1c:e8:18:e4:2c:f9:38:a1:8d:e3:0a:
cc:2c:17:60:b4:ce:f5:fa:1b:16:64:ad:81:3b:ea:1c:bc:25:
62:4d:e8:24:bf:63:20:c9:28:d9:51:92:c1:e0:fe:b2:85:83:
ac:cc:7c:1d:a3:66:38:2c:13:05:0e:8e:93:7a:6d:0c:a3:10:
da:e5:f6:39:9d:8d:75:fa:82:93:79:f1:41:67:8d:54:7f:9b:
6c:7c:e9:b9:04:90:88:e8:e0:e2:c5:26:ea:e1:c3:33:cb:2e:
93:2d:89:8a:19:a7:22:41:be:c9:0a:51:a2:ff:b9:48:cb:bd:
ae:f8:81:de:b8:d9:ca:45:8a:ef:8f:cc:fa:d9:bd:fd:70:20:
8a:d7:d3:17:1d:2d:3b:8c:ca:95:8c:5f:bd:25:81:ff:7d:65:
21:91:c0:a9:6d:6d:52:89:59:2a:8c:e4:ba:13:b3:69:c0:93:
de:84:af:2a:ac:cc:f5:a1:63:c2:b7:45:e5:8c:e9:5d:5f:b1:
67:ae:53:a5:3a:a4:62:2e:40:79:51:5b:25:7f:91:2d:08:26:
c0:9a:47:06:aa:ef:85:4d:f7:f5:9f:17:27:28:5f:7e:55:d7:
ca:88:c3:86:67:07:ba:53:56:42:7a:56:bf:f2:f4:08:fd:c9:
44:d4:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:23 2025 by rpki-client