Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: YYg9dPGZnFYR7B8dXAeR3BEqg1Mze6nBMBHwuvywYeg=
Subject key identifier: 21:53:BE:74:37:E8:BC:4C:9D:91:BC:27:17:35:EF:55:35:65:DC:F0
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 0198D54E54F7B60318794BEB678BB914C174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 1401
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
2: 8v_aiBgvpLDJT4bE3zxJWwrf4Ao.roa (hash: wcB7NvMB7REyv6Xd72Vh3AOoxDTtyyThVZ07XtgTGL0=)
3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: WzQ3gCK+2nGQRkj8JIDn4ffZ1o/8IyMzVsWxQ05dhak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:54:f7:b6:03:18:79:4b:eb:67:8b:b9:14:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=2153be7437e8bc4c9d91bc271735ef553565dcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:f2:78:f8:f2:69:60:d5:ba:8e:99:e5:f5:
9f:f2:9a:fa:ec:22:8d:4a:3f:c5:ca:de:0b:58:7a:
28:57:90:35:ba:48:13:f5:16:19:88:fc:3e:1c:49:
96:d0:c1:a2:2b:a6:41:ed:27:43:19:16:c7:d0:87:
1e:af:fc:4d:1e:9b:fb:d7:b2:50:c6:c1:08:3e:2d:
9d:f0:9b:42:e1:cd:51:66:d1:d7:68:d8:c1:8c:ee:
90:2a:e4:88:17:4f:fa:72:6f:19:8c:27:1c:31:3f:
2d:1c:24:f3:74:b8:eb:d0:99:34:ef:61:0f:d3:d6:
4c:c5:d6:e3:c3:ed:5b:e5:87:16:e1:b4:02:48:8a:
ad:88:18:f3:60:fd:3c:19:40:6a:9d:76:3b:b5:70:
c2:3c:69:3b:eb:21:d3:2a:f7:33:f7:51:b3:47:05:
be:ca:bd:66:0e:be:c2:c7:e4:ff:84:f1:09:4f:d4:
40:04:89:49:20:2e:b4:9e:34:bf:f3:d8:40:02:40:
3d:3e:71:4f:b6:51:1b:74:3c:52:5e:9f:13:fa:c4:
4c:c9:89:4f:8c:89:1b:65:ca:bf:aa:18:da:16:a0:
8d:75:db:c7:da:a3:64:23:78:b2:f6:5b:a6:de:83:
23:41:65:3b:c9:7a:65:b0:b7:bd:fe:cb:3f:3b:d8:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:BE:74:37:E8:BC:4C:9D:91:BC:27:17:35:EF:55:35:65:DC:F0
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d7:a7:f0:de:52:72:e2:fd:a6:c6:d1:bb:11:cc:07:9b:aa:
0c:2f:44:70:c9:8f:ac:72:44:bc:65:66:0f:32:7e:11:af:83:
e8:21:3a:95:45:5b:09:da:9e:ce:cc:07:c6:a3:7a:2e:cb:13:
d7:39:ca:cb:16:81:c5:d4:9f:86:c8:d9:87:a9:20:3b:e3:c3:
cd:95:b2:81:c6:62:1e:b6:a1:52:5f:ab:2e:fb:e1:e9:4a:42:
21:44:68:70:3d:2f:55:df:fb:0a:32:2d:49:2a:95:5a:e1:51:
16:f3:5e:74:65:95:db:ff:73:ec:d4:48:c9:26:18:54:cb:f4:
a8:96:31:e4:15:50:d7:a4:f7:a4:da:a1:20:2b:1e:d1:fb:cc:
6a:12:23:65:75:af:58:10:12:dc:b2:48:35:b7:58:da:d1:6f:
ab:53:57:aa:b2:34:5b:04:50:a1:8a:68:49:5e:cf:66:c5:22:
a9:18:1f:3b:0f:6f:fa:06:27:45:2e:a2:b3:f7:32:ec:07:e6:
8b:a2:6a:00:60:b5:9f:81:03:f1:26:59:d4:b1:6d:70:80:49:
07:af:c4:57:32:8b:f3:3b:1c:1d:18:33:ba:b3:d3:0d:26:34:
e4:6d:15:b7:01:86:33:99:4b:c9:ea:ae:d5:f2:e3:f6:49:5e:
dd:ff:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:05 2025 by rpki-client