Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
File: fh10krjoNfLk4q3k0sVNqat4r4w.mft (raw, json)
Hash identifier: ymWWA/jYZJamITja5+iFd2mNI0k5oHW81HBcRX2mkyA=
Subject key identifier: 30:5A:D7:E0:C9:38:66:21:5D:2B:56:B4:1B:6B:19:E7:B0:D7:82:06
Authority key identifier: 7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
Certificate issuer: /CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Certificate serial: 0198D5BC37BFF83144710D3FAF927AE46549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
Manifest number: 07A1
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: PgE9BW67Hzl1H_iUdCM9hiaWebE.roa (hash: /s5fkdZBUcDDsN3IZL7N+u3huKwHv5y1+anQQJEUKPw=)
2: fh10krjoNfLk4q3k0sVNqat4r4w.crl (hash: UYu6Ny+7/MzdFo7fu+GLtNx011f0UzWQEU6gjR2w6T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:37:bf:f8:31:44:71:0d:3f:af:92:7a:e4:65:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=305ad7e0c93866215d2b56b41b6b19e7b0d78206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:80:4a:b3:fc:e0:90:ef:ac:20:b4:8a:3b:
be:ac:22:1f:41:35:be:3e:08:cd:0b:e2:f1:6b:8e:
cb:71:0a:7e:81:50:94:cd:86:e4:57:a2:bf:e6:8c:
41:33:33:19:9d:fb:57:bb:d8:84:cb:fd:9a:a1:96:
53:a1:01:ca:be:f5:30:ca:3e:05:de:4d:c6:dc:20:
86:9a:97:5f:03:d3:ed:78:ab:79:96:47:23:3d:b8:
f4:60:c5:2e:95:49:76:ed:2e:ab:ac:b7:f3:d8:9d:
4b:0d:48:e8:bf:cd:6f:8f:65:f7:b6:89:1d:f3:53:
13:ec:9e:20:77:7e:da:f8:22:15:31:41:3d:7d:39:
53:df:bb:f0:30:9d:22:cc:b8:cf:ac:43:55:1f:71:
f7:cc:ae:1a:f0:1e:d9:36:eb:e5:d6:eb:20:c1:42:
7c:1c:d4:e0:08:08:f6:91:a9:1a:b0:b9:3a:cd:d6:
29:4a:14:be:22:21:d4:d2:1b:8a:8e:ac:a9:fa:e9:
55:22:d8:dc:41:c5:7e:03:60:f7:c4:93:48:10:3e:
6c:c0:2d:35:26:7b:5b:23:82:2e:72:18:8c:21:9c:
42:29:96:b3:ed:eb:50:86:af:12:35:f7:82:b9:7a:
21:7b:37:4f:88:df:90:df:87:35:4b:07:03:cd:15:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5A:D7:E0:C9:38:66:21:5D:2B:56:B4:1B:6B:19:E7:B0:D7:82:06
X509v3 Authority Key Identifier:
keyid:7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0a:6e:d4:e8:69:d1:44:84:57:68:d7:b2:8a:65:fc:f9:cf:
9e:24:f4:bb:33:af:e0:5e:cb:5d:57:dd:36:2c:7a:39:8d:34:
12:a2:4e:75:40:40:27:90:5f:b7:ce:23:68:f3:1a:75:26:c5:
c8:52:41:c0:79:95:3d:6a:e4:89:0f:61:a5:c3:26:98:c2:5f:
97:f5:d2:ee:67:87:8b:a8:99:86:4c:63:29:47:ce:90:ab:11:
56:f7:20:10:48:d8:45:6b:8f:bf:4b:4b:26:05:1d:4b:75:23:
3e:b8:59:0d:a2:1f:4f:08:8e:f2:e9:de:f6:e1:46:e1:88:f3:
18:0b:1a:1f:9f:26:13:a1:9c:f7:e0:ae:58:60:05:8f:64:35:
a2:00:76:a4:c3:97:84:1e:08:31:a9:e8:f7:e6:d3:66:cf:0a:
93:a9:69:f4:f1:ad:20:c6:92:13:fd:ae:69:ee:d0:73:a7:b5:
c6:6c:f3:de:3a:96:d8:48:ec:df:b5:46:c7:0a:02:01:ee:74:
92:53:cd:e7:57:96:62:95:0b:3c:24:7a:cb:86:ad:40:89:d6:
a0:3f:51:b5:1c:09:e7:19:a5:b4:e2:b6:d7:68:25:b5:1e:44:
8a:42:84:8c:47:70:12:f6:d4:08:c6:1d:ed:b3:5c:dd:cf:cf:
dc:9d:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:40 2025 by rpki-client