Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier: w8WKUSPz/ecYNhckqbJ+Ero0OJTbcu8wIFah/C3FaLc=
Subject key identifier: 7F:AF:BB:96:1C:91:D7:E9:05:CC:27:FB:EA:B7:DD:BF:A3:B6:F5:69
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 0198D7A8F5AAA26BBB4648DC4C6D3FD9A26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 16:00:30 +0000
Manifest this update: Sat 23 Aug 2025 16:00:30 +0000
Manifest next update: Sun 24 Aug 2025 16:00:30 +0000
Files and hashes: 1: J0_szuc94cDOPgNJ0yLN783Wnvs.roa (hash: 9y3mjauYNrbe3lUEgqyehF1KTbocvn7jwNFB7RZHERI=)
2: J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa (hash: wEQuNZ06+AXloUeRMR6QwQxwPhXa3MGT1uIFt5gyxuw=)
3: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: wxyjVySRqURQLPxuRtqk/wmEhQoNd+VOEirT85Kzo+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:f5:aa:a2:6b:bb:46:48:dc:4c:6d:3f:d9:a2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Aug 23 16:00:30 2025 GMT
Not After : Aug 24 16:00:30 2025 GMT
Subject: CN=7fafbb961c91d7e905cc27fbeab7ddbfa3b6f569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:3f:05:f1:c9:7d:2a:c4:3e:dd:54:f5:93:
93:c9:16:27:91:31:bd:64:a5:18:0c:48:29:b5:d9:
db:bb:0f:ca:51:8b:12:37:08:ec:36:8b:2e:3f:0d:
95:dc:65:44:db:2c:68:f8:0e:15:0a:29:45:1d:a0:
70:a8:7d:75:e5:3c:1c:d6:e2:f0:8b:f2:94:7b:8f:
ff:30:8e:8a:90:07:c7:ba:a9:98:37:1a:35:8a:c7:
f3:7e:08:20:53:fa:92:a3:93:0d:9e:33:91:e3:1b:
e5:12:ba:33:11:85:32:2e:11:b9:69:ae:4c:69:b7:
4d:29:0d:ca:e9:d8:a4:06:b1:56:cb:8e:ff:34:e1:
c1:39:12:87:8b:a4:39:9f:74:ac:a4:e7:ad:5e:cb:
d3:3c:12:2c:cf:af:36:99:22:24:7d:3b:0a:3d:a2:
c2:dd:0a:f4:9b:66:27:7d:c9:8c:ac:b2:02:3c:5f:
3c:38:41:36:aa:9b:d7:b2:d8:0c:11:77:48:8a:f1:
62:87:c3:e5:ee:83:1b:97:f8:59:54:33:01:45:25:
02:61:97:14:e0:de:ca:6a:ba:ff:d1:16:92:ed:fd:
ea:49:31:d0:74:bb:63:72:8b:1f:da:42:5e:44:37:
df:6b:8b:7f:a8:b8:f2:bc:bb:e3:a7:08:3b:b2:0c:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AF:BB:96:1C:91:D7:E9:05:CC:27:FB:EA:B7:DD:BF:A3:B6:F5:69
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f9:fc:66:1b:75:19:3a:a3:4f:da:51:82:4e:ee:74:4c:f2:
98:7b:40:61:1b:0e:98:21:a8:a9:ce:ff:e4:f4:89:29:89:83:
9d:e1:2d:a3:3c:3d:6e:bb:e8:8c:95:a3:2f:8a:a5:77:bf:60:
42:0a:41:af:e7:d7:3c:03:c3:ba:d7:d5:91:68:d8:ff:38:2d:
9f:64:b2:bc:ab:ca:4e:c8:99:4d:fb:fa:07:d3:f7:f4:fc:e2:
e6:cd:ce:72:1d:02:50:88:67:73:1c:3b:f9:56:2e:08:b6:67:
16:3f:70:46:04:43:90:50:ef:64:51:69:85:0d:f8:16:0d:f4:
29:a6:59:31:31:40:e0:bc:3f:8e:ca:6f:fd:12:ef:78:44:f8:
eb:c3:b8:b1:70:86:8e:51:38:2a:ac:fd:7d:c6:2b:83:61:08:
5c:3e:ae:23:57:74:24:c6:8b:24:21:6c:3d:72:8e:74:23:29:
c9:5c:6f:a7:be:d9:e7:e6:1a:5f:be:6c:6a:7a:78:c1:04:7b:
db:86:27:11:63:4c:61:ca:64:34:65:ef:55:82:43:cf:a2:22:
79:ff:91:89:e8:f5:19:76:04:c5:4c:f1:5f:c4:89:21:3d:e1:
87:51:b6:d8:8e:f7:cd:23:72:20:cd:dc:59:13:63:4e:9c:eb:
9e:b0:d4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:57:50 2025 by rpki-client