Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: 3XkFpPzkHBdoMwh5ksRzONQp/IvFv5MfnUHOi5DGIeY=
Subject key identifier: 0E:44:0B:86:FF:71:2D:18:75:20:ED:F4:5A:08:7B:77:1E:F8:11:09
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 0198D6612647CADBD2C5A76106F814DB18ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 1408
Signing time: Sat 23 Aug 2025 10:02:27 +0000
Manifest this update: Sat 23 Aug 2025 10:02:27 +0000
Manifest next update: Sun 24 Aug 2025 10:02:27 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: Fu+4NG8n1ya4Vt1GJbF/9IXGlZD0HeSaGq1JUzM6inM=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:26:47:ca:db:d2:c5:a7:61:06:f8:14:db:18:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Aug 23 10:02:27 2025 GMT
Not After : Aug 24 10:02:27 2025 GMT
Subject: CN=0e440b86ff712d187520edf45a087b771ef81109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:02:82:67:cc:59:4f:f9:cf:fd:70:3c:73:
b6:c2:77:39:59:7c:8a:40:b7:60:00:26:f1:10:e4:
13:77:2f:69:eb:09:31:ba:41:2f:0c:a3:25:70:7e:
38:f8:b5:2d:0a:32:f0:f5:ce:b7:f4:c5:40:bd:cd:
bc:db:c3:32:4a:3f:2f:2a:47:87:a8:32:15:f7:5e:
7d:a7:d4:62:a5:13:53:9e:5d:58:38:3a:eb:24:61:
41:01:4c:c9:26:d5:40:01:93:b3:ee:71:a4:79:cc:
57:f9:44:7b:6e:da:1d:2e:a3:a2:ce:2d:2b:9d:b1:
21:13:f4:45:ec:02:28:78:42:12:43:01:2a:00:f6:
18:ad:1b:f4:b9:34:ac:5e:63:39:7d:f0:32:83:8e:
b3:a2:86:7f:d1:9b:ef:c1:c8:29:d9:c8:b5:84:56:
bb:71:73:85:7b:de:a0:00:2f:b6:a8:18:77:8d:33:
dd:ec:eb:9a:68:c8:fd:b0:9f:33:25:0e:75:ae:01:
db:ad:74:47:0f:27:30:d5:2c:01:03:7c:e4:a5:33:
e6:86:97:90:42:23:2e:7e:35:54:bf:7d:32:75:ea:
0b:27:eb:d6:a2:ed:ed:31:94:2b:3d:25:26:82:ea:
92:fe:30:cd:78:9b:9c:b2:1b:93:9f:a7:f2:c9:e1:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:0B:86:FF:71:2D:18:75:20:ED:F4:5A:08:7B:77:1E:F8:11:09
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:39:ac:d2:a6:3b:4a:56:80:14:0f:98:74:1d:39:44:f1:5b:
9a:3a:87:e1:3f:b4:55:06:4f:65:1a:36:39:6d:fc:37:c9:9e:
8a:ec:3c:6e:e5:4a:ac:e6:77:37:1e:ed:cb:40:88:65:12:fa:
39:c7:18:53:6b:2b:0c:f0:41:8a:ae:43:64:4f:7c:c5:88:c4:
82:c2:f8:a2:a2:f8:eb:67:46:90:27:a2:26:5f:6c:5f:f8:20:
a3:e1:13:41:19:40:f0:31:1f:69:b2:94:13:4d:75:ca:1f:c8:
f9:95:21:1d:66:4a:2c:02:a2:30:f8:df:8b:7d:95:af:29:a3:
cb:2e:a1:1d:67:75:6e:44:82:ce:ec:a1:29:7a:1f:0e:a1:58:
a6:10:9d:b9:72:f9:7e:04:fe:f7:30:89:fd:98:d1:42:89:b4:
7d:4c:5a:29:47:5e:e6:14:59:3d:6a:1f:3e:89:06:f5:8b:ac:
eb:e3:6c:76:af:7b:f6:e5:81:6e:49:73:21:04:bb:27:db:9a:
b8:d8:95:97:a9:dc:23:1b:bd:4b:0c:a4:60:5b:0d:b6:e4:39:
cc:1a:de:ab:f0:31:b8:21:02:80:c0:a4:c7:4c:69:bf:be:b9:
e3:09:1b:25:5d:30:e0:41:62:6d:fe:ae:bd:19:be:13:b5:08:
c9:d6:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:15 2025 by rpki-client