Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
File: FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json)
Hash identifier: iryni+9Rq3gWYpwMF0UqpXXaOFnMR+LMHS63vR7suDo=
Subject key identifier: 78:43:18:03:50:53:80:38:ED:1B:6D:82:B1:5B:14:0B:A3:EA:46:A7
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 0198D7E176A72FB30D4C72FD143E5D244FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 17:02:13 +0000
Manifest this update: Sat 23 Aug 2025 17:02:13 +0000
Manifest next update: Sun 24 Aug 2025 17:02:13 +0000
Files and hashes: 1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: YDCgCL6Ewu/gPTQ6BUNfizWj9s2IcM0Ix24zbpycfZo=)
2: c3go-15xGcBaQkyMFCkLYeR3zYQ.roa (hash: 4H2iOu8gLLffNi536xCsuCivAwnItfPi2vTZ/W207ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:76:a7:2f:b3:0d:4c:72:fd:14:3e:5d:24:4f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Aug 23 17:02:13 2025 GMT
Not After : Aug 24 17:02:13 2025 GMT
Subject: CN=7843180350538038ed1b6d82b15b140ba3ea46a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:d6:d7:6b:05:16:1e:b3:16:56:95:9d:9a:
4c:a8:09:b8:e5:31:18:0a:1a:c9:7e:69:6b:e4:43:
c7:c1:57:e4:0e:5a:c3:ee:d1:aa:83:7f:38:ed:05:
d0:5d:8e:6f:2d:65:e0:0e:70:1c:de:8a:d3:81:7f:
ae:ad:b0:47:41:d7:71:20:83:f3:f3:66:93:a0:ab:
62:63:7d:fe:36:08:f3:af:4d:b3:56:b8:46:a4:f6:
c5:5b:a5:33:d1:28:0a:1a:fc:22:9e:40:bd:da:ae:
e9:00:69:c5:e2:1e:4c:89:7a:58:6a:61:6d:97:68:
fa:ff:be:51:ea:f3:ac:ce:0e:e6:86:93:b6:c6:ca:
0b:a1:42:46:62:0a:eb:de:03:c2:fc:0f:03:fe:2a:
74:bc:a1:b5:66:95:75:04:c6:61:8c:b5:87:e5:61:
8d:98:04:37:8c:56:11:3c:05:26:1e:39:1d:f1:32:
c1:ae:96:b9:7f:9f:ef:12:c4:fe:77:23:e7:af:2b:
b3:38:e6:d6:bd:4a:de:db:13:dc:12:4f:4b:a6:52:
e3:64:51:d4:29:63:c2:2f:cd:95:51:60:72:a2:5d:
79:8d:17:c6:6d:a2:1b:45:6c:83:2d:d5:d5:5a:60:
c0:c5:f1:48:ff:94:bd:72:72:65:48:cc:de:6f:07:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:18:03:50:53:80:38:ED:1B:6D:82:B1:5B:14:0B:A3:EA:46:A7
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5e:d8:1d:73:7d:ef:b4:ba:1a:f4:f7:5e:22:c6:f0:fd:01:
2f:4e:b8:c4:72:c1:d3:7d:f4:d1:20:8e:f8:eb:d0:31:ce:ce:
d2:94:26:71:64:eb:57:a9:f3:16:c7:3c:50:f0:6d:66:f0:f2:
d6:7f:f7:c6:72:90:f4:31:98:a9:b6:ee:2a:6f:0b:11:41:6c:
10:77:81:dd:ae:3e:11:7a:f5:75:13:77:13:95:0f:a6:fc:53:
5e:52:08:52:36:ca:ed:95:72:e3:0a:17:9f:c1:4d:14:fe:7f:
9d:7d:b3:3e:94:8f:54:db:93:4e:e0:91:97:7b:a2:06:7d:81:
27:23:1c:9c:23:0c:d8:0a:ce:c7:20:97:11:68:b4:46:cb:c8:
9f:0e:94:21:94:e1:78:fa:36:c5:97:66:f8:59:4f:c1:6d:30:
77:d9:cb:06:db:d0:5c:5d:52:2e:ef:9c:5a:8f:89:96:c6:eb:
36:08:54:ee:fb:04:9b:98:e0:5f:c1:24:d5:d0:ed:cd:81:13:
8e:5e:d2:4d:ae:89:0d:14:b5:df:4a:b7:e2:40:2e:dd:f3:7e:
45:0a:d0:ab:f4:8a:04:83:b6:b1:5d:cb:23:b5:5a:ac:00:98:
db:7b:8e:c9:27:f4:5e:29:22:fe:15:e1:43:f6:0c:cb:27:69:
51:5c:3a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:16 2025 by rpki-client