Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: +kpcSM7d0ErDAs+1zJRk+2oTB57+ZWFOhK7Onz1cZ9w=
Subject key identifier: 21:61:8D:1C:06:35:D8:B5:FB:C0:54:CD:E6:11:E2:12:74:8B:CB:8D
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 0198D5BBE475D90663DF8E0983446E9B0243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0D5D
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: dWmsOWayzQrhACw6PZROUA9TY4k.roa (hash: k+N79FADkE2zFtD7FMss3oaOymFQNUYiml90eSHs5KE=)
2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: iEiysNPwwbN6HQOafE4BQLVdl7OxX0DC9cksAQLi1gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e4:75:d9:06:63:df:8e:09:83:44:6e:9b:02:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=21618d1c0635d8b5fbc054cde611e212748bcb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:d6:b6:1a:4f:68:74:f7:69:2c:5f:a7:e5:
f0:f8:b7:0a:fe:87:5d:db:a3:83:29:81:c1:aa:20:
3d:77:53:e1:f1:56:7f:e2:32:14:dc:db:f0:1e:16:
72:b0:7b:e1:3f:d5:da:90:30:f2:da:71:1c:9e:9a:
1a:4c:a4:c4:65:2e:dd:90:88:0c:ec:7b:c7:38:c3:
48:56:35:b3:a6:b7:30:c9:ae:e4:d4:26:4a:82:c0:
1e:ce:ca:84:95:30:98:a2:8e:91:4b:53:e0:5a:23:
8d:8a:61:03:f9:78:ef:25:ba:53:7f:d8:a0:b9:0d:
17:64:16:1f:c2:79:9c:b9:a9:95:0b:6f:d7:e4:01:
74:63:f4:7e:2b:4e:89:60:87:2a:8c:d0:19:b8:5e:
cf:6e:1f:25:f4:a2:d9:d3:d7:c4:e6:b4:e6:17:31:
2a:fb:90:cb:e0:c3:53:e7:4a:a6:af:6b:7d:12:6b:
66:f6:64:ee:85:85:61:8f:3b:14:eb:4c:fc:31:c1:
b4:75:a9:dd:89:c4:c6:48:17:9c:08:28:93:d9:c5:
3a:e1:3d:eb:0c:0a:7f:f2:0b:e5:71:19:19:a5:19:
bb:46:44:02:d7:a5:79:4d:38:57:5e:5e:df:44:5a:
05:4e:b2:67:2e:4d:50:31:76:c1:ba:d8:20:39:96:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:61:8D:1C:06:35:D8:B5:FB:C0:54:CD:E6:11:E2:12:74:8B:CB:8D
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:56:9d:fd:ed:3d:14:49:b2:ff:25:7c:df:23:86:9b:68:b2:
aa:e4:b8:19:ee:da:2c:6c:b7:cf:b2:df:fc:0c:bc:b1:86:da:
f6:77:4c:91:47:5f:6b:62:c0:ce:e0:79:54:07:4c:3a:73:98:
5c:b5:86:c0:69:2a:b8:ad:43:15:82:8c:fc:fb:9d:b3:85:92:
af:67:9a:8f:24:63:b0:9b:f4:d6:b0:7c:a7:a9:48:91:83:a2:
13:fc:96:6f:e8:9d:db:6e:f5:91:86:a9:93:d3:f8:59:2a:50:
74:2d:68:72:3d:b0:c4:de:59:35:54:cd:e2:6d:9c:de:bb:9b:
4d:ed:0c:b8:37:9f:11:a3:4a:72:74:cc:3f:8b:c7:e3:09:56:
0e:06:0e:b0:93:2a:f1:06:b3:7a:a7:b9:61:96:b7:a7:dd:ce:
d1:61:8e:11:6a:e5:86:ed:ea:e9:63:93:92:8d:fc:ea:ac:22:
a1:b4:09:0f:da:23:68:95:c0:e6:d0:ba:6c:30:3b:c1:46:66:
54:c1:0d:f2:f3:7c:5c:58:10:d4:91:b7:d3:d7:13:68:0c:74:
ad:92:04:c8:65:77:9d:e7:31:2b:cd:ad:ae:b5:52:23:53:e0:
9e:a0:9d:4a:d3:ca:a5:42:4d:d5:5e:0f:6c:fd:2e:d9:c1:9f:
c0:dc:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:19 2025 by rpki-client