Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: fDXHZW6w/WZqyoK6g9k8eh/nGzWl7CYTiDsnf1goyfs=
Subject key identifier: 89:30:F7:64:89:8B:E7:9B:35:3E:1B:3B:3A:8C:73:14:D3:19:E2:42
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 0198D4E0133C76665D38678C8558EBD02EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:01:51 +0000
Manifest this update: Sat 23 Aug 2025 03:01:51 +0000
Manifest next update: Sun 24 Aug 2025 03:01:51 +0000
Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: 0TDJOt6t7FvB7AK3K1ZeL3SsAsOjvS0a35fTelixkyI=)
2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:13:3c:76:66:5d:38:67:8c:85:58:eb:d0:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Aug 23 03:01:51 2025 GMT
Not After : Aug 24 03:01:51 2025 GMT
Subject: CN=8930f764898be79b353e1b3b3a8c7314d319e242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:5f:6b:79:f3:a6:96:df:b5:ec:6c:d5:0d:
b1:f1:35:09:6c:b7:3e:65:b3:7d:44:df:71:ca:02:
63:8b:a7:d3:8c:b8:11:9b:eb:f3:e8:f4:a7:cd:ce:
0f:35:7d:16:9f:47:9b:9b:25:6f:ce:87:7d:7a:5d:
e6:49:7c:1f:5c:bb:f7:f5:3d:c6:1e:3a:64:c2:9f:
fd:22:6e:be:45:e3:b5:0d:e5:1c:e9:8a:08:88:5a:
bb:cb:d1:11:5b:08:53:bb:a8:2e:39:3e:f6:07:59:
84:f9:c8:25:bd:69:3d:b7:4d:ed:86:08:7a:51:32:
aa:13:24:4c:29:7c:7d:d8:37:15:91:3d:07:8d:24:
1f:21:ca:d9:60:78:41:5a:a9:b6:48:fd:46:e2:3b:
37:df:40:eb:60:15:91:df:d5:1b:52:5d:43:a6:cf:
5a:9e:15:eb:e4:37:32:bb:e0:08:0e:fe:ac:b8:33:
ed:d0:b0:88:8b:e0:40:cd:fc:9e:7f:20:08:77:07:
53:d6:f2:0b:6a:ee:8a:d2:e7:03:e3:32:a7:c5:14:
7b:d5:b0:19:c0:ab:0a:aa:28:7f:38:da:02:2d:4a:
dc:88:91:4d:60:c3:65:53:ea:02:9a:60:7b:b2:19:
bc:18:ea:11:83:5b:ae:95:0f:3a:45:63:20:7c:cc:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:F7:64:89:8B:E7:9B:35:3E:1B:3B:3A:8C:73:14:D3:19:E2:42
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:75:d1:c8:71:1c:83:29:cc:f9:61:8e:80:db:03:90:76:50:
ff:8d:3d:02:a9:b3:08:8e:c9:a9:b0:fa:39:fe:d3:ea:2a:b8:
2b:48:cc:f4:86:88:33:21:a2:c0:a4:ba:4a:2a:5b:17:24:6b:
a1:3e:54:4c:06:c2:a9:bd:fc:28:ac:ea:b8:92:06:c6:2f:59:
55:7f:fa:3a:69:97:1b:34:2b:aa:b3:91:14:53:03:ac:87:ca:
7e:40:4e:3e:30:26:b6:e9:c1:25:10:3f:c3:6f:ac:6c:f3:e7:
f1:6b:70:16:d1:cc:4b:92:a6:aa:99:63:9d:4a:d6:76:f6:91:
b9:47:6c:0f:8c:22:bb:cb:7a:19:b0:cd:7c:62:80:fd:80:ad:
b3:d8:7d:3e:ab:48:32:09:e7:b5:08:9b:5c:87:cc:2b:94:4e:
be:11:71:9e:ad:59:7b:79:29:de:12:2c:f7:86:7c:36:a3:5b:
6b:ad:e3:9f:33:62:71:54:d1:4f:4a:e3:9f:8d:e1:24:2f:b3:
bb:bb:93:01:7a:29:6e:61:1d:d4:d8:7b:f3:48:65:bb:a1:82:
ad:33:0f:3e:ac:ae:4c:4d:3e:9e:da:ea:e6:17:cb:33:f5:09:
a4:f0:48:58:6a:78:1d:98:f1:9a:fd:27:99:a7:eb:c1:0c:fe:
17:61:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:55 2025 by rpki-client