Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File: F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier: mpCvp+fPH4iIerluzpFmkzhGIeTr5SC0BNjleJgK76Y=
Subject key identifier: E4:E4:D3:1E:9D:A4:E3:FE:F7:44:C2:A9:B9:97:50:E6:36:8E:31:50
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial: 0198D69879057AB08AFD09B9318E972B26B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:53 +0000
Manifest this update: Sat 23 Aug 2025 11:02:53 +0000
Manifest next update: Sun 24 Aug 2025 11:02:53 +0000
Files and hashes: 1: 2zPO2m1PUGY-iLAYnC4rJmYASPE.roa (hash: Rs7PMbEzIpZxq7FwWF4kt1+4OAfZU7egEzwfwjyWknc=)
2: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: rSwSs230uFTKCyOW6tyls5NvqAGTYW5uXyDCb+0u1Fc=)
3: sL81ThqOdiuggWYnv3U7dVFV4tQ.roa (hash: 9lHlaxhYv60ZuaT3Wq1aBGjk7nIJ6koMpcmTPm5Lg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:79:05:7a:b0:8a:fd:09:b9:31:8e:97:2b:26:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Validity
Not Before: Aug 23 11:02:53 2025 GMT
Not After : Aug 24 11:02:53 2025 GMT
Subject: CN=e4e4d31e9da4e3fef744c2a9b99750e6368e3150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:1f:cc:06:6d:1f:6b:f2:d4:f7:21:cf:d5:
08:1e:dc:ca:97:89:0f:3b:42:3b:2b:ea:46:3d:0a:
69:72:07:bf:4e:67:3d:42:f6:ba:09:52:9c:99:5b:
20:27:e8:1d:00:ae:f9:48:47:8d:0f:fe:9b:f6:b8:
4f:8d:4b:d4:95:ab:0c:cd:f5:e1:7b:6a:a9:19:2e:
cf:4f:be:e6:dd:86:12:70:1f:87:2f:11:21:9b:31:
5e:68:81:72:60:72:75:ee:3e:17:a4:ea:79:f1:98:
80:22:b7:9f:37:4b:0c:0c:ed:5e:35:6a:cf:ff:ae:
38:7b:ac:73:38:83:7a:24:12:b0:71:4d:e3:c7:6e:
a0:6e:d2:67:6e:95:45:a2:49:40:9d:40:13:db:97:
bc:88:b7:7f:4d:1a:7b:ec:de:4a:b2:3f:b4:cf:5d:
90:10:72:3f:8c:85:1a:39:c0:ca:e4:09:ed:d1:56:
e9:d3:e1:35:95:96:63:30:4b:66:c9:81:7d:1f:26:
12:8a:45:2c:a5:c4:4c:35:d0:06:42:d3:21:77:0b:
3f:25:b6:01:82:3d:bb:53:b2:60:c2:23:49:ad:16:
60:0e:a1:11:d1:b6:c5:38:63:6f:27:86:52:9c:0c:
df:65:0f:4c:12:9d:2c:4f:05:05:c1:0c:ee:e4:8e:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:D3:1E:9D:A4:E3:FE:F7:44:C2:A9:B9:97:50:E6:36:8E:31:50
X509v3 Authority Key Identifier:
keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:28:ef:24:b4:fd:ae:97:21:00:e4:ff:3c:48:78:48:c0:ca:
da:de:dc:92:21:a9:e5:4a:12:31:b6:bf:ee:97:b6:9f:55:4c:
69:c3:3b:f9:f0:1b:57:79:9e:cc:76:21:fd:d7:a8:b4:a0:c8:
a5:01:b9:41:8e:59:1f:85:40:2d:89:23:60:ef:e1:3b:c2:41:
48:c4:a6:63:4a:91:ca:cb:41:f0:0e:b0:9a:e5:b3:a3:f3:a1:
c4:a8:aa:db:05:92:4e:85:80:be:ac:2a:34:d4:a5:bc:e0:f5:
e1:3d:7b:74:53:80:5c:8d:31:d3:e7:40:88:7e:f2:3c:59:72:
57:fd:53:f2:08:72:09:0c:1d:49:8f:8a:fb:85:2c:31:b1:72:
30:c4:76:4d:d2:60:bf:ca:00:db:29:d4:c8:35:f2:05:7d:71:
ea:c1:95:32:3c:e7:a9:43:fa:01:b1:1c:4d:2e:b8:92:c8:bf:
58:26:fa:d4:2a:ba:24:98:57:7f:fd:01:b6:7c:17:2e:dd:64:
05:1e:a0:bf:91:7b:53:71:30:19:84:7c:54:0f:e9:67:ec:a8:
dc:20:f8:38:e9:38:14:a7:b6:34:8f:18:24:c7:66:a3:5a:2f:
1f:32:e1:ec:e3:f5:e1:4a:3b:dd:bd:d1:7c:f7:00:02:74:8e:
01:06:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:56 2025 by rpki-client