Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: xkGqB7HutPzRJN6Qp6w8Zj9WpngD1M/hEOtq+1eJ2BA=
Subject key identifier: 10:FE:21:D7:7F:08:50:F5:35:11:37:A4:FB:E0:D5:13:1E:4A:16:42
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019A033530F08ECF9951B54EB9F91B55B362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0945
Signing time: Mon 20 Oct 2025 20:00:08 +0000
Manifest this update: Mon 20 Oct 2025 20:00:08 +0000
Manifest next update: Tue 21 Oct 2025 20:00:08 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: HVPnKdg5tbrh6iFWYrl7ZcUFxhpXarmADOBlfikn8Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:30:f0:8e:cf:99:51:b5:4e:b9:f9:1b:55:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Oct 20 20:00:08 2025 GMT
Not After : Oct 21 20:00:08 2025 GMT
Subject: CN=10fe21d77f0850f5351137a4fbe0d5131e4a1642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:60:0c:49:35:2b:92:90:8d:6f:21:8e:9e:
e6:f2:a2:d5:54:c3:6e:65:2d:61:a0:c7:50:6e:5d:
e3:19:f8:7f:a4:74:7a:37:3f:bf:4a:52:a6:1c:b0:
36:99:07:36:ab:22:ca:95:22:b1:44:93:5a:e1:59:
8a:63:b9:40:0b:59:2f:30:b5:cf:b8:ee:1f:91:ac:
aa:21:3e:9d:92:1e:ef:4b:6b:1c:9a:41:92:47:2c:
52:5a:81:17:f7:8e:43:62:5a:1c:f8:c9:16:fe:f8:
dc:c3:84:f1:5f:75:6b:d4:e7:b0:1a:ec:79:57:6c:
8e:5b:95:e3:08:37:c2:f2:69:bb:2b:de:61:30:6a:
8d:22:0b:33:5c:f2:76:54:d7:2a:c6:f9:0d:34:82:
a6:c4:fc:fd:b4:87:f8:08:d0:18:b8:24:0c:e7:6c:
7e:78:c4:a6:2e:11:29:01:5a:52:c8:1c:23:0e:31:
bb:72:7e:c8:80:bf:55:61:f2:bb:77:96:5e:f5:84:
cd:65:74:33:99:d6:97:ad:53:8e:3a:af:92:dd:75:
ad:d2:70:78:08:13:da:97:01:70:29:65:d0:1c:8d:
4e:21:a2:ca:5c:dd:41:e1:49:b5:c0:f6:5e:09:bd:
8e:f0:80:6f:95:10:4f:22:3b:99:fd:89:7a:b6:75:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FE:21:D7:7F:08:50:F5:35:11:37:A4:FB:E0:D5:13:1E:4A:16:42
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ac:0c:37:99:29:7a:4f:31:9a:f0:64:38:b6:3f:78:67:eb:
a1:86:3f:2e:ef:2e:85:16:60:57:ed:32:d2:f2:5b:09:79:5a:
ac:54:d0:17:e4:18:c9:f8:9c:98:63:3a:55:60:38:0b:38:71:
4d:5a:3c:a1:23:7d:7c:8f:30:f1:a6:ff:be:a5:8b:fe:88:b7:
96:35:e7:a6:0e:66:09:7b:c1:8d:cc:ce:eb:21:bf:4a:7d:00:
e5:23:2d:f7:c3:27:3f:5b:3e:e6:40:cb:e0:be:24:39:dc:a5:
7d:15:47:a7:d0:ba:f7:89:32:ca:17:58:ff:c2:51:27:db:7c:
6d:00:07:07:13:77:80:82:44:d8:34:8c:0f:7a:12:bb:eb:c1:
92:2f:19:66:72:c3:0d:81:9a:e0:a6:56:43:20:8c:5b:ee:bc:
3c:af:a4:06:ca:15:ac:fc:75:a7:e8:a9:2f:ef:1d:30:2a:18:
81:c8:ad:22:b1:ec:93:4c:fd:51:a1:f7:33:34:57:eb:59:32:
89:2e:9d:1d:19:b5:00:f1:2b:46:b9:11:68:88:3a:00:17:50:
ab:8a:b0:ea:ee:c6:f0:98:f2:7b:2c:6c:1b:41:2c:16:6f:5f:
58:2b:2d:43:cc:b5:ba:2a:65:88:92:7f:f8:8a:5f:92:77:3d:
71:2b:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:40 2025 by rpki-client