Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: u1SlMcBd5dZOznqCDlIwAfLOGOfI0gmMUUmnooOJOow=
Subject key identifier: 4B:76:3A:59:C3:B6:81:71:71:BB:E1:53:D5:AF:88:E9:C5:CC:71:ED
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 0198D5F17C7A1A8CF650483A9B7E539652C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 08A9
Signing time: Sat 23 Aug 2025 08:00:29 +0000
Manifest this update: Sat 23 Aug 2025 08:00:29 +0000
Manifest next update: Sun 24 Aug 2025 08:00:29 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: G5ZPV+VVZmi6yH38kju1rTu7cxgg329HtV33UT7x96A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7c:7a:1a:8c:f6:50:48:3a:9b:7e:53:96:52:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Aug 23 08:00:29 2025 GMT
Not After : Aug 24 08:00:29 2025 GMT
Subject: CN=4b763a59c3b6817171bbe153d5af88e9c5cc71ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:b0:8e:a1:75:22:2b:e7:8c:22:2c:71:dc:
9e:08:2f:93:f1:89:6b:68:48:66:c4:58:a1:7e:d9:
dc:8b:01:74:f3:d4:3c:02:fb:dd:39:29:e0:6c:a1:
68:bc:1e:e7:b7:0e:dd:7f:0e:e9:07:fd:ee:f0:5d:
41:a6:a1:33:6d:e2:83:58:ea:8c:c6:80:e0:d0:66:
ec:ec:50:f4:12:b5:b8:89:0f:dd:5f:7e:65:61:02:
b1:a4:c6:a1:3b:ec:22:d6:b1:3b:b6:8d:b9:91:fd:
d1:9e:e2:f2:22:e7:03:27:de:a6:4e:89:45:b2:f8:
e7:c0:60:9b:ac:0e:d0:1c:a0:63:ed:be:17:c4:c5:
71:5c:73:97:c4:72:d5:e6:d7:0c:bc:46:0f:e6:8a:
13:67:95:a0:17:16:29:15:dd:a4:23:01:b6:49:0b:
46:9e:a5:0f:c0:8c:b4:9a:b5:ed:be:27:37:6a:13:
ff:ab:90:73:51:5d:95:40:0d:bd:da:3c:50:c5:54:
b7:2a:e3:4e:42:df:13:5c:5b:98:99:b6:f3:79:3e:
a3:9a:42:c4:ec:bd:92:61:87:e3:00:89:96:bf:d7:
d7:72:d7:11:16:50:ef:26:54:1a:13:0f:46:43:1c:
79:b8:ce:47:8c:6a:c5:06:a9:7a:a8:2d:9a:c4:4d:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:76:3A:59:C3:B6:81:71:71:BB:E1:53:D5:AF:88:E9:C5:CC:71:ED
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fb:51:22:29:3d:3c:4b:f3:48:b5:ae:0b:01:76:95:a5:b8:
7f:c4:62:38:71:48:06:91:bb:84:4f:1b:b1:d1:11:d7:b9:47:
c0:d7:4f:56:01:80:d1:31:2f:b7:12:6e:94:b9:91:9c:81:7f:
9c:35:c0:d8:77:c8:eb:ef:f0:df:a7:67:f0:75:52:80:d3:cd:
bd:10:b0:33:e0:14:6f:5d:f1:81:20:8d:9c:cc:0e:b9:b7:e9:
a8:71:e7:d0:09:ad:49:20:8e:fd:a2:7b:6c:25:32:c8:e8:cd:
ae:19:d0:ef:3d:5f:9e:0b:43:35:05:68:e8:b8:22:5e:0f:1f:
f2:10:30:ec:ca:b3:61:b1:ff:93:c2:ae:31:5d:50:e9:b6:77:
eb:32:29:70:cb:1b:62:64:35:91:77:fb:b5:19:10:d5:96:97:
22:36:b1:73:c6:f4:b2:8e:c1:fd:1b:65:5d:6d:e2:a3:cc:ce:
8e:18:33:1a:04:6a:4b:64:95:0d:22:99:f3:49:26:16:0f:e2:
f5:c3:37:f9:65:e3:28:ef:8e:1a:7b:14:b6:76:1e:56:f8:28:
b4:7d:55:03:b6:58:9d:d6:d9:b0:f7:83:62:b4:13:66:45:25:
6f:0a:d7:32:3b:a3:6c:26:28:f4:8a:8c:df:09:cd:be:9c:ca:
a6:17:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:06 2025 by rpki-client