Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: zTEeZKPIPcmkil0MFUEYKMNGHAva44vik/wSIYGgZy4=
Subject key identifier: F1:6D:E8:1E:F0:5C:D6:0B:CA:E6:37:B5:63:6F:BE:4A:FE:72:00:8E
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 0198D4E04F10A30E529FB5122B2D0A172B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0991
Signing time: Sat 23 Aug 2025 03:02:06 +0000
Manifest this update: Sat 23 Aug 2025 03:02:06 +0000
Manifest next update: Sun 24 Aug 2025 03:02:06 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: 9V6BA2I/WfrfNyH8bGTEYoeyVcrW6l3dxZD1H9j6Pa8=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4f:10:a3:0e:52:9f:b5:12:2b:2d:0a:17:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Aug 23 03:02:06 2025 GMT
Not After : Aug 24 03:02:06 2025 GMT
Subject: CN=f16de81ef05cd60bcae637b5636fbe4afe72008e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:33:b4:b8:0f:ec:4c:a5:d9:f5:3c:64:8a:
5a:85:48:e4:3f:92:05:ef:de:71:0e:3f:73:91:59:
0b:59:32:3f:3c:4e:7f:19:11:b9:9e:48:a0:4f:ad:
3e:f7:4d:2f:64:90:82:13:a2:e0:b2:75:f6:b3:aa:
f2:53:01:8c:23:b9:32:d4:75:85:3d:8a:6e:63:96:
8a:51:ea:f1:97:9f:99:e2:13:f3:ab:e2:98:38:37:
1f:3f:c9:6b:d5:5c:63:59:41:d9:6e:66:bc:b7:74:
01:6c:23:c8:6a:74:da:5f:9e:67:0f:44:b6:15:7f:
8d:bd:76:7d:5d:10:0e:14:d3:4f:6b:98:93:15:5c:
60:02:ba:2c:cd:7a:45:f1:a2:44:fe:69:f1:42:f9:
85:b1:a5:a0:f7:03:0d:bd:cd:68:d2:3d:ec:5e:b9:
be:de:df:83:4c:d0:fa:bf:40:80:aa:22:c4:5c:24:
cf:af:0a:7c:a6:05:19:89:9d:f5:58:ef:ba:12:61:
3d:fc:fe:1f:0b:99:c8:00:48:d3:71:8b:90:93:13:
2f:c7:42:b5:62:a1:6c:76:45:08:8c:c0:42:75:d3:
7d:af:4f:2d:38:7d:8f:54:21:00:f0:ed:da:9a:8c:
01:df:78:3b:ae:b0:51:ed:4e:70:ad:1f:8f:ce:01:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6D:E8:1E:F0:5C:D6:0B:CA:E6:37:B5:63:6F:BE:4A:FE:72:00:8E
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c4:91:22:98:1c:54:ea:d9:06:1a:a7:54:75:f0:4c:64:95:
23:ab:35:73:ab:70:76:06:44:bf:71:42:4b:f0:78:da:ab:a2:
b1:26:1f:fb:6d:51:0d:53:f3:f7:6f:d6:62:b8:08:e6:74:fc:
35:22:74:2e:fe:f2:09:d8:2d:1e:2d:4f:18:aa:85:4d:42:c8:
32:cf:30:72:44:86:85:84:a6:1d:9f:85:c5:3a:9e:e6:48:fd:
b2:6e:60:b8:62:ab:31:d8:6a:60:9c:f2:c4:eb:43:5e:41:0a:
ea:46:84:42:7f:f2:96:4c:fa:80:e5:a1:f4:cb:ea:9a:47:e1:
a8:af:60:7e:86:6b:0f:1a:54:74:fe:52:4e:be:34:1e:2c:20:
45:bb:3a:50:33:48:9b:bb:30:c9:dc:c5:65:7a:a4:93:94:25:
1c:77:09:fd:13:ed:f3:a7:7a:e8:a8:78:22:28:d9:9d:26:48:
42:31:d1:13:57:e6:a9:98:fc:b1:64:c1:b9:e5:31:71:84:9e:
02:7c:fa:40:7a:b3:82:ae:ad:c1:07:86:25:f1:8f:50:ac:e6:
ff:fc:c4:25:41:ee:00:39:09:9e:eb:7e:4c:13:06:0e:3c:2a:
27:b9:ac:de:1e:2f:69:b1:9e:12:75:fd:1c:81:2f:9b:9f:d1:
38:5c:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:25 2025 by rpki-client