Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: W3wlWAJxASS1ddWO7ctGW5mup6rgmXiLfYzVTLaXQt8=
Subject key identifier: 2D:B4:9C:2F:FE:FA:BC:9A:E4:87:29:CB:94:F2:E9:11:10:8F:86:E9
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 0198D404A586C18982049B40CAB124B11F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 1647
Signing time: Fri 22 Aug 2025 23:02:10 +0000
Manifest this update: Fri 22 Aug 2025 23:02:10 +0000
Manifest next update: Sat 23 Aug 2025 23:02:10 +0000
Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: 3u812woXrTd1m9Xm3ojwos5Su2jVgw/12ihsyT8CRv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:a5:86:c1:89:82:04:9b:40:ca:b1:24:b1:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Aug 22 23:02:10 2025 GMT
Not After : Aug 23 23:02:10 2025 GMT
Subject: CN=2db49c2ffefabc9ae48729cb94f2e911108f86e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:8e:b5:17:b1:df:9f:e3:81:3f:65:7c:da:
e6:3d:78:68:d3:ed:e9:68:aa:ba:44:1d:80:06:0f:
c2:d1:5d:fc:b8:78:36:86:73:31:bf:2f:18:9b:e7:
48:8a:1c:14:7f:39:44:17:dd:de:30:bb:45:f1:cb:
f0:bc:8d:22:01:35:57:93:28:78:13:c2:2a:56:3d:
0b:84:ea:98:af:0c:e9:ea:30:6f:23:a3:5e:3f:bb:
95:6a:a1:f7:1a:ae:3e:e9:6d:9e:fd:0c:1f:34:b0:
c1:4d:01:9a:8e:8a:19:dd:f0:8e:1f:85:3f:d3:08:
08:4e:cb:ef:94:6f:d7:82:69:b3:09:5a:db:0f:a7:
d8:99:3a:1e:8d:26:57:52:e8:9d:07:98:b3:43:2f:
ac:ad:ff:41:82:26:6f:b3:2f:2c:c8:b0:25:3a:2a:
3d:98:b1:04:f5:a9:b1:6e:ad:79:f2:41:1e:21:35:
8f:01:ad:8d:9c:f4:06:3d:f4:39:38:bd:5a:ec:d3:
b6:d3:22:7d:75:5a:9d:a8:14:cd:e8:58:6c:e2:82:
18:ed:d0:86:a9:e3:d2:f4:ee:8d:1d:a9:8a:79:81:
29:b1:a0:31:00:99:c7:9a:11:79:49:f5:de:79:3b:
a7:44:06:06:ef:00:3b:df:c8:dd:64:94:b4:59:32:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:9C:2F:FE:FA:BC:9A:E4:87:29:CB:94:F2:E9:11:10:8F:86:E9
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fe:09:91:56:7d:7b:d4:5c:e5:99:fc:db:e4:0b:c6:b5:52:
19:f8:ac:73:22:12:cd:68:98:31:23:d9:5f:a7:08:61:9f:10:
16:db:17:4b:a6:e5:c0:56:11:35:45:96:ab:af:48:a6:49:c0:
48:d5:2b:31:09:f3:81:ea:52:43:42:a8:05:e9:85:a5:3f:99:
57:2e:23:fa:a5:ee:4a:47:dc:61:e9:4b:d7:5e:dc:5d:49:7b:
0d:11:b8:56:66:36:f0:e6:88:bf:1f:14:6d:5e:25:82:b9:a0:
a9:63:81:71:0c:f1:ba:7f:27:46:e8:8b:cb:b5:7e:cf:cd:1c:
b0:38:8f:9e:6a:f7:5e:42:ef:d4:d5:c8:89:29:91:d1:36:8a:
3e:a2:8e:e1:ee:e0:e0:89:3a:de:e2:23:b4:75:9e:1f:01:82:
e7:4b:7c:3d:a1:aa:1c:90:39:fb:4c:0b:b6:09:4a:a7:b3:81:
50:2f:bb:2d:5f:bc:0a:ad:45:cd:f4:ba:95:4f:c1:fe:70:c9:
c9:fd:f6:16:d2:b6:9b:35:25:c1:0a:d1:a7:c1:30:a0:85:99:
6f:16:82:39:5d:00:64:27:9e:7d:50:f2:3e:36:c9:51:cb:50:
7a:3f:20:a7:c8:ed:32:c1:40:01:fe:78:e6:22:c6:99:35:02:
32:3d:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:55 2025 by rpki-client