Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: myn/+qasU/LBeEkELKDvm8sP2UOTq1o53dz4aZ6tc8c=
Subject key identifier: 84:B7:70:E5:83:7A:71:41:84:24:45:CD:00:76:DA:05:3D:6F:19:5A
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 0198D6608F2513D6874BAB64F8FC9E6092FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 098B
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: WdmL2O8VPrkR42ZOw2QephNcMKQ.roa (hash: hlVVES8UOIZDvKYVagg5Nkh0JVEcOtJVFmlV0ra9F/8=)
2: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: 3RGczwFKsDQbVxg7QweYRbe5bqutmWBPpA6XyK+g2sY=)
3: lujy_B0CgE3UQHNrtRpIDknhG84.roa (hash: HhEZYonW06tw2KSs5U9keAqL3PO1g1AoWXaLns6T1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8f:25:13:d6:87:4b:ab:64:f8:fc:9e:60:92:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=84b770e5837a7141842445cd0076da053d6f195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:e4:10:fa:1d:5d:30:49:b2:b0:30:9b:3d:
a8:99:25:f1:f8:38:ac:b4:39:6b:6d:3a:12:e0:df:
60:ec:9f:da:25:73:a8:5a:4e:5a:cf:73:2a:d7:69:
6f:87:25:a6:f5:34:f0:76:fa:36:56:85:79:1a:90:
fa:f1:f7:b8:7f:28:e7:c4:87:b8:0c:a2:b6:be:ba:
48:fc:21:cd:df:36:5f:d3:ed:bd:d4:d9:52:17:47:
a5:77:37:e3:35:f6:62:07:43:b7:45:3b:7e:24:8b:
eb:4c:21:91:2a:b3:2b:3b:54:8e:da:62:b4:13:88:
49:18:c2:22:6e:d2:2d:fd:55:08:5d:6b:64:38:c3:
55:b6:a5:76:2a:ee:6a:c0:a6:5f:08:f9:ca:2a:42:
c1:02:23:89:2b:7b:d7:3f:d0:0c:ea:e1:0e:0f:e3:
0e:ea:98:41:13:1e:24:e2:b5:5a:17:c9:b4:ca:6a:
ed:88:f0:f6:7a:29:a8:e8:4a:7a:40:b6:08:f2:70:
89:e8:84:de:0f:83:07:61:84:86:68:ed:ef:99:8f:
64:64:41:56:81:a6:53:71:4e:57:6f:f1:78:e0:bb:
eb:ed:5b:1d:66:8d:d5:49:81:45:1d:cd:a9:af:3b:
b6:7c:16:2f:30:d3:8b:0f:15:ef:3e:bb:4d:6a:68:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:70:E5:83:7A:71:41:84:24:45:CD:00:76:DA:05:3D:6F:19:5A
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:34:12:bd:cd:2e:a5:ca:3b:b9:77:a5:8f:e3:10:ff:7e:c2:
7a:66:4b:b6:1b:06:6c:61:1c:21:00:b1:8b:7e:44:1e:2d:11:
19:17:a4:7e:c1:c7:d1:7d:27:6e:32:c2:a3:fd:d7:7d:67:dc:
54:6b:13:26:8d:50:7f:b4:f0:45:16:87:d9:d9:65:99:19:95:
70:9c:68:c1:07:e5:cc:78:f8:bb:59:54:d8:3b:35:1a:ff:df:
96:83:02:81:ec:b9:b5:f0:b9:ec:26:a3:ce:f0:54:07:e4:5f:
b4:73:5a:3c:6c:52:7c:5e:c4:d4:b0:57:49:c2:14:4b:b0:d4:
13:8c:6a:58:b5:6e:89:e6:67:c7:e6:c2:0d:17:e6:78:3a:25:
af:89:95:ce:4a:6d:b9:39:d5:92:4a:b8:be:1a:7e:82:3e:6f:
68:a0:3c:5c:d1:8d:04:9a:99:ab:ab:5f:48:4d:86:88:9c:c5:
84:01:e8:02:d2:c3:31:18:dc:88:df:a9:15:d3:cb:20:18:6d:
2b:0b:5a:73:b0:da:72:c9:19:f9:40:0b:85:4a:cd:ac:ee:a3:
fd:eb:48:b6:61:5c:ce:00:05:c4:c0:e2:9d:e0:ab:7c:8c:e3:
59:77:50:74:b9:06:92:2d:aa:11:b7:a4:e6:fe:97:0d:e1:58:
87:7d:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:47 2025 by rpki-client