Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier: q+PAt44ZfVfoQ0ExnoTXccYHe12dtj+wH1uvaefItzw=
Subject key identifier: DD:D6:F2:62:07:A3:B9:B1:54:48:1F:15:B4:3A:8C:16:36:57:36:7E
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 0198D698460AE621A44630AB7FA22B286328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number: DB
Signing time: Sat 23 Aug 2025 11:02:40 +0000
Manifest this update: Sat 23 Aug 2025 11:02:40 +0000
Manifest next update: Sun 24 Aug 2025 11:02:40 +0000
Files and hashes: 1: B0G3sXZP-lhExtNpCnBC4YPOMgM.roa (hash: gLC/9yZUh8hacXl47LTUe+LM65gMVKVuxWQdb+HkSvE=)
2: btENirTzGa5hCRjGIIwG3_NDN14.roa (hash: Qc+DpFa+WQ/w1YZM6JMB5sciL2uYCIYPxJnwDj9/83A=)
3: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: Ke9ICgN6PfjhRFCGh9Y5q+x9LZnJCBxBrE2UsTEioM4=)
4: k6PVLlZxAI3X_AkJNP_B54WXdz0.roa (hash: NcuIcur7U+66dD6xSrLkgdloxOkqGgs1VvRkZcvsiE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:46:0a:e6:21:a4:46:30:ab:7f:a2:2b:28:63:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Aug 23 11:02:40 2025 GMT
Not After : Aug 24 11:02:40 2025 GMT
Subject: CN=ddd6f26207a3b9b154481f15b43a8c163657367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:4f:0d:a9:be:91:ba:e4:ef:5e:5d:11:4a:
3f:5f:cf:93:b6:76:dd:a6:cc:ff:f9:a3:11:98:01:
e8:cd:b3:5d:d3:16:a7:a4:78:3e:9a:7c:31:1c:7b:
7b:dc:a0:5f:f3:53:35:1b:e8:7c:5f:dc:dd:e2:92:
c3:47:bd:40:81:37:df:a1:ec:f3:c1:8e:da:49:3a:
7a:18:f3:59:b6:1f:83:8b:c6:e3:ec:ee:b3:06:74:
db:43:da:cc:41:ee:dc:9d:20:8b:9b:6a:01:19:14:
f4:55:53:44:7e:3b:34:27:d1:f5:34:87:3f:d2:3e:
b2:e5:f0:8c:3b:77:7a:50:d7:68:2c:85:4c:af:7b:
30:c1:ad:d7:d4:78:f0:31:51:dd:d2:07:51:48:6e:
35:73:63:55:5e:bd:48:38:54:1a:d8:2b:72:44:40:
44:2f:dd:7e:15:00:f4:87:ef:fb:81:7f:32:06:a1:
31:22:d9:83:12:23:8b:78:03:92:e8:66:72:e5:f6:
3e:6e:20:27:84:72:62:ef:7b:7c:bf:41:72:d5:e2:
ac:50:56:2a:26:21:05:d6:e0:6b:d5:73:33:eb:08:
fa:64:74:ee:70:3d:98:cb:d4:ef:c0:cc:50:b0:b1:
dc:75:b7:fe:5c:5f:14:d5:ff:a4:2c:f2:3c:d6:38:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D6:F2:62:07:A3:B9:B1:54:48:1F:15:B4:3A:8C:16:36:57:36:7E
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:84:19:ac:d5:64:aa:c8:e4:13:36:e3:b6:72:46:2e:a7:d4:
aa:41:88:d9:61:bd:7d:95:d5:8f:49:9a:52:92:74:69:48:81:
21:83:3d:d4:24:07:76:3f:4e:82:af:b2:0a:ec:ef:d2:1b:a5:
41:81:ac:93:35:b7:37:76:87:b9:7b:d1:ab:ff:af:08:41:a2:
6a:4f:18:4f:48:db:71:58:8a:6c:a8:c8:77:68:06:e0:8b:8a:
41:cd:13:c6:ac:b5:1e:5c:45:fc:ad:40:69:3f:84:b2:83:00:
10:e2:a0:1d:fd:72:c3:2e:2a:8d:0c:2c:55:f3:4e:de:ab:f3:
3d:80:f5:a6:5f:b9:cb:66:a8:11:d6:22:66:b2:9c:97:f2:7f:
b1:51:7d:0b:51:19:d4:e2:df:05:bf:b9:8a:67:ca:41:cb:82:
12:81:87:c4:12:2e:2e:6d:21:6a:72:15:eb:5b:11:b7:56:36:
b2:bb:91:9b:23:cc:d2:98:cd:a7:ec:e0:f6:25:49:17:56:45:
5e:37:b1:3c:75:36:d5:4d:93:3f:00:80:34:cd:4c:38:ee:78:
1b:31:64:07:a2:dc:48:c1:d1:8d:ed:b5:52:53:15:ba:70:6f:
27:13:a0:7e:34:8d:ff:ff:16:b9:4c:49:35:df:02:8a:39:30:
f1:c7:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:05 2025 by rpki-client