Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: yvVe6WKOVc9jGnKQcTH06yOjxk+uS7/fhlpU3F2cQm0=
Subject key identifier: A9:AF:AB:0C:C9:8F:24:F4:1E:09:DA:59:D2:3E:18:06:63:70:D5:97
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 0198D5BC4F8EBDE9963373A0F106D2B37FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: m/+xJ1xp2+9NDalOTbvCVye5LXs+OKhtz5AyGP1A3zs=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4f:8e:bd:e9:96:33:73:a0:f1:06:d2:b3:7f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=a9afab0cc98f24f41e09da59d23e18066370d597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bb:60:aa:ff:03:cb:a9:47:2b:96:b4:d0:f2:
44:b8:c3:9a:1e:80:91:43:1e:a1:f1:66:74:85:66:
ea:2a:dd:24:29:13:94:a7:68:0d:a7:eb:0e:f7:79:
85:1e:a8:62:3e:1f:14:dc:99:53:9e:fc:c0:33:f9:
59:22:ac:c1:3f:48:3f:11:e7:18:4c:3b:d6:7a:86:
51:7c:e4:4e:77:00:51:70:70:91:0a:6a:0a:be:98:
83:5e:e1:c8:c5:d4:a3:a0:13:90:01:a7:e1:6a:3e:
fc:78:20:37:1b:5a:54:77:ee:6f:d8:e6:90:9f:30:
7d:26:93:06:34:e0:e5:53:5d:1c:03:5d:1a:ea:fb:
16:f8:4d:96:6d:6d:6e:46:be:dc:1f:51:7e:ef:9a:
a0:17:0f:6e:b7:a3:16:84:9c:0b:11:54:53:b4:67:
a3:4e:ed:1e:65:7e:87:99:38:ef:5a:db:02:75:38:
6c:1b:17:30:d7:36:33:41:19:ad:6c:c4:b8:7d:5c:
d4:0d:eb:59:74:9c:d6:2b:14:74:b5:90:04:04:36:
85:46:03:44:ad:c3:f5:d8:38:75:31:af:0b:1f:7f:
6d:8c:2a:01:24:1a:98:7a:c9:ea:96:ab:76:9d:2a:
c0:40:9f:95:ac:28:44:08:6e:b4:ed:14:ed:fd:32:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AF:AB:0C:C9:8F:24:F4:1E:09:DA:59:D2:3E:18:06:63:70:D5:97
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3b:43:e0:95:22:ea:56:b4:07:a1:c8:e2:9b:2d:dc:42:78:
11:45:47:53:7f:80:98:f4:b5:4d:ae:82:1e:fb:e2:f0:b5:c7:
50:7c:33:40:00:91:4c:46:35:b9:c0:76:df:52:ec:b7:0a:d9:
87:a8:e6:91:60:c9:9f:a6:84:1c:7c:25:e0:6f:e8:85:11:62:
c6:cb:12:8e:53:f8:06:27:f7:8c:ff:32:fa:a4:7c:20:62:61:
ec:42:ef:7f:ab:52:ce:cd:7f:bb:ae:41:1d:e6:aa:c4:89:4c:
74:9b:20:a1:8d:bd:c5:72:23:a2:26:13:c7:6e:d2:d2:87:ca:
37:99:3e:18:d8:44:6f:69:2d:ec:c4:ab:64:b8:e2:c9:15:01:
ea:aa:d9:f5:f2:fc:85:e1:0b:38:7d:51:77:a3:34:77:1b:3d:
fb:58:2f:ff:bd:6a:47:8a:d0:2f:ff:cc:f3:30:85:f9:1a:6e:
d4:4e:db:2f:dc:87:b7:0e:2f:f1:ba:e0:f5:a3:0d:6c:d3:fa:
f4:b1:71:69:59:29:65:8e:83:a8:1d:a1:0f:1b:df:33:c6:76:
61:9b:c7:21:77:36:ab:c4:76:9b:65:fd:24:5d:df:5d:65:0e:
36:06:d4:4d:12:63:d7:3d:98:21:eb:9b:1e:d2:05:c1:09:eb:
ca:7e:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:09 2025 by rpki-client