Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: d/QozJrnGHqFsku4/FxLrjCxERBj5YoS4/f7ZCD5NtQ=
Subject key identifier: DF:63:56:47:80:5A:23:BC:D2:26:BB:CB:13:6A:E8:39:B3:FD:24:C2
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 0198D5BBBD7E37D2399EC150D1F0421815A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0D9C
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: g7jZfThFR/uuWYXj5GBltGZyeqBV0ZHnrTz0rXiT8vg=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bd:7e:37:d2:39:9e:c1:50:d1:f0:42:18:15:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=df635647805a23bcd226bbcb136ae839b3fd24c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:32:ad:33:28:b1:ae:cd:02:63:55:b5:e5:
77:ec:e8:21:5b:84:49:af:a8:dd:32:9a:33:98:30:
58:f7:f5:1d:5c:c3:d7:77:37:b3:3d:ff:d8:4f:35:
dc:87:f6:a1:a2:c8:a0:86:fb:bb:53:45:9e:cc:aa:
10:aa:2e:ff:7b:d7:47:a0:7d:6b:a5:b2:d1:cb:32:
77:7f:d4:eb:e6:42:2e:6a:c0:08:37:92:fe:58:51:
62:91:7a:7f:cd:60:ba:5a:8f:8a:6e:7f:62:db:f0:
1b:7e:35:0b:82:bf:c1:81:9d:78:9f:88:99:e3:91:
c9:ac:08:0d:58:3c:34:dd:9a:91:d8:11:60:ca:50:
b8:3b:9b:ce:2d:ce:73:bc:0a:8c:b6:a7:c8:35:f9:
60:ce:d7:bc:a0:b0:1f:f8:3b:ae:6f:ec:0b:91:3f:
14:74:5d:1b:88:48:03:d2:5f:26:07:e9:9c:37:97:
af:41:56:e7:1b:4f:7d:e3:78:53:eb:c5:1e:d1:ce:
0d:c3:90:3f:26:fe:c1:5b:ac:5f:ed:bb:39:c0:d9:
3e:b4:e3:2c:7d:87:c7:a9:33:f1:6a:5e:c0:97:ea:
0d:8b:bb:cb:9d:03:0b:10:8d:2b:ca:85:d2:ec:a3:
65:e0:15:b1:63:b9:2b:8d:2d:9e:6c:cc:03:4f:08:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:63:56:47:80:5A:23:BC:D2:26:BB:CB:13:6A:E8:39:B3:FD:24:C2
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e3:11:5a:e5:b0:fb:2c:6a:8f:66:e9:63:8d:5a:89:c9:a6:
f0:0e:00:c1:07:1e:dc:db:94:24:a9:36:df:43:0a:11:39:11:
bc:7b:60:d2:ad:17:9e:0c:19:61:2e:f2:26:e8:08:0a:3d:65:
6a:bd:05:c4:52:6a:16:f9:e3:a6:8a:37:8e:d8:28:3c:4b:0e:
80:ed:9a:92:de:82:da:08:7d:91:61:0f:83:39:a6:16:c8:aa:
e2:5a:65:30:35:a6:04:9e:29:77:33:2f:d9:be:a8:08:93:fc:
e1:5f:c8:ab:70:81:27:c4:79:77:d0:36:d2:08:36:11:b1:47:
fd:f9:02:9c:76:85:47:7a:56:4d:86:14:20:71:00:bb:8f:fb:
63:44:c6:a2:18:7e:dd:36:13:ed:9c:f2:81:1b:f8:fe:1e:32:
ee:fa:d7:53:c0:5f:01:bb:9d:57:b1:96:10:3f:eb:43:6a:14:
d7:8e:25:c0:e1:ff:0c:ad:a5:47:92:f0:00:1b:90:ce:47:70:
01:8f:22:c0:ad:bb:a1:dc:f5:ce:64:15:85:b7:35:33:73:22:
07:90:d9:c5:a7:c6:05:27:78:57:2a:e4:0e:89:38:94:79:f9:
db:e7:26:eb:d1:03:35:d2:af:14:ae:54:a2:28:86:db:e1:4f:
98:45:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:38:06 2025 by rpki-client