Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: NGLmGBLPl0sbCqW+H21qOZq5E1UioOadhTEY+yarLsU=
Subject key identifier: 03:E5:D4:14:F1:D1:F4:ED:36:F0:D7:2F:AA:AE:1E:9A:52:09:1C:CD
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 0198D4E0078FFBADD01B4C84765FDD3CF559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: 6C37bXl9BkqhoLWwaRNr+Wxqr1L5sDM7T8pIn+bH3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:07:8f:fb:ad:d0:1b:4c:84:76:5f:dd:3c:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=03e5d414f1d1f4ed36f0d72faaae1e9a52091ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:8f:bb:37:87:cb:76:52:c8:1d:8d:e8:ce:
5e:5b:67:3c:5a:cb:dd:4e:1c:b6:88:4d:54:e4:c3:
76:84:54:81:45:23:7c:8e:79:78:a0:95:5b:dc:10:
a0:16:9b:71:ef:2c:4c:78:e1:e8:a8:0d:21:9d:c8:
af:b4:a7:57:5f:0d:4b:2f:7e:3e:91:f8:97:b7:a0:
cf:46:c6:95:6f:cd:14:d1:b5:75:ab:0d:3c:e6:75:
72:0a:9f:ef:ad:f1:57:b1:99:7b:8e:f7:27:f4:c1:
a2:bc:30:79:c6:95:1b:a2:51:b3:ae:f4:81:12:b3:
cc:e9:7e:b7:ae:fd:e3:64:92:5f:74:04:22:ae:46:
cf:a4:21:fb:73:b2:78:03:1e:3f:96:4b:c2:81:27:
0f:ce:a3:88:d4:f0:a8:2c:c6:ec:a8:d3:6b:5f:15:
f1:94:17:90:ab:9d:71:3a:30:44:9c:69:b6:f7:16:
c1:ba:95:8f:ab:83:27:b7:dd:c9:4a:f2:28:b5:f0:
50:2f:d5:45:43:92:8e:61:21:b8:b4:a9:17:40:48:
f9:22:b3:c4:1b:c9:84:4f:2c:62:24:bf:ac:0c:03:
58:ec:de:74:c3:d7:58:3a:10:77:0f:c0:4e:09:98:
11:5c:82:e8:47:73:cc:0e:e1:4a:a3:7e:c5:a3:80:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:D4:14:F1:D1:F4:ED:36:F0:D7:2F:AA:AE:1E:9A:52:09:1C:CD
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:78:ab:73:f4:0f:b8:e4:b5:82:56:be:2c:19:77:ce:b8:ab:
66:c6:d1:62:67:bf:54:9c:af:a5:9e:2c:f2:63:99:69:79:25:
32:71:23:9d:a8:f1:a2:a5:7c:82:40:eb:08:44:1a:ac:2a:62:
03:4c:44:56:96:e5:62:1e:ec:9b:e2:60:9d:d9:4b:2e:aa:a6:
25:48:05:31:97:0f:cb:9c:6d:b3:2f:31:05:49:8e:05:e0:1f:
3c:11:44:b3:18:5d:ef:fa:78:b6:ea:9e:fa:7e:04:8a:54:c1:
9f:01:1b:f7:c5:20:81:46:14:1d:07:9a:6a:a5:cf:1c:c6:9b:
f9:87:38:47:98:b6:64:98:35:5c:2f:4a:3c:30:97:80:d5:27:
a8:6f:34:50:85:1d:ff:50:14:9d:cc:e0:9e:99:0b:36:59:84:
ed:3e:5f:e2:c0:93:91:af:f5:d6:1e:7b:19:57:41:d1:a0:33:
d9:27:0f:96:d2:20:f6:ae:c0:35:9f:ae:cc:5e:84:59:42:f8:
3f:7e:b2:4f:b1:d2:d5:cd:dd:51:e1:c7:95:b1:a8:0d:e5:e3:
fd:71:b1:cf:a6:ad:ad:b9:f1:f0:51:d8:bc:e0:8c:35:dc:05:
e0:77:a8:68:0d:58:cf:ce:9d:53:dd:b4:80:2a:b3:5a:83:02:
3b:88:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:39 2025 by rpki-client