Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
File: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft (raw, json)
Hash identifier: 3bKDCOVxxtvOQ/phURvDWl1am+QV6SRg3VFs8lbmmzg=
Subject key identifier: A8:9F:71:72:B5:F8:D1:5B:B9:D5:DE:80:4D:8A:DE:AB:2E:64:58:DF
Authority key identifier: 7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
Certificate issuer: /CN=7db8248601e33b83c01405f9be14793614859bd6
Certificate serial: 0198D70602D6AF836CECE9722DCE509B347A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
Manifest number: 0A
Signing time: Sat 23 Aug 2025 13:02:32 +0000
Manifest this update: Sat 23 Aug 2025 13:02:32 +0000
Manifest next update: Sun 24 Aug 2025 13:02:32 +0000
Files and hashes: 1: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl (hash: tChP4aKoSL6+7PAhO3UR9HDnIFSflCN2w83V84Xdev0=)
2: nRkMhAwrEmIGFSo5KtkPI4Qo5Co.roa (hash: DqkhFi8/nJkoAICivrur3pXP8/0mP1960uQN7oDPzao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:02:d6:af:83:6c:ec:e9:72:2d:ce:50:9b:34:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db8248601e33b83c01405f9be14793614859bd6
Validity
Not Before: Aug 23 13:02:32 2025 GMT
Not After : Aug 24 13:02:32 2025 GMT
Subject: CN=a89f7172b5f8d15bb9d5de804d8adeab2e6458df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:ff:0a:a6:af:17:46:ee:2d:52:25:88:1b:
51:cd:9c:90:7b:0d:10:ca:06:45:5e:6b:3b:2c:f5:
de:b5:d1:81:78:8d:0b:f6:42:e5:1a:da:a9:d1:cb:
0a:35:d3:d6:59:de:ac:99:e0:ef:b1:87:12:2f:53:
4f:04:f9:5f:23:fb:af:cf:07:f9:ac:84:eb:06:5b:
21:e2:dd:10:83:86:34:8f:83:cd:78:94:bf:d8:f0:
33:e0:18:2e:3b:bc:60:5f:8b:37:4b:5e:5c:1b:e0:
b8:f9:ea:d8:9e:d2:f8:b0:73:47:83:6a:b7:31:6d:
9c:8d:0b:f9:30:70:00:24:c6:53:a2:6a:cb:c7:2e:
83:f4:5a:05:b2:38:b7:ab:0b:21:c8:26:66:77:5c:
f0:38:a3:22:50:4a:31:c6:90:c6:76:33:a4:9a:e6:
57:1a:95:a7:a4:f8:35:88:87:2d:56:94:5d:55:d4:
2c:bd:3c:a8:e6:ad:24:7d:30:da:9e:08:91:b4:4f:
eb:8e:61:48:a7:20:64:0d:bd:94:a5:6b:30:6c:27:
39:54:39:fa:7d:e8:a4:82:e8:4e:af:54:14:8c:5c:
02:0e:c6:49:c7:29:38:59:5b:ff:7f:c4:f0:67:74:
7e:9e:66:55:dc:18:2e:c4:e3:74:b9:2c:47:f2:a6:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9F:71:72:B5:F8:D1:5B:B9:D5:DE:80:4D:8A:DE:AB:2E:64:58:DF
X509v3 Authority Key Identifier:
keyid:7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a0:88:43:d7:27:75:50:42:2a:9d:10:61:a4:50:98:65:b2:
12:c9:53:da:83:a1:88:1f:43:09:5e:fb:bb:e3:ec:cb:fc:05:
47:e3:ff:8a:ad:ac:59:0b:06:20:9d:ec:2d:bb:6c:7b:6a:63:
b9:fa:40:44:41:de:bb:9a:94:eb:5e:8b:49:ab:38:c7:c7:cf:
2f:0c:c7:58:ec:9d:fc:7d:48:b9:b2:56:12:ad:e3:9a:d6:61:
0a:d3:0c:9f:34:f6:4e:f5:1a:af:ce:43:5b:18:02:e4:f5:4f:
06:78:ec:f7:92:71:42:36:50:85:17:3f:5b:87:6c:8c:46:78:
fe:c9:e4:fd:0d:f4:47:59:33:e9:f8:c5:c6:5a:06:fb:ec:77:
7b:a8:70:79:90:72:59:e7:c1:6b:4b:bb:13:6c:4b:19:c1:3b:
27:fb:dd:b8:6f:76:6c:6d:6f:cd:7d:de:6f:bf:46:bc:26:2f:
6e:f4:d8:73:45:90:a2:ad:00:70:59:45:cb:a7:4c:26:86:07:
4e:be:71:c0:4e:df:ec:58:11:ee:c2:dc:bf:50:10:6f:bd:d9:
b2:d4:50:5a:0f:c1:13:70:de:7a:f3:c3:64:4c:6d:70:81:d9:
47:41:d6:d1:f8:22:2f:e5:7a:02:f1:70:29:92:e2:24:5e:e2:
14:cb:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:14 2025 by rpki-client