Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: 6asw+xIudZgNLbjj8IrLNPxJWczttQRDPb59EUVEaLg=
Subject key identifier: 67:01:DB:6C:1C:AE:68:2E:A6:E0:26:56:D3:0A:B2:49:AB:C5:11:BA
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 0198D69815EE5B0CC11793CF2932A1033D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 1389
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=)
3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: BUCh4q/nnCnaSGGnZazQoAwWOaap84t8TTKYI0VQAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:15:ee:5b:0c:c1:17:93:cf:29:32:a1:03:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=6701db6c1cae682ea6e02656d30ab249abc511ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:57:a5:b6:c4:3f:3f:a1:b7:87:93:16:b8:
db:de:24:8d:e8:9f:7c:fa:6a:4e:07:53:87:17:71:
80:6e:0d:02:fb:41:e4:ea:b3:af:d7:b4:fc:09:34:
9b:c6:fe:65:2a:50:48:fc:4a:58:46:bf:a6:41:c3:
1a:f0:97:9e:ac:59:9c:32:9b:cd:58:0c:7a:01:5f:
fb:a1:c2:5f:e6:56:48:7a:82:ce:4a:24:d3:1d:47:
a1:25:d1:e8:b4:28:46:bc:4c:ef:ad:64:21:27:c0:
ee:f1:71:cd:26:f6:93:b2:f0:d9:d3:e8:b5:0a:ba:
2a:3e:12:ec:d2:17:f4:bc:8a:80:15:a8:39:08:dc:
68:70:81:68:e5:33:8e:4b:00:35:95:18:c6:eb:29:
42:80:4f:fc:c0:f5:b0:02:bb:22:fd:ad:f3:88:93:
50:42:83:b3:0a:4b:56:d4:df:e8:84:ee:2b:38:d3:
1e:62:02:91:be:af:d3:f0:d5:d2:54:fc:06:5c:01:
42:3c:ab:b6:6d:6d:0f:0c:28:bd:79:81:ad:31:9d:
d3:3b:b7:46:b3:11:09:2d:bc:2b:1b:63:bd:04:b9:
f2:54:d7:6f:a2:61:d9:c5:5b:5e:5e:35:db:f6:2a:
0b:ba:06:71:f9:63:b9:5b:69:ff:e2:8f:32:23:c4:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:01:DB:6C:1C:AE:68:2E:A6:E0:26:56:D3:0A:B2:49:AB:C5:11:BA
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:10:ef:a0:0d:85:b4:43:4c:d5:20:63:c2:c8:06:7e:02:09:
e8:04:a1:21:5c:24:bc:f2:1a:09:ee:55:78:06:bb:ba:a7:74:
05:b8:8d:71:b3:1f:0a:37:fb:37:2c:7f:d7:cd:d3:2c:7f:84:
c7:c8:03:b3:47:8f:b8:ae:d7:ce:fc:29:74:1c:1a:2d:cd:96:
0d:e1:1c:19:55:3f:ec:51:1d:a4:c3:47:c2:da:c3:9e:e0:eb:
4a:ff:7c:93:35:b3:b0:cd:74:66:df:6e:f8:8f:59:33:90:ea:
9d:84:bc:34:1e:52:34:55:86:97:ba:c6:de:a9:79:d1:2b:77:
e4:3a:64:b1:5f:a6:91:6f:6c:5a:20:b0:bb:f5:b1:5e:38:5a:
d7:19:18:5c:60:1c:b0:6a:28:e3:61:3f:32:2d:ea:4f:33:c1:
96:57:c0:93:4d:4b:ee:3d:7d:13:2b:c1:50:9a:98:4b:4b:ae:
7d:58:ce:06:5c:9d:a6:a8:a2:b4:d3:2f:4f:07:1e:72:bb:ce:
2f:54:47:66:f4:f1:ed:41:ed:0d:eb:86:3e:61:3a:93:a0:39:
49:c5:85:ca:a4:55:75:e7:b1:ca:f9:4b:2b:ac:c7:ea:f7:d7:
28:59:9b:d4:79:f2:86:50:b9:ef:35:df:60:8b:94:70:bf:a5:
e0:e5:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:20 2025 by rpki-client