Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: AFz8b/b5VBs5mrFTfGfpYjpJyOnn36yHAqYptdGXYAk=
Subject key identifier: 0D:06:3E:04:23:F5:73:39:3A:4E:23:78:F8:2D:8C:BE:2E:90:E0:6E
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 0198D6604607A926D1587D0CCCF53D4DF956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 1484
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: 8UuUyjtkswOkbwlTblnNCxff4NevQFQNjeAo2L1LUSM=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:46:07:a9:26:d1:58:7d:0c:cc:f5:3d:4d:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=0d063e0423f573393a4e2378f82d8cbe2e90e06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:8e:e8:3d:61:90:54:94:be:7f:19:c3:16:
76:15:48:8e:0f:3f:19:e7:ba:bf:f1:be:00:79:31:
af:8f:51:32:89:9b:7b:39:fd:c7:2d:90:6a:c6:63:
b9:52:d3:32:c4:90:0d:f8:be:59:8b:36:a8:7e:88:
29:fb:49:1f:8f:11:a1:86:9e:1f:c0:f9:5c:ad:db:
38:dd:e7:54:d0:79:a7:fc:17:53:25:aa:04:c7:b8:
6a:32:b5:55:cc:05:25:14:f6:ae:8d:65:e6:f4:35:
b0:43:52:96:56:eb:fc:9a:e2:f4:e3:33:d8:c6:b2:
a2:1b:c6:68:01:fe:18:00:c6:57:dd:8b:b7:81:60:
b1:dd:d0:ae:f8:28:33:d6:41:6e:b6:74:38:1e:6a:
23:e8:45:eb:03:5e:75:d3:2c:58:4e:29:aa:68:a4:
f2:da:53:e2:cb:cb:cb:4e:9e:fc:2d:83:48:79:e2:
3e:d0:a7:fa:ea:25:45:8d:47:de:54:34:b3:46:8d:
db:49:8b:d6:52:45:1d:df:75:d9:70:3e:6b:fc:43:
31:93:41:7f:eb:94:59:d3:0d:a1:e3:16:7e:49:16:
17:56:00:de:44:90:c8:b7:92:9c:1b:77:4e:b0:f5:
e1:5e:b4:b2:93:6a:ac:6a:89:ea:9d:9e:a8:b8:27:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:06:3E:04:23:F5:73:39:3A:4E:23:78:F8:2D:8C:BE:2E:90:E0:6E
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:32:a9:63:95:03:8c:3d:ba:de:01:28:62:22:72:8f:10:6b:
60:c5:76:eb:83:f7:c5:d4:08:e1:af:bd:0f:3d:c9:0c:55:5f:
fe:2e:fe:c3:40:55:fe:42:42:c1:9c:7a:44:18:90:16:bf:b4:
c2:53:68:da:05:f7:7f:a9:20:f9:d8:0d:93:0f:21:a9:f3:90:
4d:19:6c:c1:4a:9e:94:b6:fa:2f:2c:c1:2d:3b:4c:db:3a:f5:
88:bf:12:a1:a4:14:8f:e7:97:c1:0d:f9:c9:16:d7:11:7d:ce:
2f:c2:0b:49:2a:1f:23:8b:3b:d4:92:62:3c:67:8c:e0:15:46:
7d:ea:23:0c:a5:db:b1:c6:6d:77:2f:5e:ac:14:e3:a5:ca:28:
fd:34:b0:5a:06:7d:39:54:3c:11:81:72:8b:e5:67:a3:1c:f0:
89:14:8f:16:91:c0:8b:12:cf:dc:06:9a:b2:24:62:f8:d0:2d:
1a:8d:b5:9c:a2:de:48:61:c1:0c:84:a0:f1:66:ee:9b:bc:b9:
2f:21:64:bc:8f:70:a1:e5:8f:9c:34:dc:9e:1d:f3:12:05:98:
55:e4:5e:25:f3:fb:a8:5a:4a:40:d3:13:a9:ce:b9:4f:23:25:
31:52:a4:40:4b:64:b4:a4:12:92:62:65:31:f0:03:cd:3c:55:
1a:05:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:31 2025 by rpki-client