Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: KGaYgHOxI7Uv2J0fUDK6jRqvo8+8gHfhZnF6el4CVuo=
Subject key identifier: 1E:DF:74:0C:10:81:05:BA:EC:C8:B0:DC:D9:A2:E0:2F:A2:EF:03:72
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 0199FDD92A1C8B8835F6437C4DCE0FED85FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 19:01:31 +0000
Manifest this update: Sun 19 Oct 2025 19:01:31 +0000
Manifest next update: Mon 20 Oct 2025 19:01:31 +0000
Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: 3gnO808pF2oHiSHUOKE6jHekvOUuM1OgmVH1l12V1BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:2a:1c:8b:88:35:f6:43:7c:4d:ce:0f:ed:85:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Oct 19 19:01:31 2025 GMT
Not After : Oct 20 19:01:31 2025 GMT
Subject: CN=1edf740c108105baecc8b0dcd9a2e02fa2ef0372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:62:38:e2:5e:96:a2:9d:ff:c4:c2:39:bd:
a0:81:40:27:82:98:31:44:da:83:ab:59:9b:fa:56:
8f:fa:20:2d:f1:5a:ca:7f:e6:fa:87:4b:03:3f:cc:
da:fb:df:03:fb:74:c8:8a:3d:bc:4f:83:cc:95:d3:
75:5a:7c:2c:dc:25:0d:d6:4a:69:83:9e:23:f0:7c:
a5:02:3f:e9:ab:a9:8a:a9:e4:1b:55:df:28:8d:90:
68:bd:f2:31:1e:54:a2:61:f2:5c:d4:e9:24:7d:8a:
67:87:5d:61:d4:f5:47:b2:e8:b1:e1:8d:bd:5b:a5:
06:ed:f2:07:24:36:57:00:dd:2e:70:f0:57:b8:37:
f9:a5:59:bf:74:a3:c5:9f:9d:1c:67:c9:61:f3:87:
92:c9:b5:f8:97:d9:01:e3:80:fa:a6:01:9e:85:01:
91:93:74:3c:39:b1:63:fd:b9:b4:f9:b8:a7:36:f4:
2d:6b:03:12:7c:2a:6b:b2:18:6a:81:4d:07:ce:a7:
20:2d:a7:e8:e4:37:52:29:51:a2:97:0f:ae:7c:35:
27:48:b8:ea:26:b1:b5:93:21:65:72:c6:e4:f0:f5:
0d:58:db:10:7e:4b:83:0e:90:e6:91:9b:a1:34:09:
9a:6d:9c:fd:db:49:27:37:bd:26:47:89:28:b6:60:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DF:74:0C:10:81:05:BA:EC:C8:B0:DC:D9:A2:E0:2F:A2:EF:03:72
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:38:56:10:a9:b0:9b:2c:a2:c9:19:fa:94:5e:a1:62:fb:33:
5c:52:79:f8:fb:3d:5a:75:af:45:26:90:9e:34:38:94:7d:86:
43:b1:91:b8:87:4e:cd:aa:ca:ef:f0:69:b8:e0:87:1c:90:76:
bb:e5:67:98:54:05:29:96:e1:63:50:d9:78:a2:ea:bf:2b:81:
8b:40:b7:4d:a8:87:a7:b2:f8:49:9b:ff:dc:a9:0b:c7:99:de:
ee:fb:b0:7a:26:20:73:a1:e0:a4:47:d6:82:a0:b1:aa:2b:cf:
92:a0:f7:12:3c:b0:ab:fa:53:67:fa:e3:1d:59:bd:05:62:b8:
e2:02:9f:eb:f3:42:dc:47:fd:96:9c:74:42:b7:9f:16:8c:cd:
fe:a1:64:29:ca:55:ee:5d:4e:2c:3e:62:ed:f2:81:84:30:8c:
83:38:ee:08:c7:72:4f:d1:12:70:c5:44:4b:7c:45:de:3d:4b:
c3:bb:bc:1f:f0:c9:84:af:a7:ed:84:a0:37:59:70:43:ea:e6:
27:8c:05:10:cc:63:98:dc:0b:fa:da:5b:fd:e3:76:58:35:96:
49:b6:ed:fa:4c:4b:89:d9:db:72:b0:77:e7:4c:1f:d7:58:fe:
90:71:84:ee:3c:e7:a8:b1:de:20:61:e3:68:b1:78:42:61:f6:
24:3e:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:29 2025 by rpki-client