
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File: fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier: n8rks7cGGeatC4KqCss+jq4mj2TxB2VnKB8pBTCIgLA=
Subject key identifier: 39:28:53:0D:E4:5E:CB:70:DE:C9:0B:6B:F7:C8:8B:56:78:D8:95:8C
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer: /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial: 01988C2179D59079166CF7032B1BCB941167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number: 06D0
Signing time: Sat 09 Aug 2025 00:01:00 +0000
Manifest this update: Sat 09 Aug 2025 00:01:00 +0000
Manifest next update: Sun 10 Aug 2025 00:01:00 +0000
Files and hashes: 1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: gVassx5calfhJ2pWgJd07ZA4L90Q3aTVC/D4efmI1LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:21:79:d5:90:79:16:6c:f7:03:2b:1b:cb:94:11:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Validity
Not Before: Aug 9 00:01:00 2025 GMT
Not After : Aug 10 00:01:00 2025 GMT
Subject: CN=3928530de45ecb70dec90b6bf7c88b5678d8958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:88:0a:6d:ce:66:46:c5:62:42:2e:b1:1f:
c6:0f:4c:96:e9:61:72:90:a9:50:00:df:a6:05:81:
24:48:f1:d9:75:97:a4:50:b1:0c:cb:58:c9:a0:c9:
06:2b:81:cd:76:d1:8a:f7:0c:59:bb:88:72:6a:3c:
b0:b7:4f:04:f4:9a:bc:cc:7b:b8:eb:d1:75:f6:1d:
83:93:ff:f2:ff:06:c3:38:93:77:ef:81:a1:41:e4:
42:5e:57:9d:78:c9:7b:84:43:3f:8f:62:d1:37:71:
ec:24:d8:0b:1f:9a:12:ec:e2:81:cf:20:94:78:29:
01:23:cd:51:67:e3:9a:df:68:37:1d:dc:ef:be:d1:
6b:ae:ad:3f:c3:da:17:3e:5d:ff:4b:28:eb:7e:09:
18:18:a0:6d:a8:ac:33:f0:6d:df:49:e8:4b:a2:70:
9f:8e:d5:5b:c9:65:8d:fb:fd:d7:d6:ea:44:f7:b4:
0e:ea:b2:12:27:2e:42:17:ae:20:c3:53:5e:c3:4c:
18:b1:00:9b:90:0f:a6:b3:6e:cd:de:8f:bf:1e:be:
9f:1e:e5:f3:7e:8e:b1:15:7f:bb:44:85:dd:da:c2:
0e:a0:83:72:a9:38:1f:55:c8:bd:90:8a:66:61:01:
1d:51:fe:65:f4:77:fd:fb:4f:ea:95:64:55:89:64:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:28:53:0D:E4:5E:CB:70:DE:C9:0B:6B:F7:C8:8B:56:78:D8:95:8C
X509v3 Authority Key Identifier:
keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:36:e8:2f:f6:8d:e9:dc:76:cc:73:b0:15:0a:aa:34:c3:a8:
50:b8:c2:63:cd:4c:2f:88:73:65:49:37:db:f2:c5:66:b8:66:
a6:ca:61:70:e1:0e:de:d5:1d:85:94:f5:9a:95:7e:d8:ee:3d:
d4:b4:60:09:1a:66:16:dc:bc:a3:45:60:96:af:6f:91:59:77:
05:8c:22:71:34:62:6a:2a:4e:73:7a:4d:01:d3:ef:fc:a8:eb:
09:07:0e:e1:25:94:2a:18:62:96:6a:fd:71:47:a6:bd:27:c9:
05:b5:1a:3d:44:df:ee:68:33:2c:37:3b:b2:36:9b:59:97:ff:
cc:ca:fe:b7:67:12:e5:8d:9c:bb:b8:d8:f4:87:c2:5b:22:d6:
f6:53:24:44:e5:05:c4:6b:15:6b:18:1b:5b:02:2f:da:d8:41:
6e:aa:9b:dd:27:39:de:c8:00:ef:ed:de:55:be:a1:a3:09:81:
27:c7:5a:fb:2a:29:8b:a6:58:a8:7b:2e:22:30:ce:2f:06:34:
26:a5:d9:00:53:69:e2:b8:f5:02:8c:9a:c5:55:b9:32:56:60:
bd:2d:5d:4b:1b:2c:fd:77:92:82:5a:ab:19:70:89:94:7b:03:
7d:ef:ac:4d:d9:e9:01:c2:98:30:e9:b5:7d:f3:1e:e8:c7:7a:
32:98:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:41 2025 by rpki-client