Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: 3BwDbmwlx6QXAEGGjToDQVGlG81MFeDQTgJdu+vseIs=
Subject key identifier: 5E:18:C6:4B:F6:C5:45:35:7A:0C:D6:D7:E1:1B:DF:1C:80:7F:E7:EE
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 019873E2CDA5A034D793E74D03567698038B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0D7A
Signing time: Mon 04 Aug 2025 07:01:40 +0000
Manifest this update: Mon 04 Aug 2025 07:01:40 +0000
Manifest next update: Tue 05 Aug 2025 07:01:40 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: 19TYYwK0gDops46m+htggAEoOTJRzsbJBOpoCyxO384=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:cd:a5:a0:34:d7:93:e7:4d:03:56:76:98:03:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Aug 4 07:01:40 2025 GMT
Not After : Aug 5 07:01:40 2025 GMT
Subject: CN=5e18c64bf6c545357a0cd6d7e11bdf1c807fe7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:3d:8b:b9:76:52:a1:2c:d5:57:ef:df:60:
fa:2d:cc:3f:2c:9d:e5:34:b8:fa:67:d4:59:04:37:
e1:f8:a4:29:95:eb:ff:14:97:46:32:c3:d7:50:15:
51:00:de:05:c6:68:94:87:6e:9c:70:bc:fe:af:b1:
37:bd:16:76:f3:9c:bf:78:48:34:7c:ab:d3:cc:ec:
7f:12:d6:84:f4:59:1b:83:5c:a0:e9:d7:16:f9:d4:
99:fc:43:a7:8c:e8:aa:21:1b:56:b0:11:3c:fd:f8:
c0:15:22:1b:88:7c:1d:cf:63:b3:54:c0:59:6e:dc:
89:2f:20:46:f1:72:1d:0b:32:5a:16:a2:41:45:29:
db:90:0a:88:c9:5c:dc:f9:16:37:2e:c9:07:fe:53:
2a:7f:08:7f:df:46:c2:ee:27:d7:c8:4b:d8:c1:4c:
c5:99:eb:88:71:ad:80:20:69:7a:74:98:1c:df:03:
38:32:5e:5e:be:3f:57:4d:5a:19:7c:b0:fa:8c:d8:
b5:06:37:73:c5:fb:6f:43:98:e2:cc:43:ad:7a:c1:
45:8d:c1:3f:16:c0:c6:54:41:08:be:20:ca:39:22:
ed:52:d5:a7:0f:41:df:cc:b1:78:77:09:d9:a3:f4:
06:d2:7c:89:74:12:3a:0f:1d:cf:70:44:51:18:d6:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:18:C6:4B:F6:C5:45:35:7A:0C:D6:D7:E1:1B:DF:1C:80:7F:E7:EE
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c2:72:13:78:ac:b8:41:0f:e7:d6:3a:6d:50:34:37:b3:c0:
ec:82:97:17:f1:c9:ab:28:50:df:87:60:32:4e:16:57:80:eb:
57:67:ec:10:bc:1d:0f:77:13:af:09:79:b6:a4:38:8b:6f:76:
74:b6:0b:74:a0:03:6c:b4:e1:f2:c3:18:c8:80:2b:a3:2a:00:
70:d1:75:19:f4:4f:41:c2:de:1c:a3:3b:65:20:b3:b6:0a:a9:
1d:18:4d:57:8d:f2:37:dd:d4:d4:e4:f9:d5:dd:bf:be:55:e0:
27:2e:1e:2b:ac:74:4c:2d:75:eb:ff:64:db:fe:88:6c:23:77:
b3:c0:9f:04:79:24:4e:1f:63:20:3a:ab:be:bf:4b:45:19:d4:
b9:5f:b1:be:7a:d1:60:30:06:bb:52:47:ad:72:0f:0d:96:1b:
29:98:54:ea:64:ae:46:2a:3f:21:e8:40:89:98:99:da:e8:ba:
72:02:45:01:b0:af:7f:aa:65:b6:f0:97:51:fb:99:25:2f:ee:
aa:88:c8:6c:37:8c:ec:ae:38:dc:d6:ca:2c:7e:e4:a5:1b:69:
0a:82:b6:6e:db:7a:22:89:cd:64:50:12:c1:3f:9b:b4:98:80:
bf:d2:9c:da:8f:65:ea:b1:43:aa:81:9f:42:9e:d3:6f:ce:53:
e6:df:84:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:30 2025 by rpki-client