Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: /5Wka2pl1+96g+k8pipisqmh4IKvY0PpU+9/8og2lqI=
Subject key identifier: 1F:F6:D2:10:1C:B9:71:43:EB:85:FA:6B:A2:48:0F:60:3A:AE:69:CB
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019880C28CC4DCB12E5A28624EFBE189A937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 1045
Signing time: Wed 06 Aug 2025 19:01:30 +0000
Manifest this update: Wed 06 Aug 2025 19:01:30 +0000
Manifest next update: Thu 07 Aug 2025 19:01:30 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: bCwgGvR1aVtTi/0xe/UrT2HfJAsioUviUKdfHpDjug4=)
3: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (hash: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:8c:c4:dc:b1:2e:5a:28:62:4e:fb:e1:89:a9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Aug 6 19:01:30 2025 GMT
Not After : Aug 7 19:01:30 2025 GMT
Subject: CN=1ff6d2101cb97143eb85fa6ba2480f603aae69cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:21:e9:ba:b3:f0:d7:a7:ca:a5:94:47:cb:
fd:f8:0a:aa:e0:dd:c4:29:37:81:91:02:14:84:19:
b8:81:23:28:46:6f:29:5e:d9:21:b3:df:32:6a:d7:
1a:cd:e8:c9:0b:0e:2a:5d:20:37:9d:98:a1:c3:3b:
f1:fa:ed:79:db:ba:66:72:f8:9a:2a:23:5d:05:15:
12:d5:ba:0d:6f:39:46:f8:14:3b:57:b7:9e:d8:e9:
b1:e3:ed:8f:bc:4a:b3:88:2b:ae:00:af:05:15:54:
53:bf:2b:c9:45:da:e1:54:b0:25:2d:5e:42:aa:ce:
16:14:e9:d7:24:a3:44:5a:31:cc:2c:26:df:40:31:
16:8e:93:20:1d:cd:a2:32:c4:1e:63:56:9f:63:69:
1e:d6:a8:38:51:b5:e6:7f:a8:0e:08:07:7c:80:67:
3c:27:e9:e9:3c:34:8b:65:04:a9:01:2f:cf:c9:d5:
b3:ac:5f:8e:82:2f:99:fb:83:76:03:94:8a:f9:40:
8d:c8:f1:a4:68:d8:c0:83:31:75:1a:d2:44:13:db:
11:9a:72:c0:89:50:0c:e8:c4:ce:a0:42:8a:45:88:
04:e7:7d:cf:9e:e1:20:28:f0:33:fb:95:a9:cb:27:
47:18:67:1d:36:73:2f:06:ca:ea:c7:7d:7b:21:33:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:D2:10:1C:B9:71:43:EB:85:FA:6B:A2:48:0F:60:3A:AE:69:CB
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:9d:7d:cd:d9:0c:db:e3:ca:d6:dc:01:10:b0:fb:85:96:
f7:50:bb:ca:d6:d9:eb:9f:c2:d4:03:d3:43:24:93:c4:3b:58:
32:db:74:6d:d3:9b:6f:4f:ae:c2:06:d8:8b:1b:cb:1e:8d:d4:
d5:36:ef:89:35:62:a1:36:ff:0e:80:85:5d:90:5b:ef:fd:21:
a0:ed:79:ba:69:38:a0:c3:4f:87:4f:1b:75:f0:30:38:a5:bc:
88:c7:64:5f:d4:e7:3f:45:dd:0a:3c:d1:67:92:7f:4e:b9:cd:
1b:78:77:e2:d0:13:b4:e5:f3:7c:82:2d:4f:1c:43:e0:9f:52:
fe:1b:a4:b0:a0:3a:b0:58:2c:e2:ad:63:a3:0b:7d:b0:64:06:
00:c5:f1:31:ea:5d:4e:4f:ec:aa:fb:46:66:ae:5e:30:cf:34:
b5:00:cc:4d:20:8a:0c:53:f1:a0:02:9b:86:dd:14:70:e5:06:
6a:5d:94:f0:1c:21:b3:7d:e2:28:53:15:7c:cc:9a:f8:19:94:
4d:3a:06:98:57:61:04:a4:bd:b1:da:50:44:6a:80:8e:36:77:
26:1b:1d:96:b9:43:07:78:e1:62:97:17:a5:88:31:50:48:27:
da:ba:64:50:96:1d:6c:56:9a:28:9f:9f:c1:9a:a5:fd:62:6f:
23:c1:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:35:20 2025 by rpki-client