Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: ifalR2OkgeAkx8MBiwjBmpLOutD/afnihUiV5I5Pxms=
Subject key identifier: BE:BD:06:BA:E4:00:38:4D:3D:32:F9:14:43:A8:AC:C1:E3:26:C5:D0
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 01988B7D04BD0CA483305385A5551E3E129F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 1129
Signing time: Fri 08 Aug 2025 21:01:22 +0000
Manifest this update: Fri 08 Aug 2025 21:01:22 +0000
Manifest next update: Sat 09 Aug 2025 21:01:22 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: cI2GLamEDkG/dlYHqL6Pbth6xC8r9XJRp1g00mYafDo=)
2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:04:bd:0c:a4:83:30:53:85:a5:55:1e:3e:12:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Aug 8 21:01:22 2025 GMT
Not After : Aug 9 21:01:22 2025 GMT
Subject: CN=bebd06bae400384d3d32f91443a8acc1e326c5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:55:4e:84:9a:fe:b7:81:5d:12:3b:a6:4d:
db:3b:0f:d5:c1:ff:62:4b:fa:56:84:61:b6:1d:41:
03:43:3d:09:2a:c4:71:fa:1e:19:97:1e:8f:a7:9a:
bc:f4:54:dc:89:f0:23:f0:e5:02:fa:ff:9c:cd:6e:
8a:77:59:20:7b:0c:a0:d7:dd:67:29:8d:b8:41:75:
f2:57:0a:45:74:83:67:a8:88:2c:2b:49:bd:7f:c7:
14:2f:ba:52:0f:c9:9c:cc:d6:d0:e0:56:49:e8:43:
13:d6:46:94:c1:ec:2e:04:86:7f:a4:d9:8e:fa:1c:
f1:d2:3b:9c:cb:97:b3:e3:d1:10:6a:6b:ad:36:c4:
2c:5b:4e:17:5d:1a:d5:00:d2:a6:09:e7:a6:5b:a6:
f3:c3:43:10:ef:32:db:1d:c3:d0:e8:af:69:cd:9a:
87:64:8a:b9:ae:15:f9:c3:4e:b0:96:b8:93:22:9b:
6e:ad:60:c5:b2:a6:b3:93:c8:ab:7e:78:e4:70:5b:
df:f5:69:0b:99:17:58:4e:c7:6d:46:d9:0c:df:f4:
a3:c4:fb:03:6b:df:c9:29:14:b9:99:7b:b4:34:b6:
fa:3a:28:d5:f0:34:db:78:9a:ea:7c:c5:bd:ef:17:
b1:11:72:7e:c0:49:e3:0e:7b:08:2b:2b:45:cb:97:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:06:BA:E4:00:38:4D:3D:32:F9:14:43:A8:AC:C1:E3:26:C5:D0
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ee:39:59:7c:3a:10:37:79:49:9c:a0:df:e1:90:bd:f9:88:
c9:42:6a:51:b8:e4:62:02:95:99:92:ec:66:ba:c1:2f:8b:65:
17:55:22:7f:cc:c1:fe:5d:b1:47:93:f3:71:54:a7:da:ec:78:
a0:87:b0:db:79:83:a5:be:ba:d1:a9:8f:5b:dd:a3:59:5c:38:
4f:1d:8e:d5:b9:c7:2e:0f:34:e0:e0:79:ec:17:ae:79:ce:ca:
f6:40:19:89:b7:d6:76:4f:d2:8a:bc:a9:44:50:e7:93:70:c2:
74:30:0a:4f:92:0d:35:50:e3:9d:2b:f9:18:3c:13:63:ed:93:
a3:5d:5b:83:82:ea:ad:d7:02:17:ef:5b:6e:44:8a:82:f6:62:
33:47:04:b7:80:ed:b9:c7:09:cc:0d:59:6d:b6:86:34:9e:a3:
8d:3e:10:9b:bf:4d:68:ff:87:7b:c2:13:47:c0:21:96:c7:80:
1c:1d:69:87:f3:d3:e7:f0:1a:cd:bd:18:ed:af:ea:44:eb:30:
86:5e:a9:77:c6:d9:99:68:fd:21:7e:cd:d8:39:2d:a1:c2:74:
59:ae:b1:7d:a9:02:97:b5:dc:e7:0d:8c:aa:90:81:a4:8a:e3:
33:ff:75:39:87:d1:e6:07:63:f2:90:09:e8:3f:9e:ae:64:76:
38:a3:c0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:49 2025 by rpki-client