Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: rGp1P2ok6Rd8tvzIYKe5C3/zHP037WYsgPyuN1yKIsg=
Subject key identifier: 2E:64:13:E2:74:8A:17:17:36:24:92:C2:93:E6:BC:67:EC:A5:38:78
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 01987E65F233350104DF91AB2CC951606D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 04AB
Signing time: Wed 06 Aug 2025 08:01:06 +0000
Manifest this update: Wed 06 Aug 2025 08:01:06 +0000
Manifest next update: Thu 07 Aug 2025 08:01:06 +0000
Files and hashes: 1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: yOgybQfXQbLASebSDcpSRbFetusCxCKYusfyvxNI5U0=)
3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:f2:33:35:01:04:df:91:ab:2c:c9:51:60:6d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Aug 6 08:01:06 2025 GMT
Not After : Aug 7 08:01:06 2025 GMT
Subject: CN=2e6413e2748a1717362492c293e6bc67eca53878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:a9:d7:fe:78:6a:f4:11:14:bb:be:3f:10:
41:da:6c:93:28:29:92:0e:ef:2d:bf:4e:93:8d:b0:
6d:39:18:42:71:6b:00:85:35:96:fd:29:ab:2c:e9:
e5:13:da:18:86:cf:3c:ba:73:29:1e:ad:e8:40:64:
43:ae:a3:a0:3e:e0:0b:8d:6c:aa:c6:3d:77:bd:e5:
de:e2:88:b1:e6:13:7d:22:df:5b:4f:4b:dc:05:85:
5e:a0:71:87:dc:d1:af:40:85:19:30:e7:8d:63:4d:
9a:aa:23:61:dc:9d:35:18:25:e3:0f:c7:e9:86:54:
97:0e:01:30:64:8e:0b:4d:01:e8:88:64:da:9b:95:
8b:61:1b:32:04:6e:d7:02:33:e9:d1:e0:15:bd:8d:
61:c4:6b:5a:18:8f:e3:f8:dd:0f:6a:e2:b2:7c:b3:
d3:72:da:a1:40:27:2c:83:7e:19:b2:0c:c6:9e:9a:
03:fe:52:c9:37:87:ce:8d:e3:66:e0:58:72:d0:01:
67:a6:77:19:6c:72:dd:cc:86:5b:96:15:5a:cc:af:
47:36:a7:43:c7:ba:1b:2f:16:d2:6d:03:71:17:36:
64:e9:66:fd:d4:4b:9a:dd:c3:25:4e:bf:b2:14:38:
db:52:d0:7d:3a:09:7e:21:e2:44:4a:76:64:28:9b:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:64:13:E2:74:8A:17:17:36:24:92:C2:93:E6:BC:67:EC:A5:38:78
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:50:0b:0a:ed:ad:7c:83:36:82:40:e1:0f:49:86:40:b5:
91:c3:5f:2a:92:a7:dc:7e:48:31:14:6b:9c:50:23:ab:2f:46:
84:64:cd:5f:13:29:60:13:94:e7:9d:37:5f:ed:0d:44:95:34:
3d:f7:d4:36:9e:48:a0:95:09:7b:44:a3:12:c1:7b:59:58:4d:
dc:84:14:f1:1d:94:ce:5a:ed:59:94:f5:9e:f5:1e:e2:d1:83:
39:a0:f5:ef:3e:bb:6d:15:cc:e4:8f:51:aa:3e:70:a6:9b:e2:
6e:f9:17:21:c3:32:ad:f9:5d:96:e1:e7:43:a0:a5:be:83:c0:
87:f4:e7:22:81:83:0e:84:2e:f0:20:5d:f5:8d:f8:e6:c9:5b:
50:82:91:fb:b8:b5:24:71:45:4a:60:da:99:ad:36:9a:66:bc:
a6:45:d9:60:5d:6b:6c:17:a9:c1:1c:e8:5f:44:ff:80:d9:03:
6b:4e:ea:49:b9:14:99:ec:85:42:30:df:45:67:af:32:d8:4e:
80:54:9b:00:f2:37:7a:09:7d:d3:43:74:d1:b7:a3:e3:0c:38:
e3:31:3b:c6:5b:b5:61:d9:d7:22:e3:a3:d6:d9:3e:46:7d:0e:
97:16:68:c4:e6:af:e1:3c:9b:77:e3:0e:58:87:53:57:35:d4:
34:cb:45:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:12 2025 by rpki-client