Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: eEQWk5afoi5fUYeULOEM90uYD2fPX6QSqeNPxhgDzgE=
Subject key identifier: 52:A9:0E:0D:32:96:55:19:78:7C:C3:9E:FD:51:AA:98:34:04:48:34
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 01988B0EED9E66431096F69FDE3757778F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0687
Signing time: Fri 08 Aug 2025 19:01:08 +0000
Manifest this update: Fri 08 Aug 2025 19:01:08 +0000
Manifest next update: Sat 09 Aug 2025 19:01:08 +0000
Files and hashes: 1: CFyreRKdu-UuhcLcuXS_I2Vcqxs.roa (hash: ctEJwL/F+KcP8ef2uPLwsHUQYLkUqUkmlW8U9dtbbuQ=)
2: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
3: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: 0kFtEFDvx+Tx2OAteIuksx/5kNyMTop5sS1/m9ys8lg=)
4: znoNBWia6W4C86fr-Er9zSBt3z4.roa (hash: 1cEa5kNLaAjAN6SHoWeZJLbyNheUqXOgYyH2CJfaeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:ed:9e:66:43:10:96:f6:9f:de:37:57:77:8f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Aug 8 19:01:08 2025 GMT
Not After : Aug 9 19:01:08 2025 GMT
Subject: CN=52a90e0d32965519787cc39efd51aa9834044834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:62:b1:2d:a2:85:28:bc:b3:6d:55:5d:b9:
94:af:8e:ed:51:b6:22:d0:75:ab:a3:bd:e2:f6:d1:
09:fc:cd:88:65:6d:44:6f:8a:de:0e:db:e7:19:e4:
e7:58:31:c0:3b:10:6c:97:db:f8:8d:12:fc:a8:a6:
77:0d:95:9d:95:79:55:18:4c:ad:be:b8:19:6d:aa:
20:14:19:78:49:08:9f:08:34:75:d1:78:94:a1:ea:
9b:d1:e2:37:da:63:a3:4d:f4:cd:73:e3:53:22:d8:
c9:2f:2e:e3:31:79:42:e9:7d:0e:ec:c2:1d:e8:22:
2a:42:ab:f5:36:e9:25:da:84:c4:fa:da:4c:cb:c5:
96:ee:50:fe:27:4c:f6:66:78:47:b4:58:50:9a:f7:
5e:7d:e8:24:9f:eb:d6:0b:9e:00:79:df:0e:3e:82:
1a:40:f5:30:b3:c8:2e:52:76:d6:75:a2:0b:b5:1c:
7d:de:d2:38:11:c4:76:18:29:08:5b:a7:2a:07:93:
1d:e0:4f:c9:87:1a:4b:d8:43:4b:34:9d:5d:fe:1e:
a4:92:52:df:18:43:6f:7b:72:cf:6a:09:88:c8:29:
8c:41:cb:c1:61:97:e2:d3:f8:bc:d5:e8:33:3f:c7:
90:a4:60:59:32:19:9b:cc:8e:fa:33:ac:50:cb:d4:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:0E:0D:32:96:55:19:78:7C:C3:9E:FD:51:AA:98:34:04:48:34
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1e:1c:26:d1:76:dd:68:c1:8a:f4:14:66:ef:34:16:f3:6d:
cb:52:19:b0:18:1f:7d:15:cf:b6:45:92:ab:15:2e:15:fd:d4:
d6:6d:9a:03:af:ef:3e:67:78:c3:ea:92:65:8d:fa:b1:a6:72:
c6:a0:24:92:ce:1d:81:9c:f4:9d:0c:6d:2c:06:b4:2f:fd:94:
11:5e:8c:79:ad:11:1f:8e:22:cd:d7:18:cf:06:cd:19:f3:94:
35:58:af:f5:a8:83:1b:9a:fe:6f:77:b4:69:41:95:f0:0a:c1:
a3:d1:ef:8a:20:79:c4:66:c0:3e:7d:3d:ab:bf:96:4e:d8:f2:
5f:27:8d:05:8b:46:d9:3f:9c:6b:6b:ff:73:82:29:a1:95:07:
c9:ed:39:d5:5e:f1:c3:e7:73:71:a2:02:4a:cf:79:eb:5f:12:
c3:48:af:76:d4:0e:71:5c:2e:e0:7c:84:e9:cf:64:12:15:bd:
ca:25:18:c2:a4:8b:c4:ae:67:1d:60:58:5e:d9:e4:98:8d:60:
b9:d6:06:2c:e9:26:89:13:cc:59:16:cc:07:39:71:0c:0a:59:
5b:e5:62:71:93:a9:3d:20:75:96:58:ef:23:ee:52:60:4f:57:
5d:be:cb:9c:4c:c9:97:8b:58:e7:1f:49:69:42:6e:d8:3e:5f:
cd:74:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:07 2025 by rpki-client