Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: QlLK+KkmiP1CcFon9Pe0R3MkbfpYWTPkR9b1Y9pI1AU=
Subject key identifier: 41:60:89:8F:5A:9E:B8:C7:0E:3C:BF:01:84:9B:83:CB:D6:D3:D6:18
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 01988BEA671C49058034DDF24BE71AC031AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 13DB
Signing time: Fri 08 Aug 2025 23:00:51 +0000
Manifest this update: Fri 08 Aug 2025 23:00:51 +0000
Manifest next update: Sat 09 Aug 2025 23:00:51 +0000
Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
2: 8v_aiBgvpLDJT4bE3zxJWwrf4Ao.roa (hash: wcB7NvMB7REyv6Xd72Vh3AOoxDTtyyThVZ07XtgTGL0=)
3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: KhUXdvdRj/sEX6MW8QF8fXxVpqE57puLRMwZcly4+oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:67:1c:49:05:80:34:dd:f2:4b:e7:1a:c0:31:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Aug 8 23:00:51 2025 GMT
Not After : Aug 9 23:00:51 2025 GMT
Subject: CN=4160898f5a9eb8c70e3cbf01849b83cbd6d3d618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:5d:dd:7a:ba:48:fb:88:d7:dc:e3:5c:03:
10:5c:0e:12:d5:4f:59:47:6a:44:ae:51:e0:98:01:
bb:90:c8:64:e0:12:36:04:e6:b5:73:3e:6b:63:21:
78:2f:6c:ae:c3:36:ba:c3:c5:28:a5:f2:90:9a:45:
c6:82:42:07:a0:f6:87:50:19:d6:0b:50:e4:ab:23:
ef:3a:c3:f2:2f:ac:93:6a:74:66:b1:00:af:44:68:
60:23:9b:7c:46:44:a2:93:a2:3e:cd:b9:22:ff:d6:
74:b7:b5:99:8d:6d:af:39:2f:da:a4:3e:6e:b4:77:
ac:33:a1:47:44:6e:84:85:38:66:3c:3a:4a:06:af:
dc:b9:63:47:2d:91:c2:5f:25:bd:ab:01:cc:3a:08:
1c:3f:09:47:df:ef:32:b8:24:ba:77:7c:cf:2f:ca:
05:2b:be:a2:28:86:95:cd:d2:e7:e3:b7:be:e3:5c:
3e:2c:fd:50:0e:80:34:15:43:a7:2c:00:13:ff:d7:
4e:ef:aa:0f:d0:ff:44:75:bc:b4:44:23:28:7c:04:
9d:65:10:d1:df:49:54:a6:1d:30:ca:f8:b5:33:52:
87:aa:71:c8:04:0c:9d:d8:c1:50:f4:4c:0e:5d:15:
9d:fc:2a:a7:e0:86:02:50:3d:8c:a3:90:1b:3a:43:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:60:89:8F:5A:9E:B8:C7:0E:3C:BF:01:84:9B:83:CB:D6:D3:D6:18
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a5:d2:b8:7d:44:e1:05:ef:ae:70:57:e7:81:3d:e4:64:0e:
ef:9e:6f:af:94:99:b8:e7:55:75:16:09:42:f3:af:3c:eb:71:
51:02:77:34:26:a8:a5:88:5a:47:f7:4a:84:a9:be:e2:76:46:
05:14:9b:bd:77:7a:ee:19:bd:30:c4:cb:c8:56:06:86:25:d4:
15:ec:5d:07:42:85:8e:25:c4:7d:f6:11:7f:55:28:d4:27:8d:
8a:09:f1:76:69:af:c6:7f:38:8f:d2:ba:10:16:b2:10:08:26:
b8:18:05:48:dc:b7:05:61:3e:3f:4a:e6:9a:0f:38:07:c5:33:
14:aa:c3:99:d3:13:62:46:80:96:45:fe:66:67:e1:a1:23:5f:
6c:5a:2f:7f:a3:42:bd:77:4a:8e:15:3f:4d:0b:3f:d1:03:d2:
e0:4b:3d:1c:4f:54:af:83:c6:aa:21:11:dc:c9:86:12:33:8a:
48:eb:96:05:0f:b5:ff:7f:63:8b:95:88:28:96:c4:9c:06:a3:
93:52:0d:34:fe:ec:3f:2d:46:d6:27:be:a7:44:8e:9b:84:76:
9d:fb:69:71:10:2b:28:5f:a2:c3:00:30:c5:89:f5:8e:84:10:
80:20:44:b8:f5:d6:69:47:f7:71:b1:fb:cc:de:52:5f:d2:4f:
f4:37:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:58 2025 by rpki-client