Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: 9cPqBFjL/p2ioS/dfm9NSn3i1Eh7QLUyLZOBvQCZ7lE=
Subject key identifier: BC:8F:03:7D:71:47:48:ED:B7:12:34:7D:A3:80:68:0C:8A:F6:84:88
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019885B1A6CE79118292827504E07DD8A951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 18:01:08 +0000
Manifest this update: Thu 07 Aug 2025 18:01:08 +0000
Manifest next update: Fri 08 Aug 2025 18:01:08 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: qfwLJ+KHyyC/VJ1n7qJuGO5SBzV06Zv1xLmu2diaFWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:a6:ce:79:11:82:92:82:75:04:e0:7d:d8:a9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Aug 7 18:01:08 2025 GMT
Not After : Aug 8 18:01:08 2025 GMT
Subject: CN=bc8f037d714748edb712347da380680c8af68488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:4b:69:ce:71:8b:f8:34:1c:74:26:cb:f9:
cf:a8:a2:4a:03:5a:f2:b3:8b:36:f1:90:b9:9c:67:
be:5e:f8:b0:03:f4:17:35:e8:0c:7a:55:5d:26:e1:
b0:00:92:9d:8a:12:b8:b7:b4:84:e9:0d:6b:e5:e7:
4f:7b:8f:13:f0:65:92:cf:e3:b0:b7:5d:90:d0:d0:
e3:47:b8:86:05:9c:1e:c8:fd:9e:44:f1:2e:32:c2:
23:aa:14:80:1a:9a:9a:41:db:88:f5:82:50:1a:0b:
77:50:f4:5c:c5:75:c3:64:59:53:4d:fd:81:7c:de:
ab:4d:0e:36:86:74:6d:4f:05:b7:e7:5f:de:1e:91:
89:b3:0a:ef:18:77:f4:f7:cc:27:f9:85:3a:f8:6b:
3d:79:3d:61:9b:f0:ec:b9:e4:b1:f9:9c:14:aa:67:
65:29:11:d5:82:25:d9:9d:2c:05:1c:c4:77:3f:2f:
e9:f6:ce:0f:20:19:2f:d9:02:da:4b:f3:30:03:6f:
b1:c5:df:25:44:e2:16:6f:61:e8:9d:e9:38:d6:fb:
d2:e9:2d:25:fb:a1:68:34:a0:db:69:d4:b6:fa:41:
32:6b:d3:88:12:c9:18:57:c3:d3:3f:8e:c6:11:a5:
d4:bf:a5:53:d5:5b:c7:e3:c7:19:9b:a5:3b:47:7e:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8F:03:7D:71:47:48:ED:B7:12:34:7D:A3:80:68:0C:8A:F6:84:88
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:81:3b:d0:ca:61:2a:aa:06:ad:86:20:e4:b5:d4:9b:e8:79:
6e:b9:35:0c:e5:fe:1f:72:10:33:0d:11:1f:9f:7f:4a:f2:c2:
2c:52:59:f8:ed:f2:ac:f5:48:6c:30:e4:b0:67:b6:8d:63:f9:
32:0c:1a:3f:64:3c:a5:ea:28:dc:55:43:61:8a:a8:d7:df:63:
52:a7:27:92:26:ca:8e:83:e7:09:c7:e8:82:47:33:e7:52:4e:
70:80:2b:0f:c2:e6:29:a8:41:5d:85:d9:a1:53:fc:65:b2:6b:
01:63:85:e8:6e:93:fd:4e:ee:db:a7:f9:72:cc:30:f7:88:f1:
4d:f0:64:7b:db:81:7f:67:d6:5d:7b:60:6d:c9:5a:91:c9:7d:
f8:31:f6:54:20:89:b3:92:71:08:50:b2:66:aa:36:5b:0a:24:
90:c2:60:e7:12:ca:6a:53:e3:40:a4:bc:86:45:4e:86:e6:2e:
a2:b8:f8:63:6a:20:a8:f9:79:a2:a7:7f:24:1f:ac:65:46:d0:
8f:c5:a4:c3:d1:e8:89:ba:a4:a4:0f:7e:db:dc:b7:5a:92:cd:
9a:f9:b8:d4:ae:7d:40:1d:bc:55:c5:e9:09:b9:40:2c:2a:bd:
b9:17:17:a3:f8:55:49:b8:ff:aa:35:b7:8e:e5:39:1a:71:76:
03:aa:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:21 2025 by rpki-client