Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json)
Hash identifier: fButlRXy101byh6e4ZRIhwntf2xcb26uU8rJBFdUH9Y=
Subject key identifier: 24:03:23:D7:0F:01:C6:6C:2D:CD:C6:B7:2D:FB:92:E7:8B:17:7E:35
Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Certificate serial: 0198A08425390C860431E51065E34766DB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
Manifest number: 0A16
Signing time: Tue 12 Aug 2025 23:01:11 +0000
Manifest this update: Tue 12 Aug 2025 23:01:11 +0000
Manifest next update: Wed 13 Aug 2025 23:01:11 +0000
Files and hashes: 1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: st8MUxBsdYuPTcfRjMDJIk+3vOlmkXHchiknSGG+JJs=)
2: wnJRh-4CUXkPHnOwTdcWOQViBQs.roa (hash: +Cv+ZEGLAnj74mF/vlyspj0D6dG5P9lPHFBp/dI5sxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:25:39:0c:86:04:31:e5:10:65:e3:47:66:db:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Validity
Not Before: Aug 12 23:01:11 2025 GMT
Not After : Aug 13 23:01:11 2025 GMT
Subject: CN=240323d70f01c66c2dcdc6b72dfb92e78b177e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:47:74:f3:02:53:31:75:c3:2a:eb:5a:b2:
77:aa:04:38:b8:5a:a8:89:08:37:23:d2:88:5e:0c:
73:06:74:6d:4a:72:98:15:04:06:a9:ed:d3:65:56:
76:c4:c0:50:10:dd:0a:70:17:5d:42:e9:ed:7c:fb:
f5:1f:97:f1:7e:0c:13:12:eb:f5:41:e6:3c:e6:49:
c6:ff:03:e0:a1:b7:51:19:15:a3:a2:a4:58:19:65:
6b:f3:67:08:04:5d:3c:b2:b1:8d:84:e3:95:78:90:
4d:54:7e:8e:ad:61:04:2f:a9:36:f1:17:72:3e:e0:
a4:57:c0:c1:73:e1:e5:26:a8:1e:84:d3:86:94:62:
a0:b2:8f:92:e0:67:e2:6c:30:ac:6c:de:3f:1e:61:
e8:dc:eb:e6:cf:53:b2:df:e3:e4:28:29:a1:c8:bb:
d2:56:18:42:25:77:17:80:91:07:1c:89:67:7d:58:
6a:8a:52:ba:a0:c9:42:11:bf:0d:a5:6e:f7:bd:be:
57:99:5d:0d:ef:0a:bd:3c:8c:f9:e2:9f:f3:42:48:
3e:8f:77:b5:fc:31:3f:4f:4a:1e:9d:89:b5:ef:e9:
e7:09:f0:ad:9c:7b:a9:5f:55:32:b6:63:50:14:b8:
98:27:93:15:79:64:55:b7:c5:d6:f5:ae:96:bf:34:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:03:23:D7:0F:01:C6:6C:2D:CD:C6:B7:2D:FB:92:E7:8B:17:7E:35
X509v3 Authority Key Identifier:
keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:d8:b4:49:5c:2e:1c:0a:2a:04:f9:18:a3:17:51:27:b7:
e1:89:dc:05:f3:2b:4e:74:d0:74:f2:e3:57:4a:51:6e:ed:88:
20:99:14:9b:15:36:c4:45:11:f9:8c:e1:8b:2c:a7:65:b4:bf:
6f:83:4b:01:d4:e2:5e:e2:91:b0:8e:28:27:e6:d4:91:d9:ef:
8c:18:6c:a4:ea:df:37:31:70:8a:d2:50:91:1b:15:bd:ac:72:
cd:2c:1b:8e:e9:6e:3b:a0:be:11:c3:d9:b6:2b:6d:32:6d:bc:
1f:bd:96:18:fe:e9:7f:fb:8f:57:25:5b:72:77:28:f6:d1:08:
7a:51:b0:06:c4:8b:5f:fa:ee:83:11:d8:41:03:21:d0:90:5b:
5e:14:c2:f8:0a:08:b2:a9:36:99:08:1a:73:f6:4c:c1:65:72:
f6:8a:58:6c:ec:f4:46:8c:96:b9:a5:80:3f:c6:6b:35:a3:43:
44:63:35:af:47:ef:1f:6c:ca:b1:b2:eb:ca:79:0e:44:a4:24:
02:f5:e3:46:63:21:33:96:bf:9f:1e:35:a9:0e:ac:b5:61:15:
f8:12:b3:66:96:45:d1:08:45:85:b9:97:57:37:df:e5:09:76:
5b:f4:07:5c:b8:04:fd:12:dd:0d:3a:d4:54:44:8e:1f:d3:0f:
7e:cf:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:53 2025 by rpki-client