Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: g+XIxD/bK+T+AKzJzhr9CVQtVWMJUqMslsloJN6h2TE=
Subject key identifier: 0F:0D:72:65:53:94:D5:1A:76:A7:78:FD:1F:C5:32:43:D2:0D:44:55
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 01989E5FEB2165B9FFE1E5A12137FA7834A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 13EB
Signing time: Tue 12 Aug 2025 13:02:22 +0000
Manifest this update: Tue 12 Aug 2025 13:02:22 +0000
Manifest next update: Wed 13 Aug 2025 13:02:22 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: IFZiGotQ58uANhxsnJc8U9kG4XV6Xp+B3Pgo1ouFjBk=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:eb:21:65:b9:ff:e1:e5:a1:21:37:fa:78:34:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Aug 12 13:02:22 2025 GMT
Not After : Aug 13 13:02:22 2025 GMT
Subject: CN=0f0d72655394d51a76a778fd1fc53243d20d4455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:e0:e2:43:c3:c1:06:36:87:49:d4:0c:97:
6c:03:24:6e:94:c2:9e:66:c6:d3:f2:ed:82:9d:8a:
f2:8f:15:48:7c:83:e5:1b:2f:fd:87:7d:1b:15:9d:
81:6a:77:fb:4f:04:6b:8c:39:f1:46:9e:16:1b:11:
2c:2e:ce:94:29:db:9e:53:99:91:31:85:5b:47:75:
b6:aa:fd:1d:4b:00:8e:25:19:84:8e:66:29:d3:f1:
f6:cb:5c:a2:56:b1:a1:c0:df:fd:72:f9:39:53:68:
8f:eb:92:fe:04:44:b3:fd:98:7b:c2:98:d5:93:0f:
b9:24:b5:c5:ad:03:e4:0c:5f:ad:e2:86:68:b7:81:
a2:c7:69:f1:bb:06:3b:ec:bf:57:2a:59:65:c2:1f:
80:1a:4f:5b:ca:7c:a6:ec:b3:69:c5:c5:c3:aa:e2:
f8:c8:a3:9f:87:7a:a9:0a:59:f9:f3:3c:db:41:92:
e5:bc:1b:24:6b:27:86:cc:22:8e:90:f8:33:d7:0c:
3d:1b:88:b8:e9:21:ba:07:bb:1e:2e:8f:79:01:38:
d3:a8:b5:a2:9f:b8:51:b3:64:59:6e:cd:31:ef:7e:
9b:e8:22:e6:75:fe:7c:45:48:42:29:bc:c0:86:ab:
e9:ae:db:1c:6f:bb:9a:6c:c9:65:4d:94:c9:03:99:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:72:65:53:94:D5:1A:76:A7:78:FD:1F:C5:32:43:D2:0D:44:55
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:18:21:a3:23:1c:f5:7e:9f:98:bd:e0:df:f1:d5:86:fa:9f:
45:73:d8:2e:b4:4c:b4:a4:d9:c1:f6:a6:29:3f:c7:4b:14:16:
37:b2:dc:cb:75:46:66:46:8c:b3:ba:34:e6:77:15:f2:e8:6b:
f6:ed:a6:b7:c4:81:2b:9b:73:8d:c3:ed:dd:5c:9a:38:5b:87:
e8:f8:37:c1:90:66:8e:92:9e:7b:66:64:0b:9b:a8:4f:0e:b9:
db:24:34:24:d0:3a:3b:66:a6:e2:49:f3:0e:61:77:5c:3a:f6:
69:51:33:68:1f:d5:83:22:d9:5b:5c:ca:6b:bf:e9:4b:ca:da:
1b:3e:df:f1:03:ff:46:8b:7d:1f:1d:3e:34:3d:a4:22:74:6f:
d6:17:3d:33:94:9f:51:44:37:a9:b2:d1:85:a0:d2:2d:b7:1f:
b9:f4:e7:4b:ef:91:9d:b5:43:57:4a:1b:50:4b:17:8a:94:05:
b3:fb:2b:ac:99:07:50:2e:57:77:1c:2d:8a:37:2c:56:a7:05:
8f:24:a3:17:ab:39:56:a7:00:50:b4:7b:81:c0:21:e0:4c:0c:
c5:e6:78:8e:9a:bc:aa:f9:13:da:e1:9d:40:0a:ff:29:16:5a:
b0:5a:6e:63:32:c7:f9:23:6e:d0:ac:83:05:2c:3b:0e:08:71:
ec:b6:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:39:44 2025 by rpki-client