Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier: NaVZb0AZ7ER6l0FKBVYcAg0X0VtDlCYXHg6gX49nGJM=
Subject key identifier: 88:94:9E:B6:CF:1B:96:63:44:E1:3D:78:39:2C:78:91:A3:BC:9E:92
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 01987298C59B817715B78D10DCDAB896E5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number: 08BA
Signing time: Mon 04 Aug 2025 01:01:11 +0000
Manifest this update: Mon 04 Aug 2025 01:01:11 +0000
Manifest next update: Tue 05 Aug 2025 01:01:11 +0000
Files and hashes: 1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=)
2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: kkMJm1iHDhl4J508A+xMi4LDb5J0KnZgQy33WmB3nuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c5:9b:81:77:15:b7:8d:10:dc:da:b8:96:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Aug 4 01:01:11 2025 GMT
Not After : Aug 5 01:01:11 2025 GMT
Subject: CN=88949eb6cf1b966344e13d78392c7891a3bc9e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:12:52:fd:84:c2:19:ae:56:27:61:c3:03:
e7:23:30:ec:8a:c2:b4:1b:ce:1e:5c:50:b2:75:3c:
00:12:f4:3e:9b:a0:01:93:23:e2:38:f9:5b:0f:3b:
59:cf:8e:c0:e1:da:b6:0e:94:1a:88:f6:38:9c:87:
ef:ea:93:ba:58:38:fb:8e:56:69:05:af:e0:32:95:
ad:b7:fa:e2:75:96:ae:db:c1:b1:76:95:90:5a:b6:
d0:cb:b1:f1:a6:a5:a9:a3:50:78:41:3e:27:60:e9:
5c:d1:37:90:94:4f:67:e6:f5:60:10:eb:21:ff:42:
94:0d:89:55:13:b4:ac:ba:5c:6b:a7:91:6c:57:7b:
85:bc:ab:89:14:be:75:ae:6e:47:54:25:79:75:f1:
e7:2a:98:b4:33:d9:06:1f:ef:76:b6:66:14:b9:28:
2a:4d:35:68:29:fe:18:ed:63:5e:19:04:1a:80:5e:
35:26:df:2b:53:45:39:59:0b:3e:31:b9:dc:d8:c7:
a9:24:c1:aa:74:6a:5a:fa:43:70:09:bd:7c:80:4e:
67:46:31:f4:5f:9a:0c:9e:7f:0f:16:fb:13:8a:d2:
06:d6:0b:11:61:f4:bb:8c:02:69:b3:de:ba:78:a5:
1d:b0:6f:d6:15:e5:8e:76:9c:57:88:97:36:cf:a6:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:9E:B6:CF:1B:96:63:44:E1:3D:78:39:2C:78:91:A3:BC:9E:92
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:73:71:41:d2:06:b9:01:12:94:f9:41:88:ce:7a:54:10:c6:
aa:b8:1a:cb:1a:d7:b6:99:03:3a:5a:61:ee:7d:ee:21:fa:d4:
31:2a:97:7b:ad:88:a5:d5:12:d3:3f:32:3d:04:58:cc:79:de:
19:e9:2a:c4:d6:ec:ed:e7:51:0d:7c:5c:3a:7d:64:32:67:12:
11:c4:da:0e:44:dd:7a:fc:96:32:d0:1e:77:40:f0:7a:b4:fb:
70:ab:a8:31:02:43:47:9c:b6:8a:0e:bc:e1:19:11:df:80:a9:
b8:18:2c:ad:a6:79:62:37:cb:e7:d4:b7:70:89:c3:c0:75:90:
f9:e7:54:ce:54:02:d3:41:70:02:31:7d:22:8e:93:90:5a:1d:
f8:14:e6:71:16:5d:59:ac:ae:23:62:e3:cc:f6:24:62:85:17:
c0:88:4c:cc:a9:40:7d:2a:54:b1:a6:74:69:f9:c4:ce:9e:fc:
bc:f2:69:5a:ac:b0:99:52:4f:f0:6e:76:f9:05:56:80:86:82:
9e:27:08:61:0a:2d:23:df:68:65:34:0e:c5:8b:b5:45:8c:bd:
1d:80:e2:95:f5:d6:0a:f7:29:b5:5a:fe:ca:b8:86:4f:5b:83:
fc:62:d3:ad:6b:46:ab:29:df:0b:56:76:0b:71:4b:ad:f6:84:
21:ac:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:46 2025 by rpki-client