Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: 7/UiBzQ2pWZob2O15hXJ3YEsyUeqLmSdfHNRcz/P48M=
Subject key identifier: E9:D0:1B:40:4D:13:14:1F:85:D1:CB:4C:BA:37:8A:C9:7A:46:35:5A
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 019890D99EFE357CD2858596F3A9A17CF5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 0F9B
Signing time: Sat 09 Aug 2025 22:00:37 +0000
Manifest this update: Sat 09 Aug 2025 22:00:37 +0000
Manifest next update: Sun 10 Aug 2025 22:00:37 +0000
Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=)
2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: Tf43CuG5O7h4zO1wdieNPOWH+Q22/heR6Gh8im/QbSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:9e:fe:35:7c:d2:85:85:96:f3:a9:a1:7c:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Aug 9 22:00:37 2025 GMT
Not After : Aug 10 22:00:37 2025 GMT
Subject: CN=e9d01b404d13141f85d1cb4cba378ac97a46355a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:6b:17:82:9f:14:d5:c3:a6:cc:a0:8a:b6:
53:b9:28:4f:c1:d1:c3:4c:3e:1e:a5:8c:25:7d:71:
06:ff:54:6e:f4:7c:83:1b:ba:0c:bb:ab:9b:71:15:
3e:ad:68:c2:80:ca:ac:80:8e:a2:cb:09:7e:91:c2:
2d:a7:6d:c1:7f:9b:2c:38:78:c0:fe:1f:02:b0:50:
ae:9d:3e:52:27:43:d1:d8:62:80:b3:c9:d1:39:09:
0c:35:3b:c4:e5:9b:21:8d:d0:b2:3e:d5:a2:57:76:
c8:40:32:e7:e9:fb:d1:d7:f2:90:f1:f1:56:ae:b7:
5c:38:78:cd:3b:75:f9:73:f6:29:c0:c8:f4:c1:b9:
1f:f8:09:9d:5c:ac:05:2a:cf:30:a7:a1:73:59:d0:
78:bc:a7:51:a7:46:04:3e:15:34:e7:93:ab:93:5a:
54:0e:94:3c:3f:4a:20:f1:e3:4f:af:3c:57:16:45:
50:6d:ec:a7:9f:b2:27:9e:82:83:1f:c1:a1:fc:53:
63:c3:79:62:b1:6d:36:49:c6:84:e6:ac:96:f0:cb:
4e:f3:75:b2:cb:69:0f:3c:db:04:97:81:22:fd:43:
62:a6:22:6e:dd:ee:82:9b:be:e0:ce:bb:1d:71:0e:
74:5a:d0:d7:bb:e6:bb:10:3c:6c:45:f0:7b:7a:01:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D0:1B:40:4D:13:14:1F:85:D1:CB:4C:BA:37:8A:C9:7A:46:35:5A
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:02:a5:66:7b:ca:14:17:41:e2:f9:87:2f:d7:ff:81:cd:b9:
ef:0f:c2:c6:38:77:4c:60:d8:f1:77:cb:f5:0b:09:70:8b:cf:
4a:bd:5d:79:93:9d:c0:fd:b1:29:84:97:6b:ca:3b:27:d9:50:
dd:8a:20:55:06:c5:6f:b1:be:09:75:86:55:cb:60:8a:97:dc:
53:c5:33:14:b4:ec:64:ef:e4:cc:eb:fe:4a:eb:f9:75:b6:d9:
fc:ae:57:cf:03:35:15:6e:38:a0:27:40:e5:ee:13:a2:ef:80:
29:32:20:2d:c5:6b:72:4b:89:65:8c:d3:89:b7:a7:ab:17:f5:
79:c9:3e:f3:1a:9b:48:12:5e:99:ed:00:8a:67:0a:bd:b7:a2:
02:7d:6f:c8:9f:c1:46:49:d3:b9:28:e6:3d:ac:e8:a1:75:ab:
4a:53:48:0d:80:2e:97:88:46:70:56:e6:bb:c2:99:b2:74:50:
63:ea:22:b9:99:21:f9:c6:22:36:7b:f5:31:28:54:a2:4a:ad:
9e:f0:bf:cd:3e:eb:5d:a7:4c:cc:31:a3:3d:fc:fe:cc:b8:52:
a9:d5:43:7a:fd:f9:19:9a:71:3a:b8:86:3b:cb:ab:b9:36:6e:
0f:05:06:76:1b:6a:bc:95:7e:c1:db:1d:be:55:17:03:87:8b:
e6:f3:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:55 2025 by rpki-client