
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
File: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft (raw, json)
Hash identifier: 3ImVXxBIS0JLaNusOIZ/BraCzviAh+VpKaCoPClsxNU=
Subject key identifier: D6:DD:1A:77:CF:0B:A9:2E:E8:B9:A6:9F:DC:5C:C8:AC:AA:91:62:04
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 019872CFAA30F31EB147FCB8974720013D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 02:01:08 +0000
Manifest this update: Mon 04 Aug 2025 02:01:08 +0000
Manifest next update: Tue 05 Aug 2025 02:01:08 +0000
Files and hashes: 1: 3KUq_UtAlAJJlZN5IvjwrjZ47dM.roa (hash: bj9EPm/Zl9VNqii4xedVhy7HdLZBWsFZ4Eeye1T5m3A=)
2: W2BuG8RslZuNWC6TDHZNFeUTCEY.roa (hash: +B77DKlelA4p5jWRpiPjtjH8suz5E4rMKyxyDqtqToM=)
3: btWfzHoqqvCj7SwksK3sEa_GGss.roa (hash: 35nmBZjfYPLc1DjqtenJ/YTwHQyVVKy8N+n70T+IfxM=)
4: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl (hash: NvMkIqC1EdXVsepqZLEGgACW985l33HzNDjoCAM/1w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:aa:30:f3:1e:b1:47:fc:b8:97:47:20:01:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: Aug 4 02:01:08 2025 GMT
Not After : Aug 5 02:01:08 2025 GMT
Subject: CN=d6dd1a77cf0ba92ee8b9a69fdc5cc8acaa916204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:cd:fb:bb:f2:0b:d1:75:de:0e:2d:28:5b:
57:e0:64:8e:64:b1:0e:f4:89:cd:32:c8:cc:3c:cb:
b4:6c:a6:f2:bd:9d:f0:a9:05:1a:ec:3a:97:2a:aa:
0a:cc:79:8f:63:6e:5b:31:d9:99:91:eb:e6:81:9f:
0c:46:f2:dd:79:f2:12:a9:a0:a8:7c:f7:e9:4a:12:
5e:aa:9a:0f:99:30:89:04:e9:bd:55:1f:b2:a5:2e:
93:a0:cb:2e:42:10:f1:68:3c:46:ca:35:00:ab:15:
bf:ad:c8:13:31:01:6c:62:bb:49:0d:1c:c5:4a:c7:
b4:e0:1a:0f:8a:2e:28:48:7f:ae:69:7f:83:b9:aa:
95:38:b6:0a:24:9c:d0:d7:29:21:fc:98:e5:a3:46:
58:32:51:c1:bd:94:a9:90:09:dc:78:62:5f:40:d1:
84:5a:19:3b:17:d0:31:e3:04:ac:c7:d0:c3:4d:e0:
9f:31:9c:f9:5d:9a:8a:7f:1e:81:20:68:fe:29:c1:
8a:da:43:61:ba:a9:f5:d8:3b:bb:cd:28:9b:fb:4c:
a2:90:ab:c4:1c:f2:8d:ee:8f:ac:c5:80:69:9b:75:
61:f4:ae:57:ae:de:b0:a3:89:1a:99:ef:6e:da:9a:
7a:56:52:d7:9e:d0:db:b0:5b:73:7c:97:cb:85:3c:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:1A:77:CF:0B:A9:2E:E8:B9:A6:9F:DC:5C:C8:AC:AA:91:62:04
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b1:45:06:74:8e:63:6a:07:02:bb:1e:aa:f3:aa:07:93:a5:
b5:97:01:fb:c3:54:5f:94:e5:b1:f6:93:a7:5c:bc:20:53:05:
a2:e4:38:b7:22:28:05:16:b9:c5:e1:23:95:ec:0d:c4:18:ee:
b3:d1:34:28:08:6f:d9:68:60:c6:52:8b:1e:69:ec:c8:53:aa:
a4:6a:d8:53:e0:b1:35:93:f2:8e:89:4c:1a:8b:dd:64:ca:bc:
0e:e9:eb:fd:01:d6:ff:7f:2b:0b:b2:9c:cc:ab:22:ca:ab:8b:
d0:7d:ba:a4:2f:15:16:dc:25:ac:e4:54:cb:09:07:10:0d:37:
64:f6:0e:93:e6:70:b2:11:cf:c7:d8:9a:5f:b5:59:63:de:03:
68:14:0f:0d:8b:41:fe:f7:23:b0:e2:00:55:8d:b5:0e:5f:c0:
f1:92:55:16:54:9a:f6:39:5f:55:65:77:37:23:da:42:d7:52:
a6:9b:46:f3:f4:9e:61:d1:12:7a:22:47:61:39:2c:5c:a7:3c:
ad:43:96:6b:d2:4e:73:74:a3:40:5b:df:b3:6f:b8:65:a1:84:
32:7d:a2:52:f6:54:49:55:17:19:74:74:74:33:40:d9:5f:8e:
ae:54:2d:6b:e0:f0:f5:71:2b:f3:ec:0a:f8:e3:45:29:8c:b0:
dd:7f:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:53 2025 by rpki-client