Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File: FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier: Tjem4O5O9ZryMMlqentpCa/MCQP8ZTco/1eNJa5JL6k=
Subject key identifier: E1:D9:F7:C4:15:B3:7E:A6:46:C1:D1:CE:BB:5E:4B:D5:8F:F5:7F:84
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial: 01987E9C680FF63DE7900FE837941B1F94F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number: 044A
Signing time: Wed 06 Aug 2025 09:00:36 +0000
Manifest this update: Wed 06 Aug 2025 09:00:36 +0000
Manifest next update: Thu 07 Aug 2025 09:00:36 +0000
Files and hashes: 1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: Yb+nnz62zEv0gKUfssl053hiMugJSN/DoYhGXLda94I=)
2: l3kIS-H41zLKlD417TNejtnJFY4.roa (hash: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:68:0f:f6:3d:e7:90:0f:e8:37:94:1b:1f:94:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Validity
Not Before: Aug 6 09:00:36 2025 GMT
Not After : Aug 7 09:00:36 2025 GMT
Subject: CN=e1d9f7c415b37ea646c1d1cebb5e4bd58ff57f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:26:8d:cd:97:87:13:ca:a2:57:fd:9f:01:
2f:8d:1d:48:00:3b:47:e0:b5:a5:97:a4:93:99:2e:
d7:0a:1a:08:4f:a9:66:d8:78:87:9a:ce:c9:48:a7:
bd:2a:95:52:96:94:fa:60:4d:2c:47:18:62:45:56:
56:fa:c1:12:2f:94:44:e2:c7:b4:be:3f:3f:21:89:
e7:ad:ae:ef:6a:88:fd:0f:76:ea:3f:1e:4d:f3:9e:
13:c8:69:49:8f:15:51:a7:6b:29:05:ad:b1:8e:02:
c3:8a:d3:80:fa:db:d5:f9:97:9c:c2:f9:88:d1:91:
10:4a:e9:6b:93:ab:ac:b0:23:99:0a:1b:3a:c8:0e:
3d:22:1f:2e:ee:4c:f0:3d:c9:84:07:05:f1:a5:81:
70:2a:a1:e8:91:5a:77:97:8b:a1:12:92:14:61:f2:
1c:9f:42:b9:c2:c6:87:2b:61:9c:89:dc:c8:42:3c:
9c:a6:ae:f8:50:a6:0c:58:1e:52:26:d5:2c:eb:d7:
30:22:c1:4a:c2:a8:0f:1a:8b:4f:98:1c:27:c8:df:
d0:fd:7c:35:8e:fe:34:1d:bc:19:eb:08:a5:cc:05:
b5:c0:8f:f8:ce:1f:7b:04:d8:c3:33:a4:33:c2:26:
a1:2e:7e:4d:4d:68:ce:1e:cc:7f:bd:cf:31:ad:c0:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D9:F7:C4:15:B3:7E:A6:46:C1:D1:CE:BB:5E:4B:D5:8F:F5:7F:84
X509v3 Authority Key Identifier:
keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:de:c2:70:54:63:fe:a9:69:4a:3c:e4:1c:ad:6a:2d:40:1e:
89:f4:a5:df:9e:a1:98:1a:4c:07:d4:38:36:ff:f8:d9:4a:44:
d0:55:9e:44:05:71:16:0a:95:67:62:e3:91:91:64:c2:b9:d2:
db:a7:95:c5:ab:60:89:f5:74:20:10:28:23:3a:20:ba:f3:a8:
1e:0f:fe:95:be:87:1e:3d:d3:15:18:76:94:25:9f:d6:fa:ef:
4f:24:51:99:43:7e:db:2c:e3:64:b1:f3:f0:f8:98:8c:12:3a:
6a:4f:06:a0:5f:dc:95:29:7e:69:c4:22:58:1c:89:03:52:ab:
9a:5e:be:0a:ea:ae:78:56:f5:ad:63:39:27:82:6f:a6:d1:40:
cf:eb:b0:f1:5f:03:b7:4b:09:4d:1c:98:22:ac:67:b2:62:8f:
51:10:50:0c:b6:cd:46:21:bb:6c:ac:b2:60:ea:24:15:1d:44:
dd:62:ab:40:ec:f1:1e:ec:cf:4f:85:31:a1:f4:5c:d6:c1:86:
41:cf:5d:86:7d:39:a5:a8:1a:08:42:fe:a6:6e:69:63:db:e7:
8c:66:34:29:36:e2:1d:4f:8e:54:a7:c7:13:a6:6e:46:e4:33:
2f:81:2c:84:13:3c:0a:11:60:d7:44:ae:90:a1:49:7a:5c:1f:
dd:10:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:32 2025 by rpki-client