Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
File: fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json)
Hash identifier: YnuclKPsPf0/peDE++Up5HWc5omo8yMDBYNdC3rk2jw=
Subject key identifier: EA:CE:DF:7E:69:E7:92:72:4B:BF:9D:C9:45:FB:33:63:29:09:85:E2
Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
Certificate issuer: /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Certificate serial: 019874F4864BBF66772218A197BD8AEEDEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 12:00:38 +0000
Manifest this update: Mon 04 Aug 2025 12:00:38 +0000
Manifest next update: Tue 05 Aug 2025 12:00:38 +0000
Files and hashes: 1: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: BOzC0HCBgTIeijZZJSD7CLW+NZgCFihnzRnG0FZAawc=)
2: gq5QbYLmKExu3_jiX8nvuPbkj4s.roa (hash: CUD+O9KICmmQQx1gdUSevF1umi42aYgBLH/jxWWsdAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:86:4b:bf:66:77:22:18:a1:97:bd:8a:ee:de:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Validity
Not Before: Aug 4 12:00:38 2025 GMT
Not After : Aug 5 12:00:38 2025 GMT
Subject: CN=eacedf7e69e792724bbf9dc945fb3363290985e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:e6:a4:e9:67:8c:9f:a2:b3:d3:d8:c2:fd:
0a:d1:a5:6f:4a:7b:2f:f8:c2:7c:69:a6:23:1a:99:
db:98:49:12:81:96:11:ad:86:44:02:23:b7:28:bb:
fd:6c:a5:8e:ad:52:42:91:70:62:f3:f9:46:f9:7b:
d8:45:99:a7:5c:2f:58:01:7b:4d:f6:f3:65:8a:53:
21:d8:07:5c:c2:54:56:d6:e6:4f:eb:ad:8e:83:19:
35:cb:01:6a:73:c4:9a:42:3f:db:e1:66:40:6c:d1:
28:e6:72:1a:05:59:45:c9:d0:4c:81:d2:4f:d1:64:
84:a5:98:22:06:1c:0e:98:c6:ab:28:5a:45:2d:60:
b4:5d:72:e5:f9:7f:3c:8a:7f:74:cb:59:5a:60:25:
f7:89:f7:bb:d9:44:e0:06:e5:55:73:b6:31:56:14:
3f:63:58:7f:4f:d1:0a:0e:cf:e4:45:b3:58:49:ad:
05:ff:52:94:0a:06:1d:4f:a5:4e:7b:9b:27:68:e6:
ba:c2:a3:34:6a:be:17:e2:df:ec:02:31:0d:0c:01:
72:71:dc:1a:f3:da:a5:44:5e:06:37:1a:3d:65:1d:
6a:37:92:8f:9b:ce:3e:7b:94:65:d9:e9:ac:3e:a4:
bd:60:50:4e:4c:90:59:40:f7:5c:a8:89:03:e0:04:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:DF:7E:69:E7:92:72:4B:BF:9D:C9:45:FB:33:63:29:09:85:E2
X509v3 Authority Key Identifier:
keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:83:d2:a8:0f:96:3e:17:a4:46:9a:f6:cc:74:29:a2:dd:e4:
ea:b0:d4:47:f8:96:03:7d:71:18:45:a0:4a:b0:62:63:e4:2b:
d4:c9:63:fb:81:df:c0:a2:2f:e0:88:be:1b:87:c8:ee:be:62:
0b:e6:39:5e:62:36:11:1f:52:d7:a1:69:3e:5d:90:2c:8b:ac:
f8:c0:59:6b:eb:be:d5:59:7b:63:b2:98:b9:21:91:a7:8a:14:
c6:83:ff:27:17:63:9d:d4:3d:2b:d1:25:c8:5d:6e:75:8c:15:
7e:18:bb:c6:16:d2:b8:ce:30:99:eb:e8:32:b8:b1:01:89:52:
a1:8a:03:46:8e:bb:a5:3a:83:74:03:ef:1a:0b:0a:6a:e6:60:
29:cc:e8:b8:f4:a4:34:25:d2:6a:42:90:b1:63:36:88:8e:80:
f4:cd:e8:6a:e5:cb:70:7b:23:bf:02:b7:c2:9a:03:57:b4:78:
cd:ed:bb:5a:ec:a8:e7:ec:f6:32:67:a3:8d:5f:dc:22:d1:6b:
b5:83:81:e4:15:ce:d0:b5:9f:81:0f:45:c9:d1:3f:c6:8e:3d:
15:ad:1a:dc:fa:37:95:54:72:c3:4f:63:ba:d2:d9:aa:bb:92:
9a:62:80:aa:9b:db:c7:ee:89:90:83:fc:af:c1:8c:00:7b:a2:
88:3e:55:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:01 2025 by rpki-client