Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: VCornDfqkUzv710UKT1XN6CRRTYJzriK1xvgQAbEtA4=
Subject key identifier: D4:0D:06:F8:AD:F7:5E:4F:68:7E:59:0D:E3:83:01:04:98:28:6E:44
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 019890357120BAB90CF091390A57DF962F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 1095
Signing time: Sat 09 Aug 2025 19:01:18 +0000
Manifest this update: Sat 09 Aug 2025 19:01:18 +0000
Manifest next update: Sun 10 Aug 2025 19:01:18 +0000
Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: eHysOaycawyi8RN2+Zu07q8LkvpjbgcaMu7pIk5PI/Y=)
2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:71:20:ba:b9:0c:f0:91:39:0a:57:df:96:2f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Aug 9 19:01:18 2025 GMT
Not After : Aug 10 19:01:18 2025 GMT
Subject: CN=d40d06f8adf75e4f687e590de383010498286e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:49:1a:a5:7b:72:a8:32:90:ec:b3:ec:f2:
f7:b4:59:a5:cb:42:8e:1d:21:6f:6e:b3:63:2a:e0:
1a:48:c8:9e:e4:29:0f:4b:28:48:21:95:8a:ec:17:
61:96:c0:01:57:21:98:3b:a7:a0:ec:ca:f1:0c:75:
a9:69:9f:3f:1b:fe:20:7e:3d:fc:e2:d9:de:44:b5:
10:ff:65:de:9a:a0:32:ec:b0:61:69:d7:4c:38:f6:
e5:43:35:4d:f7:51:8e:42:52:f0:11:72:c5:e0:1b:
3b:d9:7a:67:5b:20:1e:73:8d:8a:b9:54:36:10:14:
bb:60:7a:05:88:2d:37:66:58:91:69:74:0c:f0:d9:
c4:cb:b0:14:14:84:66:78:78:d5:15:4f:3f:0b:69:
a1:13:8b:cf:e2:59:25:45:86:69:55:fc:55:4a:ef:
a9:9b:b7:6d:fd:fc:83:d8:79:37:43:0f:2f:c6:27:
6f:c4:10:4c:41:54:5f:88:bc:0d:fb:9a:af:a5:5e:
7d:b7:7f:20:da:17:b2:8d:9f:db:ab:6c:43:d5:72:
2d:f4:90:19:27:c7:4d:cf:ac:b3:36:fc:3e:2e:a5:
be:5d:82:14:a8:4a:3e:e5:b4:ed:34:98:11:16:92:
38:e0:ae:3d:03:ae:f5:87:1d:14:1e:99:a9:98:c6:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:06:F8:AD:F7:5E:4F:68:7E:59:0D:E3:83:01:04:98:28:6E:44
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:98:07:8a:73:cf:56:64:b0:e4:ef:c1:50:eb:01:cd:62:7d:
f8:27:48:88:72:52:16:71:47:fe:0b:84:f3:2e:af:11:66:b0:
46:ef:42:d1:b8:e2:38:65:74:86:b3:b2:a4:fb:41:51:84:98:
ca:58:7f:3f:38:82:d3:0c:1c:fc:33:4f:ae:ef:50:c6:24:bc:
e7:58:c8:28:8a:b9:dc:f3:09:ea:58:e6:67:82:2d:4c:96:d6:
ea:b6:97:67:60:4a:18:e2:9a:a6:2f:b9:29:9a:40:2e:87:11:
aa:4f:50:78:58:fa:60:96:5d:ef:8e:4b:c8:43:81:ef:ef:a2:
6c:bd:b0:c4:6e:a7:9e:62:bb:03:75:22:02:a8:f8:2e:04:43:
17:0f:a6:83:82:dd:73:82:0f:42:6a:a1:b3:85:cc:22:e9:80:
b6:45:63:4f:ee:b3:bc:a7:53:f8:21:f9:1a:7f:f4:87:b4:40:
49:60:46:bc:d3:b9:56:28:c9:e1:60:93:ba:8f:0a:f7:a7:89:
14:3e:9d:84:d7:1a:8c:b3:20:02:a8:5d:dc:6a:85:9f:1b:07:
65:15:a6:8e:e0:49:3e:ba:e0:78:63:fe:17:21:7f:12:2d:ec:
e8:b5:42:69:1f:ef:22:af:ce:cb:38:7b:60:be:89:2b:70:75:
53:6b:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:40 2025 by rpki-client