Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: 96bC3tNAKwrjqaQLgKWWbfv69aakzhB5yYVodJYcctM=
Subject key identifier: 6F:EC:D5:CD:F6:98:26:AC:15:56:B7:E3:D4:3F:26:61:A3:ED:D3:64
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 01987FE7104D160BC9204C33D181E9020338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 15:01:46 +0000
Manifest this update: Wed 06 Aug 2025 15:01:46 +0000
Manifest next update: Thu 07 Aug 2025 15:01:46 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: gqZ/ugzCBZ2/dHkUpq9xpw6pZ0G5uiVK6i3v5xNErq4=)
2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e7:10:4d:16:0b:c9:20:4c:33:d1:81:e9:02:03:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Aug 6 15:01:46 2025 GMT
Not After : Aug 7 15:01:46 2025 GMT
Subject: CN=6fecd5cdf69826ac1556b7e3d43f2661a3edd364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:77:df:58:ec:42:af:8f:6b:b2:9a:a2:d6:
34:a0:98:73:bc:a6:c4:1f:bd:dd:7c:38:91:af:ec:
f7:88:f5:4f:be:1f:63:37:fb:20:4c:1e:09:c7:2a:
0d:37:fa:58:1e:91:2c:9c:7f:f0:5d:42:f7:24:93:
77:30:e3:6e:f8:a7:7a:e1:18:de:9a:d8:cc:e6:86:
89:71:59:ba:2a:dc:33:81:5d:a7:fd:d8:ff:98:81:
32:82:c6:aa:54:8b:d2:7f:94:b6:0f:98:48:fa:e2:
f7:fb:80:67:bf:51:b3:aa:e3:ab:e6:6c:e4:98:65:
25:f8:bf:c6:92:36:c5:4a:2c:17:a0:9e:a6:6a:b2:
fc:c4:58:f3:ae:f6:5e:b6:0f:21:82:48:d1:47:a8:
d8:af:1b:58:06:5a:d4:70:b5:7e:71:b1:db:a2:e3:
ac:1a:d3:54:f1:60:7c:a1:9d:31:28:e6:f3:a4:3a:
19:c8:76:24:63:11:22:f2:f2:d5:9f:03:c4:cc:8a:
fb:25:0d:37:91:60:6f:a5:86:8a:ac:41:cf:f2:a1:
e9:16:5a:c6:35:ca:19:dc:d7:ff:c0:ff:6a:f3:a5:
9f:ab:4e:d7:a5:47:c0:00:2f:01:05:43:b0:9f:97:
fe:3c:42:e9:69:69:f0:81:88:0b:3f:c2:be:72:61:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:D5:CD:F6:98:26:AC:15:56:B7:E3:D4:3F:26:61:A3:ED:D3:64
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:19:31:ec:9f:4a:0e:3d:97:4b:7f:cf:a5:c3:25:e2:ad:28:
b6:5a:95:69:26:55:ed:76:da:6b:8e:aa:79:a7:1e:ea:48:18:
a0:40:cb:f6:73:14:c6:f5:8b:c2:5a:31:53:2b:50:1c:a8:af:
45:af:9e:2e:2a:aa:dd:49:3f:22:c2:bf:61:bd:74:99:5f:af:
06:73:9a:ec:f7:36:96:79:52:44:28:df:87:48:9a:41:0a:0b:
64:46:6e:5f:bf:34:11:ca:b3:69:e4:6b:7a:1b:6f:ed:70:c8:
ad:33:15:bb:3f:77:74:25:e2:7c:94:7a:72:a1:84:b1:bc:2c:
5b:72:6b:ea:70:d1:0c:bc:68:1a:ba:a1:f4:89:82:d9:2b:74:
c7:98:09:49:c5:37:9f:a7:31:75:b5:95:65:21:4f:32:e8:4b:
73:94:8c:09:51:51:e1:d7:9f:48:dd:28:95:48:0f:91:11:6b:
bb:81:4d:39:dd:d5:80:66:7e:76:b1:20:f1:b4:ed:1a:08:ed:
5e:98:e1:10:0f:bd:c4:77:76:26:aa:a2:8c:51:7c:ac:ba:08:
b8:19:dc:8a:72:95:3c:cd:29:bb:ca:b7:4f:cf:58:ff:cc:9c:
e7:87:1a:6c:d1:0b:38:4d:a2:09:ee:c9:f0:84:00:39:50:2c:
f7:2b:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:27:05 2025 by rpki-client