Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier: PMVH+DinZevRofqfjf55hAwfT+yLx7521ccBgPdqErY=
Subject key identifier: 6F:F4:2B:A7:40:E5:92:8E:4B:01:DA:2C:87:C3:68:59:1C:30:FB:1A
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 019893DAADFBDB26812A5C72C3F139C22BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 12:00:38 +0000
Manifest this update: Sun 10 Aug 2025 12:00:38 +0000
Manifest next update: Mon 11 Aug 2025 12:00:38 +0000
Files and hashes: 1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=)
2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: fHFYJzqSQrs2AAY1m6e1Edd3UWPTVha9HLVR1KsJwWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:ad:fb:db:26:81:2a:5c:72:c3:f1:39:c2:2b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Aug 10 12:00:38 2025 GMT
Not After : Aug 11 12:00:38 2025 GMT
Subject: CN=6ff42ba740e5928e4b01da2c87c368591c30fb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:57:3b:11:5f:21:a2:7e:a8:29:f2:89:b0:
b2:6f:72:00:ac:7b:90:3c:9a:a6:91:03:ac:8a:84:
33:b5:94:df:d4:ba:21:ab:fa:bf:08:51:1f:41:0c:
25:84:13:1f:0e:29:e4:a5:e5:e3:94:9b:a1:6d:2a:
00:5c:92:7a:71:57:63:a7:84:e6:9c:62:e4:c8:6d:
df:81:05:8e:88:27:17:98:f9:83:44:9f:df:64:e7:
25:97:c3:5b:90:71:95:72:4a:c1:a0:15:a4:63:36:
32:8a:58:4e:cd:1c:c3:9b:dd:44:63:57:00:fd:83:
19:4a:7f:92:95:4b:47:68:db:5a:4c:15:a6:58:22:
ef:55:c8:28:58:eb:e7:09:96:f4:c5:44:1b:d0:0d:
04:67:ca:fc:8f:64:c0:df:99:cb:22:45:a6:72:eb:
06:95:8d:a9:24:d5:98:df:3e:02:80:fd:e7:18:e3:
8d:94:d2:73:a2:88:0f:ab:37:ae:db:31:f9:87:7f:
b5:35:15:91:d7:22:fc:3f:33:76:7a:d9:23:12:79:
1f:0c:4c:d2:19:e4:f0:29:34:1f:3d:a2:5e:66:21:
ce:c2:0c:40:60:78:83:c4:c0:3e:63:f6:69:5a:2b:
5a:70:03:52:61:d0:35:21:b8:c7:a1:de:67:1a:ce:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F4:2B:A7:40:E5:92:8E:4B:01:DA:2C:87:C3:68:59:1C:30:FB:1A
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a4:41:f1:d5:be:e2:35:78:e3:c2:f8:28:04:9f:bd:d9:8c:
02:57:48:22:e4:03:76:4f:d9:6c:74:a7:86:f0:40:3d:87:a3:
7e:cc:81:08:c5:de:6d:e1:4a:14:e4:cc:3d:82:64:1d:c4:78:
f7:c7:5e:2e:84:ef:67:02:10:72:97:0b:a7:51:cc:4f:b9:ac:
96:e8:62:39:a4:35:14:24:77:af:a2:a2:fd:2f:c6:5f:65:82:
30:9d:97:a1:5c:ac:5d:7d:b6:28:99:15:84:cb:a0:c5:ae:46:
15:d3:06:48:f8:a0:09:4a:bf:c8:16:0a:86:95:64:f0:98:e1:
56:20:2a:78:6f:1c:f2:28:57:e9:02:55:50:27:35:62:68:d5:
03:77:6b:6e:56:67:fe:af:09:36:95:4b:61:49:80:a3:44:7c:
94:3c:e2:70:d6:e4:d4:cd:ce:49:46:f4:e9:b7:bb:87:16:12:
13:35:e1:f5:b8:cd:51:3e:98:52:bf:ad:a0:dd:80:73:fd:6a:
61:11:ff:47:9c:b0:e4:37:93:ff:4c:6a:5b:18:f1:c7:51:86:
ab:f0:cc:eb:a1:ef:e4:67:75:47:27:69:e8:62:9b:52:97:58:
3e:63:1c:eb:b7:66:1e:f4:dc:6e:48:21:4a:3a:91:a9:12:c5:
f9:8d:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:01:46 2025 by rpki-client