Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File: fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier: HBsQRfDkJKoW7TWjnbkQi7ddeOPp2ja2lAJrcka3sbs=
Subject key identifier: D4:A3:D3:09:67:63:06:AF:4E:71:16:EC:06:55:A6:1E:84:7D:4A:D6
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 019873743494C6EFBAF6027459E99E8F5CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number: 076D
Signing time: Mon 04 Aug 2025 05:00:52 +0000
Manifest this update: Mon 04 Aug 2025 05:00:52 +0000
Manifest next update: Tue 05 Aug 2025 05:00:52 +0000
Files and hashes: 1: fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa (hash: frVihHDK+8j5US3CUXtBypHsqdv++cToSbTh8ao+mTk=)
2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: 5QOrnrlPtoS1+Dqp9+jQ968s8qd1otYUc0VkjTAmrg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:34:94:c6:ef:ba:f6:02:74:59:e9:9e:8f:5c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Aug 4 05:00:52 2025 GMT
Not After : Aug 5 05:00:52 2025 GMT
Subject: CN=d4a3d309676306af4e7116ec0655a61e847d4ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:bb:a5:64:cc:c4:7b:cb:ad:84:e5:ca:65:
68:6f:fa:ad:b9:fa:bc:3a:7d:5d:6c:dc:b3:ce:93:
2c:2e:5d:7c:62:1c:d4:09:63:12:82:3e:64:c7:d8:
5c:ae:cc:e5:ac:ba:c9:c0:da:f1:64:1c:6b:85:92:
9c:52:43:21:e1:d2:e6:6b:29:a0:17:ee:8d:b7:8a:
f7:56:26:00:b0:dc:90:c5:78:8b:e8:c9:78:a2:90:
8e:74:21:6b:f6:2e:c6:26:28:63:b5:9d:d5:8d:9c:
4d:4f:3f:a1:be:08:da:8f:14:6e:00:45:23:5e:d6:
a5:58:ee:79:d9:83:4c:01:21:6b:40:3c:e6:9a:38:
f7:85:7b:f0:a3:e1:2b:f5:29:69:02:49:bc:18:9f:
d4:68:a8:8b:90:6b:82:c3:fe:72:e8:23:d7:aa:49:
a6:8a:6d:ef:47:8f:97:c2:0f:92:90:41:b8:c4:57:
da:b2:c4:8b:6e:8a:bf:ca:37:a0:f5:5d:e3:09:e3:
b8:f1:3e:e0:27:bc:25:da:93:2a:b6:c7:e4:e9:33:
22:f6:a0:16:3d:b2:3a:d6:20:f9:23:78:5f:1a:11:
6f:4e:ea:e6:69:fb:1f:0b:50:f6:0f:52:c8:a3:13:
a4:2d:37:65:f5:ca:8f:b3:df:48:1b:ed:0a:b8:62:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A3:D3:09:67:63:06:AF:4E:71:16:EC:06:55:A6:1E:84:7D:4A:D6
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3c:1a:37:d2:cf:e7:90:ee:0b:b8:be:09:77:5f:8d:27:0f:
4e:a3:cf:e5:06:18:74:85:5f:65:4c:cf:d4:25:0c:f9:6c:f6:
5c:c6:c4:b3:35:86:75:fe:94:dc:77:53:3f:35:e9:12:25:a6:
0c:40:50:45:e0:ec:24:a6:8d:77:c4:e8:da:f4:4e:5b:53:83:
dd:9a:63:93:87:8d:be:c7:fb:48:32:8d:b7:75:a9:82:43:c1:
64:b2:7c:29:dc:4c:c8:76:55:ea:70:27:fe:ce:1b:4e:19:e8:
80:54:37:fe:51:3e:71:4e:a4:46:a3:a3:a6:b4:5d:9f:8f:b4:
44:88:01:11:0a:d6:3d:73:78:b0:59:31:6c:23:71:6d:f7:43:
1d:25:60:19:b0:ec:c7:1d:bf:7d:14:08:9c:09:58:c5:f1:b9:
5e:00:fb:0b:53:ac:fd:51:ca:c3:c6:f8:89:98:03:5e:3e:97:
f9:59:f3:d1:9e:12:47:0f:a9:d9:da:f8:3d:24:c1:06:1b:0f:
7a:7b:0a:7e:39:a5:43:1d:5e:7f:b2:51:b9:d6:69:5d:42:2a:
48:ce:c0:41:7a:87:3e:ff:27:ca:0d:65:2a:d4:83:4b:50:ff:
5f:19:80:4f:c1:c5:55:88:e6:01:4f:b7:c9:ee:6c:2e:98:06:
49:15:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:03 2025 by rpki-client