Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: fMuAy7Rz/5ajnMD41SC2YeY2NsyKx9/LJqxUOWXsX3M=
Subject key identifier: CE:CB:90:62:25:C5:68:91:37:95:29:F9:E3:D0:CA:B5:3E:15:FA:8F
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 0198733D033BA04F0FE63DDDC116F790338D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 04:00:35 +0000
Manifest this update: Mon 04 Aug 2025 04:00:35 +0000
Manifest next update: Tue 05 Aug 2025 04:00:35 +0000
Files and hashes: 1: Vh9zdU6UPXBw1wsGMQVn_pjjotw.roa (hash: RHQ7Mk9Ul2niP+vY1weS4xjGH8dOqLq3Efjab5Bc1HU=)
2: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: uIHBPWAYBgmz+EdR8ujRRSWsI3I3lAhByQZQmmhfgb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:03:3b:a0:4f:0f:e6:3d:dd:c1:16:f7:90:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Aug 4 04:00:35 2025 GMT
Not After : Aug 5 04:00:35 2025 GMT
Subject: CN=cecb906225c56891379529f9e3d0cab53e15fa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:22:9b:c9:d0:ca:ba:5a:e3:37:89:31:23:
b7:30:8d:6e:1f:b2:aa:af:cc:1b:d5:96:af:0b:9e:
38:6b:bd:e0:ce:73:4a:1d:eb:a0:b9:44:ee:ff:c0:
cc:5f:ec:af:ba:99:8a:27:1b:49:93:c5:5e:7a:fa:
a2:fb:1a:79:b1:b0:bd:67:4e:88:c8:28:86:f3:4d:
30:bd:ca:2f:ab:60:d8:71:5d:2d:7b:da:fe:48:79:
86:6f:dc:79:05:62:09:ca:4c:43:18:28:7b:fe:b4:
ce:49:55:8b:ae:2e:db:af:8f:67:fb:1b:f9:26:27:
5d:6e:64:84:ba:67:88:fd:80:3e:43:64:9c:0a:c4:
41:af:90:f3:3b:d9:f7:ab:a5:ab:1a:99:8f:b8:ad:
11:61:fd:f5:51:60:a7:ae:b9:8b:34:9f:62:bc:eb:
3c:c2:5b:c8:60:e0:45:aa:3c:62:e4:2f:6b:77:b7:
50:51:00:23:1b:f3:d5:7e:15:8e:4b:41:eb:16:1f:
8e:5b:91:9f:d9:23:d3:2c:1c:40:d3:63:34:b4:73:
e8:4e:c4:af:a3:69:e4:37:ea:80:17:3a:e7:54:2d:
6a:cd:ee:7d:45:a8:59:29:f4:46:24:d2:99:79:6b:
49:37:23:16:c9:28:13:1e:a3:54:1f:b9:62:b5:74:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CB:90:62:25:C5:68:91:37:95:29:F9:E3:D0:CA:B5:3E:15:FA:8F
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:f8:31:6e:c3:80:a4:29:b6:e4:6b:d5:9c:30:cb:5e:e2:
9e:13:ca:b6:03:77:e8:09:ee:7d:27:7f:f0:c1:bd:e4:9c:31:
76:e1:7a:c2:43:18:f8:23:07:68:98:f7:ae:49:40:bf:41:75:
29:ac:5b:22:41:1e:f6:f7:de:4e:45:e6:af:0a:c6:3d:10:ee:
f6:fe:bc:0a:74:6d:67:1b:6e:14:f5:d2:ec:ef:7e:41:a7:aa:
8f:14:be:bd:e4:32:81:f6:c7:fd:b7:d5:23:84:51:d5:b6:5d:
f0:2b:a1:73:07:bb:15:27:24:c6:ac:c8:65:cd:c1:59:cd:13:
c8:cc:f6:dc:c9:c2:de:b2:01:1a:c8:ba:d3:35:e9:b0:7e:c9:
40:3c:2d:e5:ba:39:f5:80:de:6f:96:0c:1a:74:d6:5c:c1:e3:
65:5e:42:f6:91:3f:e4:08:1c:e9:e1:71:5c:de:aa:0d:ac:db:
f4:64:49:00:d4:5e:8d:7c:16:f5:e2:dd:6b:45:42:ba:71:8f:
b5:79:52:7d:b5:20:e0:8f:20:93:4b:3b:23:37:f7:9a:9d:12:
23:9c:ea:79:0f:c6:e6:d7:4c:f8:4a:ef:f1:55:af:11:5e:78:
9a:9a:a4:ac:7b:f8:54:02:31:71:46:2a:82:1c:75:44:54:40:
70:64:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:02 2025 by rpki-client