Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier: BERa5yH08uk76Bn7VtAHEf18y4QJ0uo8cSnTCfjPxNk=
Subject key identifier: CF:0F:CB:FE:BF:5E:BB:C1:B7:35:B0:CE:08:08:2E:71:76:EE:E1:2F
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial: 019884683B2F155DBAA140CD4F468C7D4CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number: 04DB
Signing time: Thu 07 Aug 2025 12:01:20 +0000
Manifest this update: Thu 07 Aug 2025 12:01:20 +0000
Manifest next update: Fri 08 Aug 2025 12:01:20 +0000
Files and hashes: 1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=)
2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: UPGozFP7uMk4XiWgCD7EWpXqSLAcebW5bg6cxMOPG50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:68:3b:2f:15:5d:ba:a1:40:cd:4f:46:8c:7d:4c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
Validity
Not Before: Aug 7 12:01:20 2025 GMT
Not After : Aug 8 12:01:20 2025 GMT
Subject: CN=cf0fcbfebf5ebbc1b735b0ce08082e7176eee12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:d3:bc:4d:7d:d7:94:9d:ce:da:82:4b:50:
f6:61:88:1d:71:13:65:f1:58:5d:99:3d:bc:02:6c:
10:89:16:ee:ed:b6:ec:c4:0d:22:68:2c:f7:c6:2a:
f4:d9:0e:98:0b:de:b6:90:84:58:e5:29:6a:0f:34:
c6:71:f2:7a:67:d5:dd:fd:95:6e:28:40:44:f3:15:
a9:e6:95:2c:3f:08:1d:46:cb:32:fb:81:f2:a2:4d:
8e:34:98:08:f9:6e:43:87:37:12:9d:e0:b3:b0:65:
89:ae:74:8b:08:a1:32:38:27:49:36:ce:5f:24:25:
72:02:33:a1:3f:d9:37:75:13:3a:9d:17:24:fb:db:
da:93:76:d3:ab:e6:39:30:34:76:c2:a1:ac:74:76:
f1:23:26:6d:b3:47:8d:97:74:12:a4:e9:8b:23:11:
33:69:24:5f:31:e7:c0:53:29:8d:ca:a5:29:6e:7d:
c2:a1:9e:61:29:73:9a:59:42:7b:d5:bc:d4:0b:6c:
92:12:79:99:42:8b:ce:a7:bb:0d:f7:e2:a0:d1:84:
37:7a:bd:1c:ac:5d:e6:51:72:a4:31:a4:65:2a:bc:
6a:c2:7b:2c:8b:41:c1:9e:4e:d3:85:cd:c5:20:7d:
8b:67:73:c0:c7:2f:f5:09:78:d7:45:d9:8d:4d:44:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0F:CB:FE:BF:5E:BB:C1:B7:35:B0:CE:08:08:2E:71:76:EE:E1:2F
X509v3 Authority Key Identifier:
keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:14:db:94:9e:76:0f:1b:d6:33:4b:7a:da:41:14:59:5e:fd:
10:06:8a:45:3b:fe:8b:8b:68:96:5f:63:e4:55:41:c3:e8:bc:
6b:2f:94:09:68:fb:d9:79:3d:5b:fb:2c:02:bf:ff:cf:cc:26:
3c:0e:24:c1:02:4c:da:ea:80:38:61:31:c1:49:48:fa:7e:4b:
41:9b:77:10:fe:0d:02:03:ca:7e:4c:0a:1b:7a:e7:0a:23:09:
82:d4:5f:cb:87:69:a5:66:7e:fd:55:05:94:07:7a:03:79:c3:
7a:70:e7:8e:e8:29:56:fc:c6:3f:26:80:e4:52:b9:ab:ca:ae:
87:7e:c2:a3:56:be:69:dc:c2:32:11:9c:1f:b6:dc:07:c6:0b:
87:7d:58:46:e9:b8:b5:53:5a:65:2d:d3:79:cc:79:a5:34:53:
8f:85:4c:2b:c7:4b:25:72:a4:92:54:3e:1d:00:37:0a:41:36:
74:e0:5a:01:09:fb:74:ae:bc:5e:e7:da:b8:10:7a:2c:d5:32:
e8:8b:9f:d8:78:9c:36:f0:74:e7:b9:14:9e:77:9f:aa:b6:3e:
7a:d3:9c:37:1a:26:eb:17:f5:6d:0a:92:5f:d6:ef:c4:cf:07:
cd:dd:e4:59:05:30:ef:59:49:1e:87:19:89:33:7b:7e:6d:30:
6d:15:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:35:00 2025 by rpki-client