Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: 1ywT+xhtFgIXhlm0M7T6X8ch9OrQZglpV6iwKAOXpIk=
Subject key identifier: 4B:13:12:3B:BB:5C:71:DE:3C:EE:25:8F:80:B1:71:60:B0:2E:FB:17
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 0198733D338BE2B087020FD21012697BD907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0D69
Signing time: Mon 04 Aug 2025 04:00:47 +0000
Manifest this update: Mon 04 Aug 2025 04:00:47 +0000
Manifest next update: Tue 05 Aug 2025 04:00:47 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: eXm1nZkzbNFOf9c2LF86//eO7/+LPSvBH9fquaShTcc=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:33:8b:e2:b0:87:02:0f:d2:10:12:69:7b:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Aug 4 04:00:47 2025 GMT
Not After : Aug 5 04:00:47 2025 GMT
Subject: CN=4b13123bbb5c71de3cee258f80b17160b02efb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:66:4d:7c:de:c2:71:8e:59:ee:61:e4:cd:
54:30:19:92:76:77:b4:5f:6a:12:0a:75:2d:ed:a0:
a4:bd:97:b1:07:c1:a7:a9:be:89:ae:32:50:37:3a:
7a:36:56:98:0e:a5:64:7d:a2:5a:d8:50:7f:78:d1:
08:57:88:09:92:8a:c7:73:5c:8a:7b:0c:17:06:bf:
f8:7d:a8:4f:65:70:51:88:8c:ba:a7:84:3a:76:27:
71:ff:b0:76:a5:89:d2:fa:a5:29:d4:96:f5:3a:0d:
e8:4f:85:ac:96:59:83:df:12:ba:9a:94:c5:61:48:
36:d3:00:af:56:f2:20:b0:ac:44:c2:6b:28:db:7d:
9d:fb:2d:37:83:de:a8:f3:49:30:a6:bd:65:26:5a:
97:c7:6d:ae:c1:c9:03:ee:90:38:00:a6:0b:d5:00:
41:69:7d:6f:bb:4d:91:d9:95:4c:d6:f3:9f:00:27:
31:97:f8:c8:60:c8:70:d7:21:8e:24:0a:3f:f1:d6:
aa:ee:0c:b1:99:2a:2a:de:60:1c:8e:07:2a:4d:a9:
7f:61:47:56:d8:f2:bf:6c:74:ff:03:f2:07:56:44:
45:a3:b1:0b:93:91:21:21:01:47:c8:0c:b4:7e:75:
e8:3f:e7:1e:25:26:ed:00:f8:51:3a:da:ce:2d:90:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:13:12:3B:BB:5C:71:DE:3C:EE:25:8F:80:B1:71:60:B0:2E:FB:17
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:69:4f:32:5b:d7:4e:8c:8c:20:b5:1f:80:fa:97:9a:ae:ab:
69:43:69:7b:0e:62:9d:62:dd:b0:9e:59:5f:b0:6d:93:4d:a4:
43:ab:05:e9:ec:5e:e2:d0:c3:37:6d:a0:ae:57:27:69:34:02:
9a:bb:79:e8:a9:58:e5:f2:86:67:ba:5d:27:3d:9b:7c:b4:42:
19:ab:d0:ed:a6:a5:ce:fe:bc:69:dc:a8:c4:df:47:da:64:4b:
d9:85:6b:17:94:ea:f6:5d:e7:ff:16:7f:fb:46:90:ab:88:29:
97:b7:a6:31:69:4a:18:9a:73:77:ed:6d:29:70:9c:7a:1a:c8:
8d:0b:18:ca:b4:72:98:d5:be:9b:f9:89:12:f0:2e:41:98:ca:
09:0a:42:c9:96:01:e6:4d:37:ce:5a:3d:9a:e2:cf:d6:3c:5d:
aa:b6:5d:c7:05:7c:24:7a:a6:10:45:ee:63:e2:c2:b5:aa:7f:
24:a6:d3:15:18:f2:d5:b5:be:a9:ff:21:87:90:dc:ad:4e:81:
df:80:4f:7b:99:cf:a6:2f:dd:17:1f:f6:28:83:73:39:7d:91:
1a:39:76:97:49:60:40:55:70:8e:1d:76:5a:6e:02:f8:29:1d:
6c:fc:08:3b:b8:11:06:dd:21:f3:f7:72:20:fb:69:f5:07:53:
f6:b2:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:28 2025 by rpki-client