Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: 7Y7NWGOcpPbMS7zvcpGC6O1vhLAnHMiFWen50+ZzxGs=
Subject key identifier: 70:96:5B:59:E5:F3:39:A9:6F:C5:27:5C:E3:C5:1A:6C:0C:DD:38:43
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 0198A0BA9E4DD4074A4B00F55400F5F6634A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 162D
Signing time: Wed 13 Aug 2025 00:00:41 +0000
Manifest this update: Wed 13 Aug 2025 00:00:41 +0000
Manifest next update: Thu 14 Aug 2025 00:00:41 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: IAky4Vn4kNzzB9oR4AvzDebISFZmMNWZeGsVlEjRDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:9e:4d:d4:07:4a:4b:00:f5:54:00:f5:f6:63:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Aug 13 00:00:41 2025 GMT
Not After : Aug 14 00:00:41 2025 GMT
Subject: CN=70965b59e5f339a96fc5275ce3c51a6c0cdd3843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:6e:92:a6:03:f3:b3:65:c7:91:38:2d:f8:
7c:60:41:17:87:17:c7:e1:98:6e:b4:18:10:9f:f4:
b6:25:5b:1c:db:8a:5a:27:1f:09:e3:b8:b9:00:e8:
ff:19:94:a4:ef:5a:40:07:5e:6f:0e:9e:b5:63:df:
91:96:f9:4b:80:9c:e3:92:92:23:ed:96:95:3d:9c:
f0:81:ed:19:a3:a6:38:7a:06:5b:e3:83:77:a1:84:
a4:bb:e0:8e:0c:d1:72:d5:3d:ba:f3:67:86:4b:00:
92:01:22:47:87:5e:d4:72:26:41:4d:1b:c6:9d:1d:
30:1f:7f:91:40:b6:61:c9:09:0b:f7:a8:da:85:ab:
d0:33:b3:76:07:12:ad:c4:60:ec:a2:51:96:b3:75:
0f:b0:96:a2:a8:0f:51:49:a8:e7:4a:84:8e:30:14:
12:84:0d:f0:dc:db:42:b4:c9:5d:18:00:e0:2f:7a:
22:23:5b:97:ef:ad:21:12:bb:67:53:91:85:56:9c:
d7:ba:a5:d6:50:64:6e:91:ad:5c:d6:91:75:37:53:
f3:c7:29:05:5f:44:e4:f8:65:fc:26:6b:a9:fb:06:
e8:6d:08:45:c5:34:85:eb:01:88:39:ad:f5:15:39:
a0:28:9b:a6:12:be:6a:74:07:70:fa:86:fe:8d:bd:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:5B:59:E5:F3:39:A9:6F:C5:27:5C:E3:C5:1A:6C:0C:DD:38:43
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f1:a4:27:d4:1e:5d:ea:5f:69:af:5a:61:e7:7a:ed:f5:9e:
c9:19:3b:fb:0e:3e:ac:89:e2:18:b1:f2:bd:a7:80:21:52:04:
59:07:ed:16:6b:f0:02:55:03:d8:71:54:f7:65:e7:b3:0e:60:
04:82:4b:6c:8b:a1:5c:34:4e:a2:ff:c9:f1:56:27:59:3c:e9:
30:24:71:71:b0:56:f9:ed:ef:57:70:d3:53:2c:8b:d9:37:6b:
2e:7f:50:49:aa:13:2d:17:d7:34:63:10:93:c5:1d:5f:56:ba:
8d:e3:09:6e:3e:a1:22:da:97:88:18:7b:a8:04:98:9a:ef:ac:
17:f6:fb:e8:71:c2:74:3a:73:9b:4d:ef:05:e2:a3:52:0f:e3:
e0:17:b6:a4:73:07:31:00:f3:4f:62:59:29:ad:9b:e7:8c:10:
eb:19:cf:be:4f:63:6e:55:d1:d6:19:f9:38:42:f1:ea:3c:11:
c8:1e:4b:ae:bd:fc:cf:97:1c:1b:b9:e8:0b:fe:b7:2a:90:e5:
b2:23:75:ff:ca:93:aa:ff:c2:0b:f9:a2:89:76:8d:ff:78:3a:
38:58:13:ef:09:c6:ff:3d:7f:fc:e6:4e:ee:f2:6d:3f:00:28:
3b:f3:8c:b6:7f:19:18:eb:40:ac:fb:1e:43:fd:75:d3:ac:c9:
53:2b:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:14 2025 by rpki-client