Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier: NgDGwlpzz91tKWY7svKnkQvJY542njTZ9lMDe8yOJsU=
Subject key identifier: 46:04:FE:91:34:56:C5:B0:F3:5B:8D:16:18:4A:CA:E3:66:3D:C8:5F
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 01988EED3D21B3776C7AD475C60F8308BE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number: 12FA
Signing time: Sat 09 Aug 2025 13:02:48 +0000
Manifest this update: Sat 09 Aug 2025 13:02:48 +0000
Manifest next update: Sun 10 Aug 2025 13:02:48 +0000
Files and hashes: 1: 9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa (hash: bC7IXHx63H7lpbQ+lP0qMuIBLR6TNwS7YJHQvmLzCRc=)
2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: 2fOJvHqnj/DlY2CIOuQIZSbYf5vCVR+kFxdeclW47o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:3d:21:b3:77:6c:7a:d4:75:c6:0f:83:08:be:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Aug 9 13:02:48 2025 GMT
Not After : Aug 10 13:02:48 2025 GMT
Subject: CN=4604fe913456c5b0f35b8d16184acae3663dc85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:73:ef:ad:a9:5f:1b:52:f8:0f:4c:ca:e1:
cf:20:41:fa:28:33:bd:26:ce:85:87:9d:6c:97:fa:
9f:c2:ee:a0:b0:28:47:9d:98:8c:80:d0:da:16:db:
b5:cc:84:c4:d2:fc:96:c9:cd:60:27:f9:7e:d2:d8:
53:ca:3c:29:b4:58:20:9b:2d:30:ff:e3:bb:53:59:
05:c9:4f:3a:32:df:c0:81:91:73:cf:2d:87:fb:0a:
48:7e:94:76:2f:0a:b4:96:56:59:a3:45:4a:f7:97:
d9:18:67:a2:26:19:83:3b:1a:56:ae:d6:33:5e:8e:
f3:4c:dc:6a:05:d6:8c:e2:1c:bc:6a:19:4a:6a:0a:
f1:79:2a:3d:37:f2:37:1c:28:73:41:31:93:35:a1:
bf:a7:1a:6f:dd:42:19:ce:41:0e:e9:84:15:7f:f6:
48:7d:b7:24:67:ad:9b:dd:42:52:40:3f:74:5b:35:
29:7a:81:61:64:c3:24:a8:91:2a:67:ce:81:2d:a2:
03:ba:24:12:2c:c9:f6:97:6c:af:eb:34:14:16:21:
29:4b:0a:36:b4:68:06:ce:e2:c5:74:39:de:ab:85:
1c:99:14:47:e1:83:7a:33:3b:0e:1b:a9:fa:a6:b3:
4b:73:ab:81:61:19:1f:e6:5e:1e:0c:b7:7b:75:0d:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:04:FE:91:34:56:C5:B0:F3:5B:8D:16:18:4A:CA:E3:66:3D:C8:5F
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:fe:7f:85:e6:8c:40:66:2f:99:5c:b5:79:1b:b9:d3:5f:
be:34:68:29:ca:19:23:12:c6:d9:aa:45:73:66:aa:a0:65:55:
2c:42:61:da:9f:b6:12:6c:e6:e7:41:44:1e:28:bc:f7:12:b6:
75:5f:d1:84:82:e5:c7:23:2c:13:f8:d3:85:be:ed:2a:f4:70:
8f:69:5a:7d:8d:37:73:df:cd:86:a6:f2:6f:e7:72:a9:c4:70:
81:87:6b:99:bb:e8:8a:2d:7f:49:0d:be:0b:02:e5:91:07:5f:
e8:ec:13:23:63:31:56:ff:c2:66:72:e6:06:50:04:07:c6:b6:
9a:2b:92:59:a8:4a:07:f7:d6:d0:d7:8d:ed:3d:0d:cf:ea:5e:
c8:a8:27:46:57:d8:58:cc:9f:4e:4a:0e:25:50:ce:49:cd:40:
ca:c6:be:a1:ab:01:ab:ca:3e:08:b2:46:66:1f:2d:0d:eb:d8:
53:f8:3f:75:a4:9e:77:9c:55:58:d1:21:f3:5d:8a:df:4c:67:
56:b3:af:9a:b4:23:c9:45:54:2d:25:da:7d:75:cf:e3:ef:7d:
18:15:a6:cd:88:d9:fb:1d:d2:5d:1e:68:ed:ef:f1:2e:8f:24:
a9:63:5d:18:74:f5:b3:7f:b6:b5:0e:31:f8:04:99:b5:22:36:
7c:ac:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:16 2025 by rpki-client