Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier: Nlcsjk5jJOMOmBk6Tqp3scUXgp0NMzXS782SreHh2Tg=
Subject key identifier: 29:A3:B0:EE:C0:25:72:C0:9E:1E:14:B3:E4:EC:06:87:54:53:A1:1B
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 0198D705DA1EA2167F887A1E28BD906EB67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number: 05B8
Signing time: Sat 23 Aug 2025 13:02:21 +0000
Manifest this update: Sat 23 Aug 2025 13:02:21 +0000
Manifest next update: Sun 24 Aug 2025 13:02:21 +0000
Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: sy+6SEfx/1vVEruXZe8c08xDLwmrw5ffL9OavKroRl8=)
2: mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa (hash: A++zVXL1KytgjPo0U8Uvn5ms+5UtCdFa04StDMBXv54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:da:1e:a2:16:7f:88:7a:1e:28:bd:90:6e:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Aug 23 13:02:21 2025 GMT
Not After : Aug 24 13:02:21 2025 GMT
Subject: CN=29a3b0eec02572c09e1e14b3e4ec06875453a11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:cf:41:a8:74:f3:c3:d3:ea:49:de:f8:1f:
2b:a5:92:64:4f:c9:78:ce:fb:9f:a7:22:d6:a2:00:
ab:6a:36:4e:e1:a4:b8:17:0f:5c:21:6c:66:f7:cb:
82:3e:b5:63:e1:d7:bf:b5:03:f6:e2:6c:37:a1:10:
23:09:ed:13:25:b0:77:e8:5a:9f:86:36:4c:f9:ec:
67:36:f3:97:55:99:81:4b:b8:9a:29:e2:11:ee:be:
b5:83:8d:93:9e:30:8c:92:ac:43:90:9b:1c:06:b2:
43:8b:e3:6c:8b:db:a1:ab:c6:82:5e:2c:d9:fd:7f:
c9:e1:ef:87:d4:d4:46:7b:25:6f:d2:43:c2:22:89:
12:40:fd:f2:9e:5d:38:c8:4d:a6:16:41:40:52:ca:
f2:bd:f0:6b:81:b4:e4:2a:4e:ae:0b:f6:a1:19:39:
05:6f:6b:bc:f1:d8:35:43:ad:75:99:17:64:58:5c:
60:9e:8c:88:56:a5:e3:38:df:15:00:a9:99:09:cd:
d3:4c:8d:f4:00:1f:47:88:d2:1d:6d:76:36:09:16:
9f:ee:49:7d:dc:db:d7:e3:07:3d:1e:61:dc:24:86:
14:ef:49:47:58:71:f7:61:cb:84:94:22:0b:6d:f9:
fb:0c:bb:dc:bb:3e:5f:c7:e7:b6:0c:22:30:fc:24:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:B0:EE:C0:25:72:C0:9E:1E:14:B3:E4:EC:06:87:54:53:A1:1B
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:7d:a7:69:5b:9f:03:f3:78:72:ac:5f:b1:ef:1e:bb:27:
90:4f:cd:89:90:16:8a:3d:0e:74:fe:96:85:c6:f7:ac:47:7e:
e6:20:b3:59:34:bf:b7:41:f2:d5:db:9c:5a:e7:c7:dd:22:7f:
54:83:63:19:63:f8:99:6d:61:f0:5e:4a:05:14:fd:d2:4e:ce:
a4:15:d4:ea:b0:e5:1b:78:e7:12:5a:e3:35:22:ed:02:11:7e:
33:dd:3b:3a:bf:16:8b:b6:1c:20:dc:47:cf:f3:11:a3:38:51:
eb:9b:e0:d8:36:07:ce:57:f2:08:7d:25:52:a3:2a:16:96:bf:
11:74:fc:cb:f4:35:c0:cf:9a:81:ca:1c:59:a4:d1:d0:58:0e:
6d:05:4d:be:f5:d2:10:bc:0f:ba:e3:9a:d6:af:02:29:94:d8:
8b:30:05:d5:29:f4:03:6c:c0:88:fd:37:60:84:0d:ac:50:13:
20:3b:58:b0:69:9a:69:e2:fe:f5:cc:9e:26:3c:27:26:f4:ba:
f9:fb:ab:bd:fe:33:09:b5:64:3f:8f:50:c4:17:77:5b:ee:90:
97:6b:26:cf:d9:7f:f2:9e:fc:4b:f6:a5:4c:56:3c:19:31:71:
bc:bf:5f:e1:5e:07:a8:5c:b3:7e:c1:40:ee:0c:4f:af:a5:d1:
66:d2:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:34 2025 by rpki-client