Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: QXiF90x6YKadjBvBC0byAVD5C6rxudXtKaj0tLMt3Io=
Subject key identifier: D2:98:E0:AF:61:9F:AC:A5:F6:52:B9:1C:1D:5E:54:51:0F:5A:3C:08
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 0198D6985389D364BEE044CFCFA54AAE1603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0A70
Signing time: Sat 23 Aug 2025 11:02:43 +0000
Manifest this update: Sat 23 Aug 2025 11:02:43 +0000
Manifest next update: Sun 24 Aug 2025 11:02:43 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: 1xggZfRTcuSpUJRg+SzTnzTY1Q7GFVRf5NUcvEKQ+a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:53:89:d3:64:be:e0:44:cf:cf:a5:4a:ae:16:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Aug 23 11:02:43 2025 GMT
Not After : Aug 24 11:02:43 2025 GMT
Subject: CN=d298e0af619faca5f652b91c1d5e54510f5a3c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:57:4b:64:9c:79:2e:ef:ae:50:0f:7d:a8:
c4:f3:b8:25:cb:c8:14:a2:af:79:00:74:52:55:23:
79:d4:cc:32:11:3d:ed:42:71:97:8d:90:f0:a1:b1:
fb:64:fa:05:96:ba:cc:4e:dd:73:4f:cf:69:4d:9b:
1f:7f:d1:e1:93:6e:9a:37:d2:0f:ba:44:3a:53:1f:
c1:28:1c:f5:ea:a6:cb:d0:e2:34:32:4a:98:60:df:
1e:e0:86:8e:3c:f3:39:cd:01:8c:88:0e:c4:a5:4c:
6a:d3:f2:19:8e:37:94:d6:52:00:98:05:ea:be:d0:
3d:7f:19:13:ab:a6:5c:fd:46:0a:85:01:6a:d4:13:
53:d9:93:73:77:98:6d:55:05:44:0d:af:71:c7:3a:
e3:2e:a9:d2:08:65:cb:69:d2:18:db:50:f0:9e:2c:
ea:39:5c:97:91:15:c8:57:12:d8:36:bc:0b:f4:60:
12:b1:2e:89:e5:09:9a:74:e6:95:5f:60:bf:ec:46:
78:41:d5:e9:d1:e0:07:49:86:f8:16:3f:7d:41:00:
b2:66:3d:d6:e6:a9:70:8c:11:f0:2c:73:46:37:08:
6c:c3:a9:47:8f:2f:7a:93:8b:80:20:6e:fa:3a:53:
7e:be:f4:1c:59:2e:ef:b2:3f:1f:28:92:03:eb:66:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:E0:AF:61:9F:AC:A5:F6:52:B9:1C:1D:5E:54:51:0F:5A:3C:08
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:06:72:2f:c3:24:f5:bd:c6:28:65:8e:00:07:0c:a0:a7:15:
67:34:4c:a8:ee:2f:d9:fe:a3:d9:d2:0f:1f:6d:c4:b2:26:09:
31:e6:3a:27:22:ee:f2:27:65:8b:9f:d7:ea:18:a2:1b:17:4b:
9a:58:9b:4d:81:07:58:7a:39:2c:34:9b:43:c1:43:ff:2c:ca:
f0:38:f3:ff:da:ce:f9:2d:f4:40:3b:9a:08:2d:f7:8c:8f:9c:
b4:34:96:cf:91:dd:c4:e0:c7:65:f5:dc:83:df:ad:9f:08:99:
62:2d:9e:d4:63:3a:ac:c6:70:43:7e:a1:60:d5:2c:e7:60:e3:
0e:8a:d1:15:75:e2:c2:ad:df:d9:5a:87:54:11:52:96:dc:de:
c0:a6:1a:8e:08:f6:f7:1d:a4:28:f5:45:5f:c6:f0:17:ce:1f:
dd:3d:4c:5e:41:d4:10:76:14:3a:97:55:74:42:71:e7:54:06:
84:7a:50:55:77:93:32:d7:d7:b9:52:28:75:e1:fd:eb:47:33:
78:dd:81:70:e1:3c:78:ce:a6:da:df:4d:9a:72:b4:a3:b3:48:
bf:7e:8d:ac:5f:17:db:f7:98:84:fc:5e:d3:75:54:13:ca:7b:
9f:63:34:61:bd:4a:30:60:79:2e:8a:e8:e9:90:b7:6b:76:9a:
55:9d:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:14 2025 by rpki-client