Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: H0E+x9ahetf/vl2ABjAl20eSrwgNTmND0BEBEo9rpdc=
Subject key identifier: DE:0A:44:91:77:F5:97:16:87:74:6A:5E:E5:93:FB:EE:42:1C:5B:AD
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 0198D5157224D1C6FF20444C4EAB52F82DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 0DA5
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: WBWNPZAIG5TxeFXlAVS083RLBkk.roa (hash: qjzS4SOpKRY0Euyn5aPWAnwBT2wsSH59WxJEL/JtBjg=)
2: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: ViIQNAf3eST0k2MgcRbSe2dWHMp7aspvFNO7Bm8VbEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:72:24:d1:c6:ff:20:44:4c:4e:ab:52:f8:2d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=de0a449177f5971687746a5ee593fbee421c5bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:49:f2:70:12:b2:3f:c9:e7:d0:b7:f2:7d:
b7:56:be:d9:2f:29:12:13:36:ff:87:57:cf:5e:1d:
71:ad:1f:5e:a9:09:95:2b:e1:a3:dd:65:09:66:7d:
bd:db:81:7e:38:e8:ec:10:8b:7a:26:52:50:e9:e5:
23:fb:0c:a1:c5:fe:2d:9d:c1:b6:66:9d:c3:01:cc:
d3:5b:b2:66:4a:6c:c8:05:1a:f2:1a:f9:15:eb:63:
77:e2:ce:ef:80:cc:c3:64:cc:79:38:23:33:65:53:
43:20:40:e5:bc:ad:dd:89:eb:05:f1:bb:86:12:83:
54:44:fb:d0:a2:ee:d2:59:32:eb:1a:27:85:bb:c1:
29:ed:dd:a4:58:81:9c:ee:59:c1:1a:4b:22:4e:60:
3c:2f:67:f6:6d:a7:8a:c9:69:a0:47:1c:73:18:99:
d5:79:bd:34:e3:b7:6c:5d:46:12:5f:7d:c4:d3:b9:
e0:5c:b1:41:99:37:04:c3:28:dc:0e:64:ee:9a:d6:
c2:32:08:c2:3b:93:22:5b:c3:77:3d:31:ce:78:02:
1a:be:57:9b:2a:d4:cb:b9:da:29:75:a2:35:a8:53:
80:83:d7:95:5d:9c:3e:0f:0b:a7:0b:6a:0f:ad:a2:
85:64:6c:81:71:94:1b:21:6a:59:b3:25:1a:6f:d1:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0A:44:91:77:F5:97:16:87:74:6A:5E:E5:93:FB:EE:42:1C:5B:AD
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6c:51:45:f8:c9:3e:f1:86:a7:3e:4b:43:4e:14:48:d6:9a:
92:82:11:dc:5c:a9:81:f7:a4:3f:5d:fc:3d:61:0c:8b:79:23:
cc:97:70:2d:ed:20:c3:bb:e1:ed:7a:75:77:ee:e6:6d:5a:cc:
fa:fc:47:fa:6c:29:a9:9c:f0:a0:7d:32:88:e4:fc:22:e4:39:
85:ad:bd:de:63:21:b5:ff:85:0a:06:94:19:74:e3:cc:9d:64:
ea:2b:7c:79:90:e9:85:38:9a:07:3e:f7:4d:32:0d:59:1c:58:
9a:a9:eb:70:80:cf:58:a3:aa:ae:e0:38:a0:cb:11:cd:08:ab:
ef:16:2c:be:78:1b:15:e1:cb:0e:8e:a6:0c:10:4d:44:b3:db:
d4:aa:d4:49:61:2a:88:d4:85:4f:4f:8e:c2:3b:b4:f1:6c:0b:
61:16:a3:0a:57:e5:5d:05:5a:09:47:69:e3:69:17:84:5a:75:
b0:9a:1b:d1:ee:e7:55:3a:39:64:10:17:7e:99:f7:78:ca:a6:
59:95:71:b1:07:e1:05:66:6d:2b:25:30:42:42:fd:e8:1d:98:
25:03:be:58:b7:f8:d6:cf:24:47:55:49:38:bb:79:d3:15:ea:
c6:19:e3:a3:b3:d0:0c:71:97:63:4b:17:c2:35:bd:5b:1d:97:
4f:3d:1b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:24 2025 by rpki-client