Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: W38SralEeLEzqwW2JUw8iMwa3HDFW5TQfR9Eq6WHr30=
Subject key identifier: D5:29:30:50:EC:BF:2E:82:9A:B2:DE:C4:E3:24:27:AA:C8:2C:02:B4
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 0198D84F6E62FE48C43A5968AE5AD8BADBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0D5E
Signing time: Sat 23 Aug 2025 19:02:20 +0000
Manifest this update: Sat 23 Aug 2025 19:02:20 +0000
Manifest next update: Sun 24 Aug 2025 19:02:20 +0000
Files and hashes: 1: BRx8YXqDNB1GFUFqyh6QeZ00QCQ.roa (hash: o3eKIyn+wElbYPzG51u2wAS6yMUVN8sHDDwj5Rm2E/Q=)
2: W_LcH2rarIjndbdlJP8dn2zg91I.roa (hash: ABTtDVp9Hfq4kC7VPzIn0vf/HFoFzUVcLY2Iv5yLp7M=)
3: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: Rd4y5dIsZ4lbMfWMFME48d18X4TEmqbcNLsvtLnnD04=)
4: nmvw5bWIi1oZlR595dhxiK83LVo.roa (hash: 6i6AlqZjdecP77aW9/z93M4lDAcDWuNi8d0hwYlB348=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:6e:62:fe:48:c4:3a:59:68:ae:5a:d8:ba:db:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Aug 23 19:02:20 2025 GMT
Not After : Aug 24 19:02:20 2025 GMT
Subject: CN=d5293050ecbf2e829ab2dec4e32427aac82c02b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:14:00:a6:4e:3f:0f:1e:ca:0b:9f:66:0e:cc:
ba:c8:96:ac:f2:86:53:ef:81:cc:71:76:45:77:2f:
49:18:ee:86:c7:d5:21:3f:aa:7a:e8:0e:24:7b:e7:
e5:01:f1:78:d8:f5:37:c1:03:7a:c2:b3:fd:07:ed:
dd:44:7e:2e:d5:34:ac:b8:f4:72:e1:e1:85:d6:82:
88:bb:16:aa:c4:56:76:ee:20:00:04:56:b9:ad:72:
be:f7:a2:70:3a:82:a7:f0:15:d1:46:b4:f0:70:28:
3f:da:88:47:8b:27:35:6c:59:7e:20:3d:7c:27:ce:
4b:38:55:98:e5:47:4f:cd:c0:38:77:04:9b:01:2f:
34:e4:3d:a4:83:6a:37:a4:93:f3:14:e2:19:e0:e1:
1a:79:73:37:ec:d6:1d:35:34:d0:b6:f6:00:2b:0a:
e6:57:bd:0a:e7:7a:b2:39:97:62:95:1a:e2:3a:4a:
57:af:0d:f2:cd:ed:f6:bb:b7:42:4b:04:b6:95:b5:
7d:02:20:c5:ca:c5:a5:11:a0:ad:f1:11:c2:34:77:
4c:f8:a4:74:9e:22:43:c0:19:23:c1:01:77:20:db:
72:2e:98:16:8b:15:5a:c7:df:94:fe:b6:eb:27:f1:
9a:7a:93:f3:bb:7b:5b:22:3b:fd:a6:88:fc:c0:bb:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:30:50:EC:BF:2E:82:9A:B2:DE:C4:E3:24:27:AA:C8:2C:02:B4
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a2:30:76:51:a2:db:29:fa:f6:e5:c2:48:4d:23:52:ed:2c:
23:67:5b:94:68:82:ea:6b:d4:a3:a7:36:a2:47:70:41:24:34:
b1:b9:b5:81:13:83:ce:5b:b9:e3:ae:d9:58:71:39:21:a7:21:
dc:04:f3:31:de:48:55:e7:43:ce:d2:e6:61:99:59:a5:16:29:
4c:66:61:79:ae:fb:0a:3d:ff:56:1b:84:7d:3e:9e:02:da:04:
12:46:8f:38:8d:1e:8e:cf:1d:ca:aa:e2:1a:fe:93:50:86:eb:
d3:0f:86:f2:aa:a5:30:b4:be:5f:61:1c:06:e3:4b:08:61:86:
63:c0:d4:ef:5a:d6:4a:9e:1d:7c:c1:97:12:78:fc:57:b0:23:
c9:c2:a0:fc:de:c2:cd:8f:77:51:84:f2:f1:3e:8f:12:25:17:
bc:8d:a2:9d:56:a4:27:94:df:da:40:bb:37:10:19:62:42:9a:
c5:3b:4b:3e:9b:c5:96:50:7e:78:2d:e2:cf:5f:57:38:cc:a4:
ef:2b:c1:be:ed:05:30:d5:7d:3e:7c:bf:c9:09:e1:d7:3a:cf:
fd:0c:e1:f5:af:cf:56:ed:4e:17:02:4d:74:f3:54:d6:44:1b:
b2:be:24:fa:39:d3:1a:81:6b:03:32:9f:27:37:36:fa:ab:48:
f3:de:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:15:15 2025 by rpki-client