Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: Gv07tNQakcA0ESsJ0D0cYK2ZEgE1X4WUiufFFwkEARE=
Subject key identifier: C7:97:DC:CE:A8:E3:DF:AF:EB:E8:FA:F9:4B:52:65:82:2C:38:B4:41
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 0198D7A950903A0A51B0AF4E4CE038B8E2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 1072
Signing time: Sat 23 Aug 2025 16:00:54 +0000
Manifest this update: Sat 23 Aug 2025 16:00:54 +0000
Manifest next update: Sun 24 Aug 2025 16:00:54 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: KYmz4XeRTsFYIslBhFFJqQm0AySQw6xUMUCNMym7jiQ=)
3: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (hash: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:50:90:3a:0a:51:b0:af:4e:4c:e0:38:b8:e2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Aug 23 16:00:54 2025 GMT
Not After : Aug 24 16:00:54 2025 GMT
Subject: CN=c797dccea8e3dfafebe8faf94b5265822c38b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:f3:0e:c8:c1:06:87:ea:c0:dc:e5:05:a6:
af:42:ca:90:63:5c:c5:a9:6e:b5:d9:e8:0a:89:10:
ca:e7:14:f4:d9:b2:ae:cb:2b:fe:d5:8d:91:cb:37:
9c:27:8c:ce:2f:64:b5:f8:22:e1:96:2c:d7:4b:0f:
fe:3e:63:2e:3f:de:72:49:79:25:33:56:7b:45:3a:
d8:9e:4d:84:ac:37:38:14:21:ff:34:21:42:8e:70:
22:3e:41:04:e2:da:5f:25:06:24:76:de:5b:58:4f:
2d:11:20:ed:bd:12:47:e8:88:da:e4:a1:1a:cb:f1:
d7:92:c8:f1:f7:9b:7d:9e:ab:cc:c3:c8:9e:9d:8b:
88:6e:11:ad:81:ce:2d:58:54:f0:2f:74:e3:b6:61:
3f:a9:5e:da:15:eb:77:81:d7:0b:3c:4c:8b:d9:8a:
5f:5d:a5:92:3c:d7:68:a7:f9:ed:f2:2d:49:08:71:
fc:d3:1e:95:0e:ab:d2:bb:d4:92:5a:da:cb:20:b7:
7c:ac:4c:11:b5:af:50:6f:cc:09:bf:83:a8:f4:cc:
23:4d:18:96:ae:7a:60:2c:27:d7:39:a4:61:f3:84:
56:bd:87:a2:39:49:f4:ed:c1:06:84:f0:04:b2:cf:
a2:56:ad:6f:b7:f0:7d:2a:7d:90:2e:b4:1f:c7:5d:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:97:DC:CE:A8:E3:DF:AF:EB:E8:FA:F9:4B:52:65:82:2C:38:B4:41
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0b:21:87:6d:94:25:64:bc:75:d6:e0:8d:f6:63:13:c9:7f:
f3:33:b8:f0:ac:e1:dc:b6:ae:fb:98:71:8a:22:be:ce:1a:f7:
bd:cc:fe:b3:de:52:f4:0b:a0:be:b1:04:43:57:e9:60:e1:dd:
00:19:85:45:f1:60:96:59:13:e4:fb:e5:64:3c:51:9c:71:87:
89:a9:ea:32:81:d1:b3:42:86:fc:14:bb:cc:a7:7a:f7:4b:79:
f9:20:49:19:98:2e:19:e4:f8:fd:4c:be:b2:77:2e:79:1b:44:
88:00:3e:88:3c:53:cc:07:20:ef:70:92:49:23:a0:c7:aa:b4:
98:85:01:69:e4:4a:f1:7c:e4:97:53:08:9c:d5:09:b8:b1:48:
d3:ad:00:c1:49:9e:87:83:bb:c6:6d:41:ca:dd:32:5b:33:15:
e6:c3:75:75:13:21:35:e1:b3:e2:20:21:69:ee:d9:f7:35:38:
2e:11:c7:a9:68:9f:d0:90:e2:d0:d6:27:24:e5:12:79:29:a4:
e1:7f:d2:71:56:8a:29:5f:20:3d:20:63:69:76:f2:72:cc:c3:
07:95:35:b7:a5:e2:44:b4:9a:dc:a7:fd:9f:29:63:b9:1c:6b:
25:b1:7d:f7:aa:fa:88:ae:69:07:ab:ae:bd:0f:d1:55:2c:c2:
18:25:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:20 2025 by rpki-client