Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: SDhKS1smtU8v81dEKaHUqQ3OV4KOazHr5AEKxM6rcBs=
Subject key identifier: F7:13:EC:FF:E3:A3:EF:EF:DD:FE:08:62:A8:5C:A3:78:C9:C6:1A:DF
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 0198D472B49D718AB9A1F1CB6B4A58747A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 0FF2
Signing time: Sat 23 Aug 2025 01:02:23 +0000
Manifest this update: Sat 23 Aug 2025 01:02:23 +0000
Manifest next update: Sun 24 Aug 2025 01:02:23 +0000
Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=)
2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: BUvQaf5j4C1nsFodwhU4uMuFixDuvU8y6WQgZ8J0HIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b4:9d:71:8a:b9:a1:f1:cb:6b:4a:58:74:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Aug 23 01:02:23 2025 GMT
Not After : Aug 24 01:02:23 2025 GMT
Subject: CN=f713ecffe3a3efefddfe0862a85ca378c9c61adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:d6:74:30:21:fa:18:d3:34:96:f4:aa:cf:
dc:1f:ea:28:58:49:48:a9:d4:f8:fa:ab:f2:7e:2b:
4f:64:97:94:de:32:0d:0a:9f:43:3a:48:80:bc:37:
ac:00:cb:f4:65:c7:28:75:9a:41:c0:5b:41:df:1d:
a1:fa:34:db:ec:f2:60:aa:3f:c4:ed:9a:fb:76:6c:
64:01:53:d4:b2:bd:00:13:8a:cf:b3:e8:56:9c:d9:
de:74:99:1a:3b:2e:d0:1f:97:b1:35:23:11:b2:de:
2c:8e:fa:0b:ba:dc:ec:e1:9e:3f:6b:c6:12:7b:ee:
a1:24:ec:9b:09:5b:8e:bd:c4:74:0f:0a:dd:12:96:
78:7f:6d:ac:07:6a:fb:a0:d9:51:17:21:d2:55:a0:
c4:73:cd:7e:da:df:42:10:bc:79:9a:98:3e:51:97:
9f:fb:12:a3:e6:97:09:e4:65:16:4c:ad:86:0f:e3:
66:71:d4:d0:2f:c2:fc:d2:37:1f:56:96:bf:5d:b3:
8b:d9:8a:63:61:60:2c:2b:9b:82:42:7a:b5:69:26:
f8:d4:de:1b:db:a6:d0:f5:69:cf:4b:5b:46:c0:03:
7a:6d:92:72:f1:c5:48:a2:8a:41:b0:e0:cd:d0:a3:
b4:f9:ef:f7:cf:cd:0e:59:5f:a3:00:3a:ca:5e:85:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:13:EC:FF:E3:A3:EF:EF:DD:FE:08:62:A8:5C:A3:78:C9:C6:1A:DF
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fa:db:7d:07:b1:46:80:92:fd:df:62:37:4f:b8:f4:ba:d5:
1a:53:21:29:d6:61:cd:80:fd:7c:b2:19:57:1a:af:bc:8d:0f:
5d:7b:d1:74:36:80:86:78:bb:41:c8:f2:cc:51:71:52:66:94:
88:3b:88:81:39:97:b5:bd:35:c7:97:03:c0:c0:16:f9:12:e7:
44:52:94:c7:54:4d:2b:34:65:5a:6d:58:ce:44:96:ee:85:6a:
8b:d0:a3:cf:d4:10:7b:9c:70:07:14:4b:81:80:38:e0:e1:af:
f7:72:ab:a3:b5:52:1d:fb:ac:1b:1c:f5:23:76:5a:f7:61:e9:
b8:fa:47:05:f2:ff:96:d2:f6:ad:bb:aa:86:ad:f6:9c:82:5d:
35:95:ab:33:8d:d7:54:63:3f:7a:b3:89:ce:a3:6c:6c:91:6d:
b1:66:a6:44:30:c3:a7:b4:f7:97:0c:d5:e1:fb:dd:d6:89:98:
81:ee:25:4a:a8:34:ee:cf:6d:c5:58:0e:55:9c:1f:7e:dd:85:
67:5d:6a:58:1c:4a:ce:93:0d:f1:d4:b7:82:5a:3d:d4:ef:da:
55:77:f3:4a:53:2e:40:1f:f2:22:e8:75:4b:5f:fd:73:29:15:
d9:b5:74:92:34:b1:b8:1f:d6:53:22:9a:43:30:02:c6:10:a7:
f4:89:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:37 2025 by rpki-client