Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: VYoFcChhf7uJn9RWsIidQdinEuiMhV3XOlvW/ROw10Y=
Subject key identifier: A3:6E:DC:22:67:21:0A:BA:C8:F2:0A:19:7A:B3:03:6D:2B:53:64:FC
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 0198D65F8F4835BED28C28ACE9323086252B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0B7F
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: XDbrvNT86ISN_spCbo4xvAzpVp4.roa (hash: VdcMI142dXyMiD8Y0gV4McGw1NiqJuUGtwcS5l0geTI=)
2: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: eS5c7bJKKVG3FQl2A1Y4SPnh7Rfhozjf77VQa7QZUhM=)
3: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (hash: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8f:48:35:be:d2:8c:28:ac:e9:32:30:86:25:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=a36edc2267210abac8f20a197ab3036d2b5364fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:ac:39:09:2d:18:5b:63:28:3b:4b:a0:c6:
ac:a1:57:aa:be:68:92:d4:0d:09:13:d9:2e:6d:d6:
77:8c:f0:4d:05:99:02:8e:2c:e3:3c:7d:b8:67:81:
98:90:20:18:a0:d7:e0:ed:06:08:8e:f3:f4:f0:77:
69:0b:11:6f:e0:77:9f:e2:85:58:0e:3b:9a:c9:ae:
9c:9b:69:5d:f5:0a:3c:54:b6:fe:e8:95:06:4f:6d:
b9:88:7a:e5:45:43:b7:2c:b1:74:56:71:1c:b6:70:
84:b5:f6:b3:80:37:69:2e:4e:90:ef:77:b8:04:f4:
34:8d:d5:35:5d:6f:88:79:86:49:55:49:bc:3b:3e:
dc:48:06:14:7b:43:65:13:14:ee:ab:a1:77:f0:13:
de:90:da:c4:b5:f2:88:39:8a:ee:06:16:5c:27:9a:
50:06:9b:6c:96:6d:0c:d8:d5:b1:af:20:01:52:90:
7e:2f:21:39:67:ca:14:87:ef:3b:ef:2e:94:bd:b2:
07:26:8d:f0:1e:d3:d5:ea:db:6a:ec:ce:04:7c:20:
4b:55:4a:32:7e:b9:10:28:41:80:1a:f8:31:9a:67:
e5:82:cd:10:66:7f:b4:7b:be:5d:28:06:1f:2b:b1:
0b:86:91:5a:e7:72:30:69:48:33:24:f5:73:ae:d1:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6E:DC:22:67:21:0A:BA:C8:F2:0A:19:7A:B3:03:6D:2B:53:64:FC
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:31:b3:07:fd:54:25:86:77:c9:b0:c8:de:dc:4d:e9:89:f8:
1b:f5:f4:72:ba:99:53:bf:3a:6f:68:23:6c:f7:e0:74:1a:9b:
cb:45:64:2a:b7:91:33:24:34:d3:e1:f4:15:ed:a5:71:b3:46:
d1:e8:a3:b7:fd:93:a9:df:c6:55:df:37:da:18:06:fe:09:2c:
02:aa:80:45:00:3b:75:fe:84:93:16:19:8f:07:b8:32:42:ab:
e1:a7:39:0a:aa:63:3c:f4:27:a2:0a:cd:c0:07:76:ef:a9:e1:
50:85:e2:71:85:ca:38:b0:ae:69:65:65:d6:f5:1b:73:85:0f:
30:53:d8:5a:57:19:d3:8b:a2:01:29:c2:21:53:d1:5b:a1:73:
0d:de:57:bd:02:04:d7:06:66:df:10:99:11:ef:01:06:5c:84:
2d:f2:83:ea:8c:a5:2e:84:64:a9:e5:ce:f6:93:2b:59:3e:6a:
83:78:df:3e:20:02:22:b8:df:75:9f:a9:8d:a3:c5:34:12:cb:
8c:ea:20:b2:2f:12:a9:cf:18:d0:6b:2b:70:36:df:75:49:8d:
50:c2:86:b5:60:7f:e5:bb:b1:80:b0:bd:49:4d:36:f4:ba:3e:
53:aa:bb:e1:64:b2:92:11:da:f3:df:6c:f2:42:51:51:36:fc:
6b:b9:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:16 2025 by rpki-client