Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
File: fvh727KV4chetLDjVmFTwiGEX4E.mft (raw, json)
Hash identifier: nwhFYkYo7BojvCxIuRaqe6ONAFqsVeZYvkH+jw1hLCU=
Subject key identifier: 6A:34:ED:29:A3:EF:CA:A0:5F:22:ED:78:FE:43:1C:B8:4A:AC:3D:68
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Certificate issuer: /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial: 0198D54DD2D815BB0D7A5B177953D28BA38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
Manifest number: 0191
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa (hash: G4U5UCTvd/mqwuDmGGvlZs+iLYiclpaGMY0aTsyHcfE=)
2: fvh727KV4chetLDjVmFTwiGEX4E.crl (hash: zGr3vtf87zRz22KQMbE2R2WbJdVGuQSRr6KUfk+Gkw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d2:d8:15:bb:0d:7a:5b:17:79:53:d2:8b:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=6a34ed29a3efcaa05f22ed78fe431cb84aac3d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:6b:1c:85:a8:27:94:48:9f:f9:90:29:17:
6a:f3:03:c6:39:7d:6b:82:5d:87:bc:f7:94:05:54:
6f:e5:b8:1c:7c:ae:c6:f8:a5:ac:8d:e4:87:c9:c4:
52:17:67:07:e9:86:87:7f:e0:1e:06:e9:44:86:99:
9b:bb:88:f6:03:ad:d3:25:12:f9:d8:b0:0b:b2:1e:
c2:de:05:d3:4c:b4:27:bf:d8:39:99:04:19:7c:3e:
d4:a0:fe:85:cd:30:ce:13:0e:04:f4:70:2f:f0:77:
8c:1a:cb:8e:0d:e9:47:48:6b:87:d6:eb:4b:04:08:
6c:7f:a8:55:84:13:99:a8:31:a3:8c:a2:b2:5c:0e:
41:28:70:03:a0:f5:44:03:21:5a:76:fc:00:a5:b6:
9a:8f:34:23:04:7f:cb:e7:fa:72:a2:f0:90:1f:c4:
47:ba:0f:9f:c0:76:8e:c2:62:41:1a:7d:c9:0b:73:
f1:c8:21:b7:bf:6d:6c:9e:05:aa:80:d3:94:ae:d9:
8d:86:d3:a7:b0:a5:19:c2:ee:6e:51:de:33:cd:2b:
47:c6:b2:51:46:10:7d:17:59:50:9f:8c:c5:f8:81:
3e:9d:0f:52:ff:84:b2:9c:21:f9:d3:58:af:a4:97:
82:09:86:9d:89:d6:d2:52:a2:58:b7:18:37:75:77:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:34:ED:29:A3:EF:CA:A0:5F:22:ED:78:FE:43:1C:B8:4A:AC:3D:68
X509v3 Authority Key Identifier:
keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d5:ba:6d:9d:60:e4:f0:a9:73:92:da:55:9f:d3:4f:bc:63:
55:47:a8:55:e1:94:4a:5c:4e:04:64:59:8d:f2:36:f6:ba:3d:
cf:66:e4:86:79:72:a3:ae:50:2e:cd:bd:25:45:55:62:1e:d6:
b8:5b:16:d9:4b:88:ce:3c:6a:2e:16:35:37:f4:a5:20:04:85:
fc:c2:00:73:ed:a6:29:60:61:2e:c2:0b:fe:8b:c4:a4:41:46:
c8:a0:cd:50:94:f6:e6:0e:b5:74:99:27:73:ff:77:6b:a3:fb:
a1:b5:11:a5:6a:4b:a3:0e:dd:2e:18:f0:db:b5:6a:06:54:00:
d7:51:fa:68:ef:bc:05:da:95:05:74:7c:61:b9:30:69:bf:43:
d3:7f:0b:5d:ab:0b:a5:df:b7:95:06:2a:d5:7c:e1:cb:1c:4b:
bd:e0:4c:0f:b7:21:98:1f:29:e6:c0:88:7c:68:f0:0a:c7:66:
3f:e0:f6:19:cb:08:2a:3f:80:d9:96:5f:12:c8:c3:be:fc:6a:
db:d3:79:28:90:0c:5c:df:26:fc:d9:da:a8:af:bf:be:9b:1f:
d1:2c:ae:c3:1f:6f:b7:12:de:a2:d5:99:ce:eb:9a:44:05:da:
ce:1c:d1:4b:e7:7c:4a:6e:8a:fd:89:7e:d0:09:16:f4:b6:e6:
1e:1f:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:18 2025 by rpki-client