Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: qkmiEb5mFXFl8DqYtxCCnPAfrx49CGsYNo9yNwjgRPE=
Subject key identifier: 4A:94:3D:00:7D:0A:37:69:B0:8A:9A:D6:72:4B:CE:F0:79:C7:DC:82
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 0198D4723CD2D1B94642900C4817BAF3189E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:01:53 +0000
Manifest this update: Sat 23 Aug 2025 01:01:53 +0000
Manifest next update: Sun 24 Aug 2025 01:01:53 +0000
Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: z/91pxHzHTG4NXouUryhrMn2kqZmCcH6RHLJxPK8jI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:3c:d2:d1:b9:46:42:90:0c:48:17:ba:f3:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Aug 23 01:01:53 2025 GMT
Not After : Aug 24 01:01:53 2025 GMT
Subject: CN=4a943d007d0a3769b08a9ad6724bcef079c7dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:e4:8c:82:5b:ea:83:4c:5b:a9:f3:e6:ff:
16:ca:b6:63:51:7c:d4:b9:b7:0b:40:2d:cc:e4:e1:
60:34:db:5a:1b:43:cc:9f:bb:75:fb:cb:4f:69:89:
fc:30:77:00:cc:ce:cc:44:d0:f0:12:9f:c8:02:1a:
cd:b4:ec:20:6b:2a:ab:a4:b3:83:0d:ea:23:e5:cc:
eb:7f:8e:5a:f0:44:77:0b:13:2c:4b:b6:8f:40:a2:
51:66:07:da:61:66:c0:ea:d6:a4:aa:74:68:45:28:
da:c2:f4:60:c9:83:21:03:c9:e1:f2:63:be:51:b2:
55:a1:b2:4d:27:ea:3e:03:a5:52:0a:d1:ba:3f:74:
6b:fe:04:c5:44:56:6f:ae:4b:fe:cd:bc:7a:f6:7b:
63:e8:57:94:a4:79:e4:c6:4c:9c:55:e4:8b:2c:3c:
da:4a:7b:a1:65:50:e8:41:02:80:1c:cb:20:03:ba:
6f:dc:b5:52:98:61:c5:88:86:f2:34:36:a4:98:ae:
1f:f6:30:a6:9a:af:f6:02:d8:f1:51:ec:1a:aa:41:
b3:d8:cf:3f:a6:d6:33:76:16:42:db:88:07:7b:7f:
23:69:1f:63:ff:78:ba:c9:5d:4a:8d:3a:aa:05:ab:
d0:68:20:c3:a6:ef:4b:56:b2:dd:b2:13:54:e4:78:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:3D:00:7D:0A:37:69:B0:8A:9A:D6:72:4B:CE:F0:79:C7:DC:82
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4b:5e:a7:3f:cb:6a:6e:b8:0d:fe:1b:a4:76:79:43:5a:66:
50:3c:6a:29:ed:fb:23:97:88:6e:3c:53:63:74:0b:fa:11:3f:
45:b2:b4:d9:cb:91:82:2c:b8:c5:73:16:08:36:20:19:22:15:
9a:bc:da:b8:61:ef:94:d2:67:13:0b:30:17:1b:79:e6:c6:fe:
97:54:f4:3b:3a:97:46:c9:e6:3d:9d:39:75:ce:15:11:38:15:
3d:56:3d:d5:0b:6f:a2:c6:88:b8:ad:73:e9:39:f8:ea:cb:d3:
61:8f:3d:19:4d:27:f5:4e:4c:8a:a3:c0:4a:41:34:0a:e9:b9:
84:c8:ba:f7:c8:a7:d6:10:12:24:8f:f3:08:6c:26:8a:78:df:
7e:bf:eb:16:a4:ac:91:b3:c5:ec:90:1e:00:0a:7c:fd:5b:3b:
1c:3e:a0:b2:ec:d0:63:f4:d6:57:ba:b7:e6:b1:a4:27:6b:c2:
f3:a2:e6:0e:06:75:8a:f3:51:1e:a6:61:d9:42:3f:3c:6c:c7:
a7:fa:09:d6:c1:5c:a7:f8:b4:5f:87:fe:67:11:c1:19:e3:81:
e7:49:8e:dd:33:c1:fa:3e:58:4c:6e:2d:bf:57:ec:1d:34:25:
32:53:00:91:4a:61:86:57:72:98:77:b7:41:15:cb:2b:f1:8d:
8d:5f:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:40 2025 by rpki-client