Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier: S54m1iusTsS3a2VvpPbHAfn0n7GPnir1TYvHzRIAY1M=
Subject key identifier: 95:A4:87:57:46:40:6A:E7:F7:4C:EE:A3:DE:7D:39:E2:CA:7A:FD:57
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 0198D405056B23D0D282881A29BAEBC29F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number: 164D
Signing time: Fri 22 Aug 2025 23:02:35 +0000
Manifest this update: Fri 22 Aug 2025 23:02:35 +0000
Manifest next update: Sat 23 Aug 2025 23:02:35 +0000
Files and hashes: 1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=)
2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: NdFo7nP1pHxGTTMHS/QOpQ6IJNJQxPFkt/40BPPIgKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:05:05:6b:23:d0:d2:82:88:1a:29:ba:eb:c2:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Aug 22 23:02:35 2025 GMT
Not After : Aug 23 23:02:35 2025 GMT
Subject: CN=95a4875746406ae7f74ceea3de7d39e2ca7afd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:5b:ba:0d:63:db:b8:54:90:13:72:28:c2:
ba:fd:65:68:94:d2:bb:e1:03:ff:b6:4d:34:6f:82:
63:1f:47:fb:34:e1:12:2f:da:64:dd:30:3d:97:53:
0b:b4:b8:bc:8d:4e:47:d5:51:16:c9:3c:26:72:4c:
98:57:f2:d4:b5:ed:7e:9c:81:ba:40:3c:6f:a0:5d:
85:28:94:53:43:9d:e2:cf:dd:be:7f:00:77:82:f4:
2f:f7:e4:ad:91:0e:ef:e3:cd:1f:9f:f9:a1:79:fb:
b7:97:d2:5e:83:79:7d:ab:99:57:3a:de:3f:f1:a7:
69:ab:17:75:9e:d1:a9:41:1c:81:58:55:35:03:39:
9e:a7:bd:89:4c:03:a8:67:df:38:4d:66:16:05:3a:
7d:07:7f:a9:40:18:31:db:8c:b9:7e:97:ac:bd:39:
73:31:7c:7d:40:b8:a5:1a:03:16:4c:0e:76:4c:90:
e8:1b:44:7e:81:49:a8:b7:9e:5c:7f:20:73:3b:51:
5c:92:49:45:cf:ab:cb:34:04:17:90:34:18:c6:dc:
a8:bb:d8:02:4a:dc:a0:e5:89:71:ed:43:f1:27:ee:
64:a0:2e:88:5c:e8:63:91:62:60:2d:26:33:85:2c:
a4:78:61:fd:f7:41:ef:8d:47:ec:4a:b7:6b:4a:0a:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A4:87:57:46:40:6A:E7:F7:4C:EE:A3:DE:7D:39:E2:CA:7A:FD:57
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a9:94:4b:44:bf:33:d7:2b:d2:b8:a7:11:42:a1:89:78:63:
0a:98:86:41:e6:67:a7:a2:73:82:46:f2:1a:f1:56:d2:e0:3e:
0c:c6:6e:12:c7:d9:10:28:66:dc:7b:ab:c6:c3:d4:c8:6b:a5:
fd:b5:1d:f2:30:e8:43:c5:09:05:fb:42:25:b9:8e:f5:cb:a7:
5d:16:4c:12:b8:8b:3b:34:b6:45:c3:19:68:44:22:70:c7:53:
5f:b2:2c:bb:24:e0:ba:78:f8:5a:29:b6:32:5e:8a:75:31:59:
48:06:b8:0d:7f:9b:b3:c9:f9:a8:93:bd:76:58:ca:e4:00:6f:
bb:c9:cd:dc:d7:51:39:fd:7b:8b:9c:5e:8b:8f:96:56:a8:d6:
ab:fc:e5:c8:b3:0a:09:1c:5c:d3:c6:0b:4e:ce:6e:7d:7a:a6:
52:f3:f0:8e:ae:01:e6:09:18:5d:e5:da:9c:ab:85:c7:aa:92:
72:83:77:bc:09:c8:56:31:2c:9b:c2:88:7a:bc:58:a5:3f:d7:
30:46:e7:78:fa:2f:e7:e8:fe:74:43:a2:37:6e:d1:ca:14:fc:
07:a8:b8:9a:eb:2d:63:9b:0e:69:34:a4:29:c6:79:ad:b8:35:
41:1b:46:df:f3:5e:46:a7:84:14:ec:5f:48:5b:a6:fe:35:83:
e8:8a:85:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:04 2025 by rpki-client