Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: PvPBVEcbVMjU1HEKOtzON+xCeXVv65nKgAZdzJG9d2w=
Subject key identifier: 04:59:F7:5F:0B:80:4C:21:DF:05:C1:D1:C1:27:C5:17:B7:C1:9C:DB
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 0198D54E17FD17D50B775B8CB9AA1621FC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 1527
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: GEy+E/1Vq7QGPQaC2ZwjvwXC0rwnrKRCZiGIZBF/ALc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:17:fd:17:d5:0b:77:5b:8c:b9:aa:16:21:fc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=0459f75f0b804c21df05c1d1c127c517b7c19cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:96:32:ee:c9:6f:65:e8:5f:8e:38:b9:85:
a7:df:77:f8:67:7e:32:51:98:a8:35:ef:03:e5:1b:
b8:e4:8a:83:62:e2:8f:bc:f0:95:5d:e2:f2:3a:63:
d1:69:f4:3b:8f:6c:b0:3a:0a:c4:79:ce:00:50:bd:
82:94:29:2d:45:24:f6:75:0b:ab:e0:51:ee:53:41:
cc:b7:f2:a1:53:a0:15:69:a0:0e:57:7d:2f:bb:08:
60:d9:21:a4:eb:ff:b5:4c:90:4a:e5:34:ef:4d:70:
bf:4e:2b:ab:7f:d4:a3:8d:d0:84:62:6b:3e:f2:90:
60:42:d7:14:31:e7:f4:76:27:d1:7f:cd:46:00:92:
d8:6c:9a:c6:ae:a3:97:42:de:7a:5e:c4:cd:db:f4:
e5:f5:14:69:5a:62:d9:b9:1f:13:26:0f:eb:83:55:
ae:a6:c8:7b:47:cb:9b:6e:0e:58:b4:7f:f7:d4:6b:
ee:68:4e:ff:7c:36:2b:65:78:53:11:08:cd:bd:16:
e0:df:bd:d9:37:1d:37:6b:25:b0:f8:b0:08:2c:e7:
a8:57:02:2f:34:ff:c4:84:8f:1a:4d:0e:a0:e4:05:
a4:b4:54:5e:0f:51:53:0c:43:9c:12:f5:59:6d:63:
2b:2c:50:8d:3e:44:9f:a4:cb:24:fb:9f:12:e3:81:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:F7:5F:0B:80:4C:21:DF:05:C1:D1:C1:27:C5:17:B7:C1:9C:DB
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:33:5c:b0:84:37:fa:0e:85:7e:fb:1d:0c:66:d0:cb:e7:6b:
d0:ee:ef:f3:ca:77:e0:90:48:aa:54:22:cf:6d:a0:be:16:3c:
5b:da:bc:6b:35:fa:f4:78:e4:2c:a6:ba:04:2e:0c:67:0d:59:
03:3c:f0:e8:ec:c1:70:6b:00:b8:2f:0e:f2:f0:e4:c3:1e:e1:
39:b4:01:0f:81:9e:b7:41:d0:88:7a:f2:1f:31:bb:88:ca:36:
88:4b:eb:a8:3a:fc:27:40:21:33:12:28:ed:b9:e6:f8:d6:cd:
69:ad:9d:e3:ba:aa:ea:fc:45:e6:cf:c7:c8:ca:21:99:0a:bf:
4d:60:f4:66:d6:87:3f:6f:59:2f:03:f3:71:d6:cb:6a:67:28:
2d:35:d5:ce:a0:59:d2:49:0a:a5:b7:66:b6:ce:62:f9:d8:c4:
5b:ab:2f:ff:63:84:fc:3f:b6:94:07:da:b7:8e:45:d4:26:08:
f0:d2:3b:a0:ce:25:ab:e4:5b:45:62:c8:a7:27:3f:22:b4:4a:
69:26:05:03:c2:ae:63:4a:ba:8f:1a:d7:b9:fb:ac:4a:e5:ce:
5b:47:67:8c:4b:f4:dd:00:23:fc:3d:ba:b8:13:13:e2:77:6b:
33:90:85:a9:a5:4a:70:e1:11:5f:a2:ac:b9:6d:28:2c:7e:3f:
ac:28:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:21 2025 by rpki-client