Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: RC55oqP8nRNKIgv6wrY4qUMUMobh9o7GphFga29f/vQ=
Subject key identifier: 85:79:0F:B7:9B:57:5B:2D:17:0C:B8:D9:6B:2E:4C:C7:07:4D:6C:F6
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 0198D5BB99C5EEFE8889EE32D0ABC72FB014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 0AD4
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: 5xWsokw9Bl4ZzJPj4uR/PlZ1yenYS7k5OZfNjUZ+4RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:99:c5:ee:fe:88:89:ee:32:d0:ab:c7:2f:b0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=85790fb79b575b2d170cb8d96b2e4cc7074d6cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:b3:b2:eb:8b:94:b2:ea:67:b9:43:61:d6:
3d:39:bb:40:b6:86:d3:1e:51:62:99:bc:97:59:14:
c2:47:78:10:ca:be:0d:3d:79:28:55:90:4d:b3:59:
1b:c4:29:ce:1b:99:45:39:e8:cf:fe:97:cb:5b:04:
0a:7e:b8:e3:aa:6c:36:71:7d:2e:aa:ed:0d:70:71:
aa:80:44:0c:b0:0d:ef:cf:0d:cc:42:dd:6c:d0:34:
f0:3a:c3:78:2d:07:a1:06:41:04:51:ac:ce:fe:91:
2e:dd:c5:1c:e8:6c:cb:13:83:48:89:fc:c3:7f:2b:
42:ef:60:67:d1:a6:e3:24:34:e1:fe:62:32:a5:88:
50:94:d5:39:b2:31:bc:6d:60:62:49:9b:b9:e9:d9:
f5:23:52:93:73:f5:1b:6b:17:cf:b1:f6:1d:ff:cb:
f4:42:fb:4e:87:a2:cf:6c:0e:bb:35:31:fa:53:ef:
5b:46:c2:d5:4f:db:e8:af:6f:6d:6e:c6:95:40:c8:
3e:74:65:05:43:dd:21:3d:75:5e:7e:c9:81:d8:5a:
ba:9f:d0:93:c0:7e:0c:b7:f6:a1:1a:db:da:fd:03:
34:82:2e:37:7b:cf:7b:26:2a:c3:ff:42:96:43:59:
e3:04:17:29:b4:5e:d4:32:35:40:6e:fa:fc:2e:2e:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:79:0F:B7:9B:57:5B:2D:17:0C:B8:D9:6B:2E:4C:C7:07:4D:6C:F6
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:ae:dc:1e:41:1b:60:77:32:f4:2c:d2:6f:02:e2:6b:01:
02:a4:bf:17:9b:8d:d5:93:70:93:b2:39:bb:47:6e:65:e1:d3:
7d:c9:22:e9:a8:09:19:bb:01:dd:5e:0d:ac:80:75:76:94:a5:
f5:6e:51:f2:d0:34:15:93:92:51:c8:26:48:c9:28:62:81:2b:
9e:19:57:c9:f5:bd:49:73:8e:4d:a9:9d:6d:aa:10:d1:f7:79:
47:a5:8e:57:fb:64:de:70:94:f4:b8:46:db:6a:05:a6:e3:60:
89:d4:8e:29:f2:b6:20:47:fe:2e:ca:7a:b2:46:cb:f3:b2:7b:
d0:e0:27:78:a3:78:af:cc:2f:1a:76:81:e6:bb:af:b0:0e:fd:
7a:cb:4a:7d:5a:e7:2f:12:59:0d:c1:0f:2a:04:66:94:6a:32:
8b:64:d9:2d:5d:be:05:87:4d:a2:c5:59:9c:1a:10:c8:9a:2b:
c3:20:be:87:2e:7d:35:df:61:2b:49:b5:b1:ea:5d:c4:86:6a:
e1:64:69:39:db:21:dd:2a:43:2f:74:d4:72:00:0f:13:d3:20:
4c:70:05:55:a9:12:40:b2:86:3b:a9:51:eb:fc:a1:7e:8b:ac:
d0:9b:6c:63:ad:87:8e:0d:40:5c:39:1f:8f:1c:04:03:c4:43:
83:ad:00:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:47 2025 by rpki-client