Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: jmOcJc+W1kx1eBSQoIDrgzqdS19XoKiT4TJgvqAZyPo=
Subject key identifier: 28:13:4E:79:C3:DD:60:DE:6C:FB:F8:8D:79:C0:D5:A4:88:02:C3:36
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 0198D70590A6FFC5C903C13C5FE00386D485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 13:02:02 +0000
Manifest this update: Sat 23 Aug 2025 13:02:02 +0000
Manifest next update: Sun 24 Aug 2025 13:02:02 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: onzkv66DhuBVkRLejtROIhqJCZHyYjKo1dGSRBVjKwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:90:a6:ff:c5:c9:03:c1:3c:5f:e0:03:86:d4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Aug 23 13:02:02 2025 GMT
Not After : Aug 24 13:02:02 2025 GMT
Subject: CN=28134e79c3dd60de6cfbf88d79c0d5a48802c336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:47:ab:c7:f4:7c:d9:8f:c4:38:98:af:84:
16:79:b0:94:cc:fe:47:b5:01:f6:bd:25:6c:1f:05:
27:83:45:1f:41:cd:57:c5:64:df:37:84:31:f5:ac:
50:32:54:f9:cd:86:ba:22:2f:ed:1a:01:c9:d8:42:
0d:03:7e:00:de:8a:f8:8d:b2:5d:ee:36:5d:85:66:
57:89:f7:d8:6e:49:21:7b:f8:b7:15:15:ff:40:77:
54:d1:1a:e0:25:19:fe:e0:70:27:a4:b2:d2:ed:a8:
4a:fe:69:92:35:67:d1:4e:2d:c0:18:28:99:49:63:
2c:e9:3b:9d:14:3c:64:ae:5c:4c:27:03:63:85:60:
de:72:77:7d:44:99:4d:95:65:d0:8e:20:12:ea:bd:
f5:47:6c:21:41:e1:e3:a2:48:ac:fc:19:84:88:ca:
ed:e3:d4:99:80:7e:5a:75:99:69:ff:8d:42:17:92:
a8:af:5f:05:2e:f8:13:65:e7:fa:2a:e7:8d:27:2f:
2e:fa:61:9e:6c:49:f2:39:ab:7b:7b:07:f7:ce:02:
f4:6f:cb:19:71:ff:59:84:2e:7a:a7:85:fa:9b:ac:
77:11:a3:cc:ba:f0:27:24:e5:1e:c9:06:0b:56:59:
e8:b5:d1:3b:3a:a3:4a:97:0a:f6:b6:65:d7:03:c9:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:4E:79:C3:DD:60:DE:6C:FB:F8:8D:79:C0:D5:A4:88:02:C3:36
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8b:68:8b:d1:22:a7:34:43:d7:17:c3:57:82:c2:60:88:ab:
c1:ff:61:4d:eb:e5:41:e6:11:fb:15:bd:98:46:9f:0c:1b:10:
0c:7e:ea:98:a7:b5:4c:8b:24:23:a1:22:38:88:dc:3a:a4:12:
bd:5b:ec:a9:71:53:3e:53:b0:a7:2c:d5:bc:ae:21:03:d3:59:
63:8c:b2:56:33:8f:e8:a9:da:f6:5e:9c:2e:94:d9:bf:76:ae:
e6:af:c0:a5:f4:e2:b4:f3:22:1a:67:25:73:59:c9:c2:d1:4a:
14:ff:05:17:79:95:ae:33:e7:8f:9c:89:b7:75:67:5a:84:8f:
34:d8:4c:39:02:ce:91:d7:67:70:82:c4:4d:ff:cd:a3:1e:85:
f6:83:44:7d:65:62:f8:4d:3d:e2:66:ae:fa:96:55:4e:f4:b3:
28:92:00:3b:d5:20:86:cf:8f:83:75:5d:fc:44:62:35:7c:9d:
e3:e6:9c:02:12:93:b7:b0:16:24:ea:63:74:ee:82:52:37:1a:
86:02:62:7d:a7:99:9f:5e:0f:13:7a:2a:76:2d:b0:a9:47:9c:
df:a0:c9:4a:e4:d0:b2:b3:5f:71:3f:dc:17:78:b5:73:3e:74:
d3:7e:d2:65:64:bd:ca:4a:8f:e4:f3:a7:30:6e:cb:86:8d:f6:
df:75:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:08 2025 by rpki-client