Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: vbcJXWKOoPSAmoWp0E00emi1heijNwTCPXMKGthSKqM=
Subject key identifier: 5C:C2:C1:66:74:8C:5A:49:1C:9A:A3:C9:32:B6:C6:CC:4F:D2:4C:26
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 0198D69886B183B91778CCB85F8334CF45DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 0F23
Signing time: Sat 23 Aug 2025 11:02:56 +0000
Manifest this update: Sat 23 Aug 2025 11:02:56 +0000
Manifest next update: Sun 24 Aug 2025 11:02:56 +0000
Files and hashes: 1: 1skXawq2SahvYTA2mnEOEbVR1u8.roa (hash: nHycrkajnYAr9VibtJNGtsv2Ftb47ENenxgpTd+DfzI=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: eM67bIf62C+rBR+IOu4aC0bGoeeHSF9jXmo7Z9bahiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:86:b1:83:b9:17:78:cc:b8:5f:83:34:cf:45:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Aug 23 11:02:56 2025 GMT
Not After : Aug 24 11:02:56 2025 GMT
Subject: CN=5cc2c166748c5a491c9aa3c932b6c6cc4fd24c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:4f:5a:56:eb:3f:c1:d7:b7:3f:f2:4f:64:
83:11:8e:7e:7c:34:99:25:0e:19:6e:91:ac:fa:89:
89:45:dd:01:f9:b1:a7:ff:1d:07:f8:c7:89:10:38:
8b:e9:94:6f:86:ce:a7:71:3f:5d:dc:3a:49:3e:be:
4e:50:73:44:e1:03:89:7b:d8:d9:0d:e2:2a:78:9e:
4d:09:cd:f3:76:f6:40:a2:0e:9b:4b:3b:7d:51:31:
98:50:53:2b:89:ad:39:c7:b3:9e:40:8f:84:dd:19:
68:8b:a4:d4:96:48:05:25:77:d1:39:78:4d:19:7e:
75:99:4a:df:0d:ba:d3:c7:77:6d:d7:7b:04:fc:8f:
21:ce:b0:22:c6:65:6d:e9:b1:b4:58:9e:f2:0f:b9:
3c:2e:36:c3:b9:63:5a:62:bf:7a:8c:c9:29:8d:b0:
30:14:a7:37:d6:c2:f3:e2:e1:3e:d8:80:af:fe:44:
21:cd:26:a6:48:c9:48:30:1f:a7:ae:d9:c4:84:76:
ed:96:63:e7:51:99:ea:fe:9e:9b:c0:ef:57:bd:11:
d8:dc:81:fb:65:76:35:33:51:c6:d6:7c:e2:ac:54:
a4:19:68:84:f6:67:30:a5:ba:c4:a4:ec:ce:3e:42:
7c:3e:45:48:be:79:05:c1:b6:c4:5a:84:84:e5:0e:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:C1:66:74:8C:5A:49:1C:9A:A3:C9:32:B6:C6:CC:4F:D2:4C:26
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cb:fb:ae:d4:cd:bf:c8:ce:31:8b:ea:74:0a:dd:2e:cf:3b:
4a:d2:a9:be:26:d5:1f:e7:51:35:1a:bc:f5:44:e1:68:c3:fc:
36:47:d5:4d:22:18:5e:e2:46:0a:1c:f2:d6:7d:79:73:c6:cb:
24:cf:64:26:83:6f:30:af:c2:77:89:ab:0b:97:50:b5:96:dd:
53:25:00:40:40:39:2f:84:de:f5:76:24:9e:27:cb:cc:e7:01:
51:fe:39:45:74:a2:31:a1:17:d6:6d:ac:ba:96:69:7e:32:e3:
bc:ae:4d:e4:17:28:43:f9:c4:94:92:32:2a:6d:6e:34:b7:65:
d8:3a:c2:2f:2d:3d:52:92:49:6f:1e:ee:1b:bd:3d:c5:c5:07:
02:aa:12:cd:c5:70:4f:bb:a1:35:64:08:61:81:1c:1b:27:52:
e0:ca:65:3e:f8:44:34:19:33:c7:2f:83:4f:f1:25:62:ed:25:
63:86:b3:8f:a7:5d:cc:97:9b:12:a3:e6:44:db:bf:6d:95:be:
59:16:b7:cd:64:e0:fe:38:ca:82:5c:0a:ba:a4:dc:f9:7a:24:
2b:9f:24:c4:97:10:2e:29:7b:f0:7d:10:5e:d2:5d:c2:f7:c6:
7c:41:48:23:bd:b7:98:5d:db:8e:64:36:39:a0:82:dd:ee:5a:
98:bf:ef:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:02 2025 by rpki-client