Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File: fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier: N8of+A+qCIu28w3S2C6pWuWy1edjSc4y+B2HCObInxk=
Subject key identifier: D9:05:EE:38:41:43:85:39:16:99:EB:A0:04:87:D9:32:18:08:28:60
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 0198D5F1CA44B1258F480E4B1FEF0090FC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: HHlEIHLaS3GMguRjiZVeXZtaB1U.roa (hash: YlDlqGcFKkVbm+bI6++WiC8vTEcJ4i7q+bRlRvHQvDM=)
2: JFfXWjIJHVSFeGbySM8n0cwBw74.roa (hash: kgkONWoOOrXSbcj6bdCOVH5+Q3j9I/JtMm/NZI6wPhU=)
3: YWh_o51jvYOy_7yJxKWIzC6AjVw.roa (hash: 5h6ADSbcLhyyb1o530CRr7FXSLev1xEONn8X3G0ic1Y=)
4: f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa (hash: f/FLhL5iK4w35mAjQuNFPLV5x3iPtqx+dEGqwTvpyc4=)
5: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: mzJq1c0kSfZ3EM03eALGJ5l4he3i+zLjgrSBxvhDuxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ca:44:b1:25:8f:48:0e:4b:1f:ef:00:90:fc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=d905ee38414385391699eba00487d93218082860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:10:7d:3f:bf:05:c8:21:62:e1:9a:c2:7b:
15:82:58:5b:fd:06:bb:0a:2b:0f:a5:40:df:bf:6d:
f9:d6:5b:8f:fe:f7:c6:4e:40:9f:c4:11:85:05:5d:
3e:b0:5a:b4:03:75:7d:0a:f4:11:12:f8:65:1e:a5:
d6:87:4d:1c:26:bc:1d:dd:3b:8d:bc:f7:aa:5b:39:
62:30:b4:ff:46:9e:89:25:14:42:9b:11:8f:d4:d1:
ca:00:a4:f9:34:da:6a:b6:4a:a6:6f:d2:bb:c5:f0:
30:19:30:d9:ec:cf:1d:0c:26:39:1d:2f:a4:bc:57:
51:7a:a4:62:4c:0f:06:e1:bb:91:73:d4:73:a5:57:
22:d7:be:d7:81:69:2f:5d:7f:66:50:ef:80:a5:89:
18:57:42:69:f9:5a:43:b6:7c:74:f9:45:22:05:c3:
1a:be:d8:dc:00:98:37:0f:1f:f1:d6:12:aa:5f:c4:
76:3c:9f:c7:98:c8:d2:4f:a6:dc:61:1e:43:1a:0f:
f6:01:2c:af:ae:9c:8f:a1:70:7e:af:3c:24:69:7a:
b4:d0:63:d4:96:ce:52:cb:d5:f6:41:5a:05:37:53:
c1:8d:f3:ee:81:f7:53:3b:4d:f9:6e:5d:d9:d7:91:
7f:3c:3c:48:32:78:5e:c8:d8:7f:72:84:d4:5f:54:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:05:EE:38:41:43:85:39:16:99:EB:A0:04:87:D9:32:18:08:28:60
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:03:69:fd:71:3c:be:bc:d8:64:32:c8:4c:b5:1f:66:26:c1:
f9:b5:38:6b:e1:8e:07:85:a0:f4:59:16:41:0f:5c:61:d2:91:
60:96:ed:02:c5:a9:0c:ca:36:42:7e:ab:f6:28:0d:8c:39:4b:
11:f3:45:42:06:eb:16:a2:ac:c1:e0:cc:05:67:45:51:ca:a9:
0f:fe:05:b3:ca:76:e7:8f:ba:f2:79:d8:2e:86:03:2b:d2:02:
4e:3e:6f:37:c6:05:ba:40:c5:d0:d0:61:b4:24:c1:3d:fa:9f:
2b:a2:3c:30:19:8d:25:d2:05:45:4b:37:a3:72:05:b9:62:97:
99:56:03:0e:55:95:98:3f:d9:0f:90:52:69:d9:7c:a0:01:73:
85:d5:e6:e4:69:1f:90:8f:c1:09:5a:5d:b9:d5:b4:06:10:2c:
60:c9:b2:24:b3:cc:ae:da:8d:b6:13:a0:81:32:c7:b4:fe:fb:
65:fb:ba:93:28:71:cc:df:be:3d:34:2d:2d:50:bb:2d:6e:2e:
f0:67:34:d5:78:9a:b3:d3:ce:83:37:77:18:45:63:a3:2f:b4:
df:d1:72:1d:13:03:72:a2:67:57:1a:40:81:b3:cb:c5:13:c9:
9b:92:42:b0:d7:00:57:57:aa:83:69:cc:f3:b3:f1:f5:43:e8:
c8:b0:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:40 2025 by rpki-client