Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: VOyNngWcrfoq+GXRi2n5lGT7KNhiDUwzOuqvSy/70V8=
Subject key identifier: 49:6E:94:10:C3:E8:00:99:16:08:05:7E:5B:2C:8A:10:2F:20:06:EF
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 0198D7E18AA9CF979784D8C3CACE04BA6726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 132B
Signing time: Sat 23 Aug 2025 17:02:19 +0000
Manifest this update: Sat 23 Aug 2025 17:02:19 +0000
Manifest next update: Sun 24 Aug 2025 17:02:19 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: XDwhf592ujoNrgYts2tij+mlA0STRdXaAVzvvHFeIkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:8a:a9:cf:97:97:84:d8:c3:ca:ce:04:ba:67:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Aug 23 17:02:19 2025 GMT
Not After : Aug 24 17:02:19 2025 GMT
Subject: CN=496e9410c3e800991608057e5b2c8a102f2006ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:87:30:4c:44:55:95:8b:32:35:f6:de:3e:
f2:ee:a9:73:73:a3:da:af:0a:8e:b9:c8:95:32:1f:
bf:ce:a2:91:97:66:cb:ea:7a:af:dc:50:28:26:43:
f0:3f:9e:77:73:08:89:bf:f7:c5:e3:d1:6a:89:47:
b4:68:56:e8:16:e0:3b:4a:4d:d0:76:e7:4e:5f:f9:
a9:29:e3:11:47:dc:54:a1:b1:da:3c:89:7c:ad:47:
30:f7:43:d1:09:fe:9f:3e:53:57:89:43:81:70:7a:
8d:17:ce:1d:da:a1:0b:58:e4:28:cd:02:aa:26:3e:
b5:b9:92:76:1d:d8:86:0a:e7:d2:68:94:d0:58:4c:
c8:cb:cb:43:03:39:05:0e:53:bd:1d:96:c4:a5:49:
b8:c6:ef:06:f4:58:48:74:a8:8f:d8:ef:07:30:58:
14:bd:ab:a5:c2:39:23:77:ac:d7:7f:05:cf:86:59:
19:e2:f6:37:de:9e:85:e1:48:e5:38:df:11:f2:86:
6c:0c:75:90:36:29:48:c5:8e:2e:98:7a:fa:f5:d7:
8d:59:fc:c9:d4:28:8f:2d:6b:60:dd:22:65:ec:92:
02:a3:c4:6a:e5:4e:37:ce:4b:ee:73:36:16:38:3e:
33:ce:0d:d0:d2:6d:cd:c3:60:63:f8:01:e2:de:38:
5d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:94:10:C3:E8:00:99:16:08:05:7E:5B:2C:8A:10:2F:20:06:EF
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:e5:4c:17:c2:2a:d5:b4:ab:a0:c1:7e:dc:66:6a:cf:1f:f1:
1b:d3:4f:b2:72:44:03:09:3d:8a:be:34:43:11:b6:ac:7e:5b:
14:80:37:45:a0:32:77:df:c7:8e:bf:fa:cc:49:14:51:58:86:
62:e7:f0:dd:0f:0f:4c:e1:49:43:bb:70:92:ee:86:9e:76:1a:
0d:d0:a6:a4:da:46:78:6e:2d:e2:69:90:d4:3c:4a:b7:8c:f2:
53:6a:43:7c:34:1a:68:21:74:ea:04:f5:58:bf:5b:89:70:20:
ed:80:03:e2:f6:c6:7a:79:bf:02:f9:85:ef:c9:f9:d9:de:11:
f9:71:da:66:93:6e:36:75:66:05:e9:e0:85:46:88:d3:2d:28:
40:75:c0:ee:4a:fd:5c:02:42:e8:e9:7a:0c:e9:ed:a8:ad:56:
81:0f:c8:fd:16:c2:a9:a1:7e:ea:04:52:85:c0:b8:6c:10:ce:
e4:d3:b9:31:d1:54:c1:bd:88:23:0b:94:e2:61:55:e8:db:16:
47:56:0a:4e:e7:d1:5d:e1:e8:6b:6b:c0:e8:16:5f:c4:00:63:
70:7a:39:4d:94:12:f8:fb:6c:cf:d4:63:91:86:d9:1b:4a:3f:
cb:39:9e:f1:27:4e:cc:dd:a6:7c:90:3a:56:ef:30:b6:ae:9e:
02:b4:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:56:22 2025 by rpki-client