Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: JHNdrh5R8a3dQzmxwUDxLpEk3RqlI9VLYdcFr5b4cIk=
Subject key identifier: E0:F8:92:AE:8D:7A:F0:7F:B9:C9:57:19:95:3A:EB:E9:E9:8E:77:95
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 0198D8BD41C78156B8C4986BAB0CC10F7A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 10BE
Signing time: Sat 23 Aug 2025 21:02:18 +0000
Manifest this update: Sat 23 Aug 2025 21:02:18 +0000
Manifest next update: Sun 24 Aug 2025 21:02:18 +0000
Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: 4vqY8k/3HIfg7asRrQxRgu3fy85QMT/uVfTxI5oiPNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:41:c7:81:56:b8:c4:98:6b:ab:0c:c1:0f:7a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Aug 23 21:02:18 2025 GMT
Not After : Aug 24 21:02:18 2025 GMT
Subject: CN=e0f892ae8d7af07fb9c95719953aebe9e98e7795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:71:6f:0e:7b:0b:b1:6d:58:a5:1b:bb:60:
e8:18:77:aa:d0:0d:43:dd:71:08:71:19:d6:a9:bb:
ad:dd:07:69:f4:24:0a:1c:c8:e7:de:17:04:c2:f1:
55:ef:9e:89:8a:09:1c:26:65:36:c2:82:72:0f:58:
0f:cf:ea:66:1c:8b:04:a8:1f:38:34:f4:d4:95:31:
95:27:1b:71:93:b6:0a:4a:12:8e:79:a9:0a:c3:19:
81:98:b3:84:79:d1:19:aa:14:c4:9f:92:10:b7:6d:
e4:17:b3:37:d5:bd:53:ed:92:68:a8:43:01:3b:8c:
e2:47:b9:58:99:3d:ec:e8:fb:0e:76:75:3f:4b:24:
27:7e:56:4a:89:ef:53:0a:f7:9b:0a:fb:a0:9c:e8:
63:49:77:e7:3e:1d:f6:c9:3c:84:92:e5:5a:40:bf:
ca:2f:28:ce:30:21:fd:ed:6a:41:b9:ef:23:5a:ae:
9f:a0:72:25:82:23:a5:cc:92:8e:6c:85:fa:7f:a4:
3e:ec:29:33:30:aa:68:c9:ee:2c:08:f2:a6:73:c7:
16:a5:af:32:38:ad:eb:ae:d3:0b:ac:c3:01:39:8b:
c6:06:a4:bf:32:21:9f:e0:dc:d3:2a:86:cb:b1:d8:
a5:a4:58:43:ba:44:e0:0c:83:a4:c7:6b:47:f1:57:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:92:AE:8D:7A:F0:7F:B9:C9:57:19:95:3A:EB:E9:E9:8E:77:95
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:03:9f:cf:4c:b6:aa:d6:66:69:98:3c:02:39:11:80:9e:5d:
b5:b8:6b:24:20:b5:70:7d:0b:e5:24:92:c5:2c:a8:aa:dc:47:
bb:dd:8d:d0:e2:8d:69:f3:79:ba:51:4c:b5:82:da:dd:a7:37:
0d:fa:31:75:3f:2c:c5:cb:ff:e6:1b:dd:46:bf:86:8f:d1:7e:
d3:04:11:48:28:d9:a0:e8:f2:f1:89:1d:f0:06:23:ac:75:a4:
55:37:39:d7:ac:27:a6:69:ed:01:8b:54:c0:ce:52:c0:f6:a5:
7e:64:ed:78:21:08:4d:9d:fc:7a:79:77:9b:2b:11:99:16:51:
ad:c3:f6:67:e1:95:98:ca:0f:e3:a2:b8:fd:be:2f:5e:ef:60:
f3:40:aa:5c:00:c9:ab:7c:be:d2:4b:dc:59:3c:1b:6f:7d:d3:
b5:8f:38:80:c9:e4:c1:d8:e0:ae:87:8e:77:15:c8:19:61:5a:
d6:ff:53:2f:6c:08:7c:3c:e6:3c:82:51:31:4d:89:80:62:c7:
c5:46:ce:be:05:cc:39:17:9c:45:bb:09:ae:1e:1e:b8:96:65:
a2:a4:ab:9e:b2:6a:2d:96:40:da:cc:18:17:94:bd:fa:ac:7f:
aa:ee:1e:f5:8f:ce:f6:0b:bf:a6:40:53:98:3c:2c:7f:ca:d0:
e7:0a:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:02:34 2025 by rpki-client