Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: 7x9KLIcJwhsfUCTXNRUVH42psPrb4NEWNklEP+1EhkQ=
Subject key identifier: 7A:ED:A5:5A:C0:E1:3A:87:AD:B6:C6:B9:E3:FF:1B:BE:91:11:4E:CA
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 0198D5BC4A9AAB69ED2A082F05DE2527F283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0E91
Signing time: Sat 23 Aug 2025 07:02:23 +0000
Manifest this update: Sat 23 Aug 2025 07:02:23 +0000
Manifest next update: Sun 24 Aug 2025 07:02:23 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: MkHfc9+Nv2wtV7jjZu2FKbhRiO00Svt1AHjAHiTiTe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4a:9a:ab:69:ed:2a:08:2f:05:de:25:27:f2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Aug 23 07:02:23 2025 GMT
Not After : Aug 24 07:02:23 2025 GMT
Subject: CN=7aeda55ac0e13a87adb6c6b9e3ff1bbe91114eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:b1:e9:c8:ae:85:01:1f:e1:60:51:44:a5:
7e:ae:03:d3:f0:af:e7:f9:d3:ef:b0:3f:1c:f1:15:
07:a1:b3:76:07:7f:98:a8:db:46:e8:a4:00:0e:4b:
35:38:c7:1e:6e:af:d4:ea:e3:12:5a:a4:f9:5f:eb:
30:ef:20:77:81:4e:da:35:3c:e7:65:bd:2b:c6:08:
89:f9:d9:f1:46:fa:5e:13:c2:92:30:3b:1f:d9:f2:
02:52:0b:45:d0:67:5f:4f:1f:b7:05:db:6c:23:05:
ed:48:6f:e4:f5:75:f4:85:3c:fc:f0:52:4a:39:26:
ae:5f:2f:9b:88:b5:b3:7b:ed:25:e9:c0:0c:da:e7:
44:29:59:15:a4:8e:6b:d4:84:02:c7:e9:1d:3f:8c:
ce:61:22:7d:2b:9f:80:5c:d3:10:b3:84:d5:55:1a:
dd:9d:05:37:42:ec:62:f3:b8:7a:45:74:7a:e6:ab:
6a:89:d5:19:f7:0a:01:88:b7:c2:11:4b:6a:69:ed:
29:ab:01:10:11:25:af:02:57:d1:f6:4d:5d:3c:13:
a8:ae:32:fd:9f:74:81:31:d2:59:db:ce:c4:e4:bc:
85:4a:fa:c1:2f:88:de:37:b1:68:fe:a9:e1:57:01:
1d:3f:d1:56:8b:c5:32:30:1e:f2:46:63:6b:ff:ef:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:ED:A5:5A:C0:E1:3A:87:AD:B6:C6:B9:E3:FF:1B:BE:91:11:4E:CA
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a3:0b:21:71:ba:91:b3:4b:24:1d:6b:4f:8b:6d:61:e8:b3:
77:af:3d:4c:4e:d3:89:e2:8c:77:9a:f2:f8:2e:1a:25:76:49:
e2:b2:92:63:e6:c0:82:94:3e:4d:d1:91:50:04:80:b7:44:36:
f8:0d:89:3b:88:be:1d:11:86:44:d2:2e:7c:ef:27:36:df:07:
66:9f:07:ca:09:83:ab:c2:2b:19:0c:dd:42:fe:63:87:3b:9e:
b7:b4:bb:f7:42:d3:78:68:47:61:bc:70:34:c3:c6:4c:8f:bd:
d2:80:bc:65:a6:45:5d:e3:be:a7:c9:b9:a2:81:93:3a:87:0d:
89:e2:0f:4f:8c:b0:12:77:ab:63:f3:5f:52:a6:98:7c:d4:b3:
0d:b8:3b:ca:05:ee:4f:bc:7d:6f:ab:6d:05:83:68:fa:18:0e:
69:0c:d0:53:bb:3f:76:33:58:22:6b:96:7c:98:cd:b0:07:15:
b7:84:ab:de:3f:47:db:da:ba:9f:b9:95:56:3e:f3:49:e3:1a:
97:b3:e7:2b:20:53:64:2a:35:01:57:e9:03:35:f9:02:a6:6c:
a8:16:45:ac:0a:6a:8a:49:e2:54:cc:37:db:1b:8a:15:bc:ac:
cb:b6:17:36:47:0f:f3:dc:9c:e5:73:e5:85:9d:40:a8:de:61:
51:7f:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:30 2025 by rpki-client