Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File: c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier: i6HPA4plS5YwVoFWoyYiZxYek/bTTg5KvZBAsGjFZxc=
Subject key identifier: 95:8C:77:7F:C4:2A:1F:28:68:1A:96:1C:07:2E:94:28:08:7A:9F:8F
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0198D5160D0ACDDE17D920EBF4417D5DF973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 04:00:48 +0000
Manifest this update: Sat 23 Aug 2025 04:00:48 +0000
Manifest next update: Sun 24 Aug 2025 04:00:48 +0000
Files and hashes: 1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: jtFKkcVK2eE4snONyDE10bheq2mlRsTPU1FKi6LOPcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0d:0a:cd:de:17:d9:20:eb:f4:41:7d:5d:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Aug 23 04:00:48 2025 GMT
Not After : Aug 24 04:00:48 2025 GMT
Subject: CN=958c777fc42a1f28681a961c072e9428087a9f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:6c:aa:07:58:5b:75:27:3c:4e:f3:00:56:
98:85:bf:13:72:45:d8:b7:cc:23:7c:e3:b3:c7:ae:
5c:06:cf:62:02:16:50:2f:ba:39:28:04:0e:13:28:
ab:56:d3:2b:11:8a:0d:75:f4:02:2b:ef:fb:4d:6a:
86:d0:92:f2:66:27:c4:49:c3:70:a7:68:a8:06:8e:
6f:74:f7:ce:ca:b8:2a:76:45:0d:0b:f5:72:da:5e:
ea:4c:57:a1:81:7a:c6:57:7e:5f:30:7e:1d:a7:af:
45:f6:97:9a:70:66:60:23:41:fd:66:7f:36:99:86:
c3:99:4f:2f:aa:ce:c7:e2:fa:32:3f:db:86:89:e6:
a3:f9:7b:57:d7:f2:e4:d4:30:81:fd:c6:f3:9f:0d:
a8:4d:88:e3:41:95:07:ef:8f:d6:8f:d2:02:fb:be:
93:f5:cf:ea:05:3d:7b:66:ad:1d:e4:34:c4:4b:35:
a2:3b:57:5c:fc:fc:b8:53:13:87:19:a3:cd:7d:30:
81:78:fe:b5:d2:ce:ba:a8:dc:df:4b:7d:36:7c:de:
e1:ac:2f:d3:38:25:9b:7c:81:e6:2b:e8:2c:9d:3a:
9a:b2:94:d6:af:97:cf:f3:db:7a:95:40:ea:86:50:
86:0a:12:75:b1:dd:81:ff:43:5a:29:27:28:fd:d5:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:77:7F:C4:2A:1F:28:68:1A:96:1C:07:2E:94:28:08:7A:9F:8F
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:53:88:98:73:0d:e6:0e:67:cf:3f:9a:70:0c:3f:16:ba:55:
56:1a:80:a2:c5:db:8c:3e:17:7b:af:d5:fe:3c:c1:cb:21:ab:
d4:d1:b4:28:05:3e:fd:84:f0:5e:20:bb:51:99:d3:d7:9f:ca:
87:9b:2b:df:6e:fd:fa:05:fe:66:01:be:44:fc:44:5c:6f:e5:
fe:68:a8:ac:c8:19:3e:5a:a7:70:52:57:2d:c8:cb:7c:55:f7:
e4:45:23:26:9a:a5:3c:50:ff:85:93:67:26:db:28:3f:38:e4:
de:fd:f9:c1:03:cb:fb:13:fd:01:f3:4b:e1:f8:33:fb:ae:d1:
24:48:b3:da:8d:ec:5e:ad:40:a8:ed:f3:29:25:ca:45:38:2d:
99:2c:0f:d7:85:a9:f3:e8:d6:61:7e:9e:f1:48:32:3d:f0:d0:
23:60:7b:65:6e:db:84:23:14:dd:e8:b9:6f:f3:d9:75:9e:e8:
76:97:f4:62:61:3a:88:b8:4f:3c:66:3e:cd:2d:62:08:21:7f:
83:12:e8:e2:f5:94:0f:0b:b0:3e:8f:cf:f4:bc:a1:16:46:c9:
a8:5b:de:7a:01:d8:74:b5:19:59:7f:e0:71:cf:97:21:fc:67:
40:17:f2:71:f4:a7:a9:5b:39:c0:d8:b2:ae:06:1c:4f:76:a0:
15:1a:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:07 2025 by rpki-client