Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier: 1LcXcoh+9lN7JyjLmooVdAtufXyGDrW6VadP5lFIeWM=
Subject key identifier: 9C:91:34:D8:17:D9:F3:B4:C7:C9:0A:B6:FF:FD:FA:68:B3:A0:F9:D6
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 0197C838BB3275B5A15283B59BE1CF1B898F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number: 0E8D
Signing time: Tue 01 Jul 2025 23:00:50 +0000
Manifest this update: Tue 01 Jul 2025 23:00:50 +0000
Manifest next update: Wed 02 Jul 2025 23:00:50 +0000
Files and hashes: 1: 1-7k1BSVErLFvFpR9s4khkCRgcx8.roa (hash: OjA0u5BcNw+jfDFu4scr2j7odbJKWBNkQN28Ky+RjrQ=)
2: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: nPiP6bk0Uoasdq7m058boUWOq2i/88/3GGMxzeMKhoc=)
3: ZYpOnf_RMjUdQRpY5DSmoRhYWXo.roa (hash: 1MZ14FF0b6BfjlsKqzDJT2k9XMlDgyRHFf/YVDEx3LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:38:bb:32:75:b5:a1:52:83:b5:9b:e1:cf:1b:89:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Jul 1 23:00:50 2025 GMT
Not After : Jul 2 23:00:50 2025 GMT
Subject: CN=9c9134d817d9f3b4c7c90ab6fffdfa68b3a0f9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:bf:63:db:a6:2e:ea:76:c5:bf:cd:84:41:
e0:07:f2:0a:89:05:d8:78:87:38:8a:c6:2f:df:86:
ca:64:72:2c:5a:99:3f:4a:7e:1d:1a:95:e6:34:e7:
4c:d6:fc:ec:2a:45:ac:2b:04:8e:26:9d:40:28:de:
2e:44:aa:59:ee:4e:18:56:73:61:a4:57:0d:c5:90:
4f:a3:d6:50:89:3d:2a:b4:2b:74:52:d2:b3:2b:74:
68:d9:29:76:64:11:d8:c3:5e:6b:a5:7a:55:d2:be:
d1:cc:a5:7d:38:ee:fd:51:49:55:b5:dd:ae:f5:5d:
ed:7c:9c:ee:a6:61:1c:a2:43:46:e5:ff:77:61:6b:
52:4c:48:8d:7f:25:37:fb:4f:ad:33:9d:c3:99:74:
fd:0b:7a:67:2c:58:a6:4e:db:2d:32:6e:cf:5b:43:
7e:41:41:02:f9:8e:3e:b5:64:e8:88:14:ca:8d:a9:
b9:c7:13:b9:a4:e2:b8:14:34:d7:c9:12:b9:63:f6:
40:22:4f:c1:b2:64:33:a8:34:b7:ca:33:8b:ad:dd:
35:0d:39:7f:2d:11:63:28:40:6f:3a:ce:a7:30:fc:
df:cc:17:c2:8f:9b:c5:f6:5c:48:53:06:18:8d:b8:
ab:49:7a:46:b3:f6:0a:e1:fd:c2:9a:c7:26:25:57:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:91:34:D8:17:D9:F3:B4:C7:C9:0A:B6:FF:FD:FA:68:B3:A0:F9:D6
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1d:f7:de:f2:f1:65:a3:79:44:6e:7c:5a:b9:12:d8:4a:44:
ce:6c:b3:66:cf:a6:f5:b3:46:5f:f2:87:09:5c:1f:71:eb:13:
36:86:9c:90:c3:f4:f4:da:26:7c:34:58:62:48:2a:d2:8b:84:
d9:33:64:bb:1d:1c:3a:85:64:1a:b0:51:18:0f:bd:86:aa:6a:
26:3d:ed:1a:db:ea:9f:3d:bc:27:01:ed:1b:e4:cf:dc:82:e7:
36:c8:f7:7a:91:ea:ee:2e:77:08:86:ec:05:c4:4c:99:f4:01:
a0:6b:df:44:55:fc:50:87:2c:76:db:25:9a:18:1b:a2:51:86:
21:89:e5:d9:da:c7:4e:e1:f9:8a:4f:45:e3:4c:15:db:10:80:
dc:4d:52:ef:51:38:1a:d6:4a:bf:15:7b:f2:09:9b:f7:43:5c:
e9:a0:bb:9a:8d:63:6e:cc:e1:be:67:a0:08:cb:4f:60:6a:65:
73:f9:b1:fd:e4:cd:b9:1f:fe:06:e5:9a:c6:01:26:d3:81:2d:
8b:b5:ef:35:33:be:b6:f8:42:44:3e:85:69:68:a1:ba:0a:bb:
81:26:96:37:81:a1:6c:08:45:23:0c:e3:ec:a6:89:59:5e:38:
65:00:86:9d:b5:a6:2f:83:79:f8:ea:cc:72:94:ce:fb:20:60:
a0:d6:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:49:37 2025 by rpki-client