Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
File: f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json)
Hash identifier: bwVb7ag8nyGhiJEcmM/HNih1pEA5zLlmDOXj2T+mSww=
Subject key identifier: 13:1C:B3:9E:9E:89:C3:FB:EB:D0:D4:6C:DD:21:0E:40:D2:79:63:9A
Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
Certificate issuer: /CN=7fe68b12234bd7034301bc96b138aae277860a3e
Certificate serial: 0198D65F9BE0ADBC25D85460F30BC7D60DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
Manifest number: 04B5
Signing time: Sat 23 Aug 2025 10:00:46 +0000
Manifest this update: Sat 23 Aug 2025 10:00:46 +0000
Manifest next update: Sun 24 Aug 2025 10:00:46 +0000
Files and hashes: 1: Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa (hash: NgD/yDHNjwI5dLXtEOgTxi5zpKMG9LLhqvORpEaB0Qs=)
2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: 8h1wxK5MxnSb2q4a7pi+K1ryExVK3NrmzTBfXHjEEks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9b:e0:ad:bc:25:d8:54:60:f3:0b:c7:d6:0d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e
Validity
Not Before: Aug 23 10:00:46 2025 GMT
Not After : Aug 24 10:00:46 2025 GMT
Subject: CN=131cb39e9e89c3fbebd0d46cdd210e40d279639a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:9c:04:81:69:e2:8c:e4:08:95:26:ce:ad:
b5:8c:16:48:bb:6c:01:92:88:c4:a3:bb:29:ed:c1:
e8:a6:e4:a2:4d:6b:5e:79:3d:ae:3a:4e:66:08:65:
53:d7:32:02:4b:c3:d2:a0:6c:c3:77:61:12:c3:10:
24:66:50:53:91:07:c9:6c:83:ac:39:86:94:80:62:
bf:45:aa:3a:10:cd:6d:fc:45:f8:b3:da:fb:7d:e4:
37:44:8c:74:7d:8e:f3:2a:24:e2:32:62:77:08:cd:
87:60:64:7b:06:b1:e1:ce:35:a1:32:b3:ad:01:8d:
a7:87:af:bd:14:3a:d3:ce:ac:bf:ff:8a:b0:5a:28:
1d:85:ca:e2:29:c5:90:0b:73:58:c5:14:4c:14:ea:
98:93:59:86:b0:28:fc:74:bf:95:44:25:9d:cd:85:
eb:16:ba:67:c8:71:70:d3:69:5e:dd:5f:0e:1d:f8:
93:c1:ee:ee:84:91:8d:61:ff:9f:59:57:af:a6:33:
e6:d8:66:9b:ae:d1:39:fe:00:84:8c:a1:17:c9:01:
c4:9b:47:21:68:97:5f:47:c7:80:4b:85:4b:11:27:
81:a3:b2:e6:ab:d4:28:84:3c:c8:e4:e1:75:41:56:
79:f6:dc:88:dd:e0:35:8f:7b:cf:ab:a4:16:c5:38:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:B3:9E:9E:89:C3:FB:EB:D0:D4:6C:DD:21:0E:40:D2:79:63:9A
X509v3 Authority Key Identifier:
keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4a:6b:8c:b0:e3:ac:0b:56:79:16:d2:3c:88:7d:89:6b:01:
4e:6c:9a:7d:d4:44:67:c6:f7:dd:4d:b1:27:59:95:3a:48:3d:
38:87:2a:8d:b4:9b:a4:eb:07:e2:e3:88:38:0d:36:04:93:d0:
72:14:42:6b:22:9c:73:ca:30:48:2d:fc:a6:8f:6b:35:18:64:
a9:66:4e:90:54:ce:1b:55:73:93:dd:97:22:0f:63:87:97:43:
f8:4d:6b:2e:fb:78:aa:a1:30:84:02:93:29:2e:c3:05:11:cd:
06:c8:15:99:cc:78:fb:a1:92:e4:92:ac:1b:46:42:d5:92:6f:
06:de:36:32:16:95:7b:cc:80:15:8a:0d:6c:98:1e:ec:01:07:
25:c4:df:d8:5d:38:bf:af:5e:7f:4e:d0:36:5b:df:f7:64:1b:
07:3b:7e:5f:a6:04:79:21:c3:75:39:62:e0:ae:02:ea:a4:ca:
b5:47:78:d3:41:ea:07:60:a8:12:0e:89:cc:32:b6:6a:77:52:
d8:9a:5c:85:cf:d1:1d:bf:ca:1d:6d:ca:54:84:94:80:40:d7:
0b:27:26:f3:6f:f6:97:fd:a4:2a:c8:30:28:10:e9:53:b6:65:
b0:be:db:6e:6c:14:c1:53:fb:3c:ec:74:dc:44:6c:30:84:d4:
04:ed:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:21 2025 by rpki-client