Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: iQfb8/RXMYwBzSnyWhVryBHeeNae/H2Uw0PND3ghYWA=
Subject key identifier: F5:4D:A9:78:EB:61:1D:A4:F0:E1:13:6A:AB:76:2A:04:B4:A2:6C:51
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 0198D6985E7AA9E75AA3F1F3E3BA03B9F3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 0D71
Signing time: Sat 23 Aug 2025 11:02:46 +0000
Manifest this update: Sat 23 Aug 2025 11:02:46 +0000
Manifest next update: Sun 24 Aug 2025 11:02:46 +0000
Files and hashes: 1: 2CYNXB5qZHN7in7RGaGVmXvb7Xs.roa (hash: n74UAylTv760Shvrd+PI6ipCj4rV+2WaR3QnP3+8e6Y=)
2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: v04jauPjEZsWfb8IUIL+v/0CjulYP3vrBeer2ctqZ1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:5e:7a:a9:e7:5a:a3:f1:f3:e3:ba:03:b9:f3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Aug 23 11:02:46 2025 GMT
Not After : Aug 24 11:02:46 2025 GMT
Subject: CN=f54da978eb611da4f0e1136aab762a04b4a26c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:5b:b4:89:ef:c4:f5:b6:5b:d3:a9:40:9b:
74:c7:93:f0:60:e2:66:97:b0:0f:59:3b:94:15:72:
33:7c:a9:95:18:0e:87:24:f0:00:d6:97:9f:f3:6d:
ba:69:17:70:76:d4:64:3d:d2:57:65:3b:d3:38:2b:
37:cb:fb:49:01:41:5a:2f:8b:ff:a3:e7:97:bc:92:
e5:e5:28:ac:60:5f:f3:1b:d7:f6:03:bd:c4:16:71:
72:ef:44:a9:6d:d9:49:ff:7b:e2:00:13:ed:dd:d6:
c1:fc:a9:5c:b2:54:b1:6a:fb:03:49:56:14:6a:71:
07:d1:7e:35:12:50:01:fe:00:28:0c:5a:a1:f2:40:
cd:41:31:82:1f:5c:48:97:67:5a:3e:fe:e3:5f:a6:
73:fb:28:dd:1b:8a:88:cf:e9:bb:78:b8:f2:b9:f0:
5f:d5:1c:24:2e:51:b7:b0:12:31:3d:42:04:2f:86:
ba:27:5e:d5:d1:4c:1a:75:6a:ba:ad:65:ed:8a:b8:
6b:d6:03:af:41:6f:d4:16:de:ee:1e:ac:46:dc:c4:
29:1b:09:57:00:57:56:f7:97:f1:e9:0e:95:de:23:
37:87:63:bd:07:7b:3f:38:67:3f:46:42:ff:cb:27:
c6:5d:c9:07:b4:cf:79:df:6e:cb:82:4d:77:9e:06:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4D:A9:78:EB:61:1D:A4:F0:E1:13:6A:AB:76:2A:04:B4:A2:6C:51
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ad:e1:9b:78:59:bf:eb:87:2c:60:3a:fb:0b:0f:84:40:50:
8c:3f:98:6e:0e:e4:e6:6e:7f:5d:b7:6e:5b:04:7b:51:d3:7b:
49:c7:56:e2:98:ce:c8:9c:80:c1:59:41:96:e9:85:04:58:f1:
26:a3:17:e0:ec:a9:01:1c:9f:0d:59:2f:b1:1b:7f:81:ba:f4:
62:71:f1:5b:10:d7:da:03:0d:01:7a:d6:79:22:a1:5c:82:d5:
1d:c7:ea:43:f0:9d:dd:9e:5d:0e:2c:c8:9a:4a:3b:36:e7:99:
6d:66:f6:f3:26:3d:a7:66:bf:c7:58:93:5b:cf:45:90:7e:25:
6c:a9:6a:9e:c2:12:f6:d0:27:f9:dc:65:73:3d:1f:2b:c3:e7:
b0:e0:84:b9:40:75:13:93:95:92:08:b6:2b:3f:a7:42:4e:56:
79:b9:33:9f:48:09:31:5d:d8:2f:7f:cb:a6:10:a3:03:78:4d:
e9:94:2f:5b:46:72:05:00:84:9f:4d:d6:7c:92:83:49:1a:5d:
f8:b6:7e:9b:f9:72:8b:27:db:dc:2e:7f:d5:59:fa:d5:fb:e9:
6c:ba:2b:cf:f8:10:ca:50:68:19:26:dd:d8:73:1d:2f:5a:dc:
f9:b5:cc:35:59:76:ad:12:2a:84:c8:25:43:15:c1:26:d5:0d:
e1:2a:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:45 2025 by rpki-client