Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
File: fQIT4-fr5hcKNgCo465k7ZYsDjY.mft (raw, json)
Hash identifier: W669ZKQK7AseuGhoMSeKUTgz4gy3cJvFdfABHm+Prt0=
Subject key identifier: 87:4F:D0:AD:77:4D:FE:36:F0:CA:B9:E1:CC:E2:65:7C:BB:30:43:93
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 0198D473F13FBBB3BE6F5DBF795C8D82D8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:44 +0000
Manifest this update: Sat 23 Aug 2025 01:03:44 +0000
Manifest next update: Sun 24 Aug 2025 01:03:44 +0000
Files and hashes: 1: NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa (hash: O7U2IilgFNx0uKZ0Sr7mdLoGiE/mqht2K9UbhPNacVM=)
2: P4rhr2yvQsT2Wmsa0d3b9mzRihQ.roa (hash: yJrwkDYUS+18A8gxekBRmTpvchECkoVfjLp8pGWlkB0=)
3: P_efas48rvkeOWLowealn6FM2EU.roa (hash: bHQu5iQgYpW7McRBDPs2F3TVgL2C6692qQjIPdJ6jr0=)
4: fQIT4-fr5hcKNgCo465k7ZYsDjY.crl (hash: OjhqAiFtu1wMFP1/Yd45WV1jXbJm0ZT/s4R3rWDUPTs=)
5: lMnxmNh0WyR-ZyXRmR4VxessOW0.roa (hash: d+d+I0SIA2DkllPKcjDwQF5GfnIiXguhQ7tmZZ0v1io=)
6: xIJo2EuzM_PScXOHUg-DUkxIyEk.roa (hash: DPBdyOvextHK9GmgkjEDN72tHol0hR/S27niPvwBhyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f1:3f:bb:b3:be:6f:5d:bf:79:5c:8d:82:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Aug 23 01:03:44 2025 GMT
Not After : Aug 24 01:03:44 2025 GMT
Subject: CN=874fd0ad774dfe36f0cab9e1cce2657cbb304393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:1b:80:ba:04:35:3a:04:1e:81:cc:90:f1:
b4:22:b3:68:3c:a9:54:2b:c4:cc:40:a2:9f:d5:1e:
49:5e:4e:41:9f:fb:e6:7e:e9:f6:dd:62:a0:94:03:
88:36:ca:67:07:75:2b:cc:1c:63:83:18:92:9b:08:
16:81:3e:a7:d9:a4:a4:ba:47:de:14:ce:bc:77:14:
52:a3:c5:39:75:ea:9a:f0:b2:d9:86:6f:ae:95:0f:
c3:d0:bb:cc:f8:3b:8a:43:6f:f1:83:92:27:50:29:
25:3c:18:a9:40:d0:6f:a2:ca:f7:58:b4:8d:9b:8f:
c1:88:cd:9f:d5:6f:7e:d4:52:36:92:a5:dd:ba:54:
9f:81:d5:fa:39:07:be:e9:14:c1:2e:45:d3:11:5f:
82:be:40:f4:af:8b:a4:c1:13:fc:cd:8c:66:5c:91:
1d:4b:f4:9c:83:3a:30:36:95:dc:29:57:d1:b1:38:
5a:09:2a:0d:7e:65:7d:bc:8f:d7:e3:4a:11:02:10:
fb:92:00:ee:ba:33:fa:33:df:df:34:f6:1b:31:9d:
d7:93:c7:29:1c:4a:a8:a9:0f:43:e0:6b:dd:c9:48:
8e:a1:d5:dd:4e:21:3a:19:8c:91:48:d7:ba:9e:c8:
5d:66:38:b2:a2:5b:d0:db:66:ee:e3:f5:02:53:c2:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:D0:AD:77:4D:FE:36:F0:CA:B9:E1:CC:E2:65:7C:BB:30:43:93
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ea:1c:d6:6c:55:19:c7:d7:80:54:94:f2:c5:79:88:40:e3:
5a:79:6c:4c:c2:0c:da:c5:90:72:08:52:e4:ec:b7:72:08:a7:
12:bc:87:17:46:f7:c8:1b:d9:08:d5:c9:26:e5:cd:4d:20:15:
0b:61:fe:9d:3d:f7:04:53:b9:95:a3:68:09:e3:d3:99:22:c2:
33:20:2c:07:48:60:50:3e:9a:c4:7e:56:11:e2:9e:eb:e0:8d:
d4:cd:09:5d:5c:eb:d7:73:8d:a8:86:ab:4d:25:77:b6:56:bf:
71:45:c2:25:cf:ba:d9:5c:47:b2:6e:03:fe:de:21:95:af:31:
7b:cb:5d:02:25:25:d0:cd:0d:a0:d4:ee:3c:eb:6e:53:6c:c2:
d6:5a:73:26:0a:70:b5:32:61:ad:0f:d4:98:98:50:fb:71:3b:
ce:ff:af:70:b1:2e:27:00:4b:31:93:87:6e:03:93:2a:17:d1:
6d:ee:d1:0c:34:8f:89:a7:30:d9:5a:68:7d:5b:81:1f:5c:b3:
fa:83:a9:ea:a5:4e:56:5a:14:0d:f6:38:8e:e8:57:56:17:7d:
66:6d:71:02:5a:5d:7a:3d:95:a9:6a:9d:70:09:c6:ca:b0:16:
06:53:52:89:86:d7:b7:f3:26:76:9f:66:86:ae:b4:8f:b3:76:
84:57:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:15 2025 by rpki-client