Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
File: fciWyziZxbZIjRxGU_ruSyMVHx8.mft (raw, json)
Hash identifier: G5XhZDt8jTRSpUCCpim6reVnN9qPbD4yvIsQ8XNdScQ=
Subject key identifier: 2D:B9:3A:74:E9:26:BA:E2:E6:1F:DB:E7:6C:13:9E:D2:92:64:AF:07
Authority key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Certificate issuer: /CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Certificate serial: 0198D5F14101390A211E9DC8EBF549D4ADAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 08:00:14 +0000
Manifest this update: Sat 23 Aug 2025 08:00:14 +0000
Manifest next update: Sun 24 Aug 2025 08:00:14 +0000
Files and hashes: 1: 1-REcO5J_sNDHp5QyMHQK9hJs5o0.roa (hash: xwGwct9zoFclxXhr71nd4I0i1zajfbDCLeCO4XmRVU4=)
2: 36xTaZN36e5rc-tObD7qGV8VMjE.roa (hash: wKPGdA5BYZvtaHrrMsjhE8Um1YRHqDiekeeAKB95GHc=)
3: fciWyziZxbZIjRxGU_ruSyMVHx8.crl (hash: KcQZFa+ujPKtVWK8JWrHu/AN40149eKWPIF2IfpwBLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:41:01:39:0a:21:1e:9d:c8:eb:f5:49:d4:ad:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Validity
Not Before: Aug 23 08:00:14 2025 GMT
Not After : Aug 24 08:00:14 2025 GMT
Subject: CN=2db93a74e926bae2e61fdbe76c139ed29264af07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:6a:10:f7:8c:ba:70:5c:1e:40:9f:73:d0:
ea:a6:43:4e:a3:e9:66:b2:28:e2:e4:d3:8c:9c:b1:
02:9b:53:c0:f6:f3:30:55:be:f7:07:51:02:04:ed:
a9:f2:5e:01:2d:ba:84:42:56:96:4a:f4:72:62:3c:
68:fe:2f:e0:0c:ad:85:cf:d1:b4:28:e8:8b:32:0e:
f7:49:99:df:92:85:73:8e:8d:8b:89:2f:bc:53:12:
86:ce:bb:03:a8:f8:1e:74:39:5e:92:e0:40:0f:46:
44:12:ba:63:27:cb:45:60:7b:f4:ff:92:b1:48:14:
50:13:86:79:dc:2f:a9:28:cd:ee:be:81:a0:85:91:
1c:96:69:6b:96:dc:ab:d1:fe:f3:47:e8:bc:4d:2a:
ea:7d:c6:c1:e2:9f:15:d4:9c:3f:95:a3:53:dd:43:
54:5c:46:54:8d:c5:a0:e9:ab:d9:88:e5:f7:d1:8e:
7b:9a:1b:5b:ff:8a:b0:2a:88:08:72:08:42:7a:24:
99:1b:84:5f:d3:ad:95:1d:ee:08:dd:7c:fe:4d:17:
96:4c:f1:ca:a8:10:32:d5:bc:b5:e1:a3:c9:fd:b5:
e9:e7:81:98:71:56:f7:85:16:87:f2:2a:b2:6a:54:
bd:72:56:22:91:a8:06:4c:0d:d4:69:4e:61:94:32:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B9:3A:74:E9:26:BA:E2:E6:1F:DB:E7:6C:13:9E:D2:92:64:AF:07
X509v3 Authority Key Identifier:
keyid:7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d3:60:19:b8:6d:ba:a2:0f:8b:bb:98:08:47:ee:a5:a3:20:
77:46:6b:12:c4:7e:29:40:63:e9:1e:62:3e:ca:28:7e:20:bb:
3a:27:8a:a4:a9:cd:31:c7:4b:dc:f7:10:9f:ba:f8:9f:be:b9:
f1:cf:fc:8f:4f:99:b6:66:2d:f2:f6:83:4f:b9:8b:d3:0e:95:
aa:ab:13:dd:67:66:99:b5:4c:05:47:b8:80:37:ed:ca:ec:f0:
df:5c:ef:2d:9a:a8:df:72:7c:71:6e:cc:76:a5:74:06:c2:8d:
26:f1:97:eb:6c:fc:7f:99:10:84:5e:1f:bb:45:6e:76:29:1c:
1e:d7:1b:6f:3c:71:bd:d1:6a:7d:4f:13:f1:06:d6:63:07:0e:
07:b4:56:88:9d:b8:b9:02:20:7e:3d:ec:6c:f5:e4:48:24:85:
42:31:ec:cd:7e:db:17:8b:6f:fe:56:88:9d:31:d5:17:5f:32:
5a:3b:7c:e8:da:87:c6:d5:b4:05:2b:e7:f8:a9:d0:75:1d:ad:
d2:d1:02:4c:b4:3b:93:e2:55:98:40:79:14:d0:4a:c3:72:a1:
86:04:dd:2e:b0:d3:d6:52:74:2d:c6:87:ed:29:da:d6:b1:62:
db:ac:05:02:4a:d2:2a:52:99:b1:9d:bb:06:38:a7:bd:d0:7d:
c0:32:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:53 2025 by rpki-client