Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: LuhWPL2eL2+EkZvRbxHlL4flh/81OzC29qnNDvLWmhQ=
Subject key identifier: 4A:B1:64:FB:E7:97:BA:EC:9A:BE:B6:19:A2:76:FA:FA:D1:83:9B:4F
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 0198D7A9118ADB7821B6F9B3BF75838771DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 10BA
Signing time: Sat 23 Aug 2025 16:00:38 +0000
Manifest this update: Sat 23 Aug 2025 16:00:38 +0000
Manifest next update: Sun 24 Aug 2025 16:00:38 +0000
Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: g3y6ZsG8prmCZyEIV8UDKD7U3kw/+1G9DThE19ootyk=)
2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:11:8a:db:78:21:b6:f9:b3:bf:75:83:87:71:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Aug 23 16:00:38 2025 GMT
Not After : Aug 24 16:00:38 2025 GMT
Subject: CN=4ab164fbe797baec9abeb619a276fafad1839b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:17:f8:c8:52:b9:8a:cc:cb:34:e6:76:57:
7c:2f:14:7f:57:2a:4c:63:e9:cc:75:79:9f:dd:57:
48:2b:bc:b5:cd:36:ea:3c:7c:27:44:b1:1e:04:ff:
88:1c:f3:1b:a5:5e:83:e4:80:8a:74:8c:2c:55:72:
12:0e:19:6e:25:ee:49:51:3e:42:0f:11:3b:f1:f0:
81:32:a8:fd:94:90:ba:79:3b:85:e4:d6:e8:af:24:
09:40:1c:56:bf:5a:77:3a:f4:70:79:62:d2:d4:c1:
e5:fe:d7:6d:4f:3f:8a:3c:76:ea:68:81:06:ef:19:
fa:80:51:d2:d5:6e:c3:0c:e7:e7:a2:a2:fe:60:c5:
10:e8:5b:fc:2d:e6:c8:db:0f:0d:fd:2f:62:c6:ea:
9d:4c:01:cf:49:ff:3a:7b:8f:b4:76:44:a5:1a:6d:
84:4f:20:27:cb:31:15:8c:11:45:eb:59:ac:39:67:
3e:37:a3:5c:5a:8a:95:bb:12:11:3e:30:02:76:b5:
dc:a2:45:c3:4e:e0:a5:53:64:be:30:06:b8:7f:e2:
fe:d2:6a:f4:67:04:c7:20:e9:23:04:be:82:fd:35:
c6:f0:0f:51:f5:0d:ed:55:56:19:4e:25:14:cd:48:
44:14:63:4f:04:71:a6:5f:8d:e3:ce:43:d0:a6:34:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:64:FB:E7:97:BA:EC:9A:BE:B6:19:A2:76:FA:FA:D1:83:9B:4F
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8e:90:c6:cd:8e:a1:94:b4:f1:b2:98:70:64:11:a8:b1:77:
2c:a1:23:6d:1a:68:b7:f5:bc:54:37:b8:52:59:a0:e7:e5:09:
87:47:82:6e:1a:66:58:cd:2b:7b:25:17:cf:7c:75:e0:eb:8c:
fa:bb:12:6f:8f:06:68:4a:f0:90:fc:e3:72:ab:c6:e6:25:c1:
8f:8d:73:eb:05:50:09:64:9d:cf:bb:25:86:02:54:ba:c4:61:
72:f5:d8:e4:7f:bb:b4:78:aa:c5:4a:70:99:89:32:4b:9b:9a:
46:b7:eb:c9:21:6c:ce:2b:6c:31:d8:28:ab:7a:cb:d6:68:f7:
cb:36:b1:84:2c:58:cc:7d:10:b6:84:92:2b:dc:b2:61:7c:37:
84:0b:7d:2b:ad:5e:2b:7f:6c:bf:88:ad:7c:74:85:1a:11:9a:
c0:13:a1:2f:8e:40:65:61:9e:4d:65:cb:11:70:8a:55:08:d0:
2f:7b:c8:c7:c1:1c:2a:b4:ec:85:2b:ea:e6:0f:fe:17:24:79:
30:06:f1:76:80:68:6a:de:3a:69:77:ca:9b:8b:3e:9b:76:c4:
5d:c5:2c:10:61:69:31:86:c5:e1:99:05:3d:a9:1c:25:8d:88:
8c:0a:08:1d:2d:5f:d6:68:e8:0d:24:ab:c0:b7:f9:e4:e9:e4:
12:4e:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:20 2025 by rpki-client