Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
File: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft (raw, json)
Hash identifier: FcsN2NBPppVOf6IG6Fhyigzpbq/dfzoUXAj0Kg6eSdI=
Subject key identifier: 61:92:44:6B:5B:35:9C:1D:9B:B1:39:4A:AF:19:06:AC:F0:6B:41:05
Authority key identifier: FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
Certificate issuer: /CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Certificate serial: 0198D69858BFA79E3D17A7514A91AED7A19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:44 +0000
Manifest this update: Sat 23 Aug 2025 11:02:44 +0000
Manifest next update: Sun 24 Aug 2025 11:02:44 +0000
Files and hashes: 1: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl (hash: KyKDdeWxbWLnJRVQR8d7dhrW/nrFHNFcry6XkqiwrJw=)
2: jvYIR4cGI1xTBTMHiHmlslGT8ss.roa (hash: XYWrze0y1RSFOkB9yC9oozCL7v1si1KQCdXxbKpu5VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:58:bf:a7:9e:3d:17:a7:51:4a:91:ae:d7:a1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Validity
Not Before: Aug 23 11:02:44 2025 GMT
Not After : Aug 24 11:02:44 2025 GMT
Subject: CN=6192446b5b359c1d9bb1394aaf1906acf06b4105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:5d:52:ce:f4:93:7e:b9:9e:da:f1:de:73:
eb:c0:1c:9b:a9:c7:5e:9a:99:7e:e9:2c:ec:25:53:
d2:62:85:88:74:62:8b:4b:b8:9b:54:f7:96:5f:45:
a5:c3:22:aa:5f:c3:bd:74:c7:f6:cd:3f:67:08:2e:
23:df:4d:58:37:09:7d:11:fc:24:6b:b2:2a:8e:5f:
a4:d4:bd:23:84:f4:e5:13:db:1a:65:80:8d:09:72:
dc:91:30:7a:f9:0c:db:0d:56:36:cb:4d:c3:2b:d1:
fc:49:67:4a:5a:b6:07:71:9a:df:4c:81:ef:63:26:
6f:52:74:a9:5f:91:0b:96:08:5c:58:e0:fd:75:31:
52:73:c8:c0:5c:cf:9b:9f:82:ec:be:0f:ca:64:5a:
23:ea:7e:b7:69:5f:fd:b2:08:eb:89:19:bb:57:df:
17:b5:ff:3e:69:9d:05:68:3a:aa:a6:40:4e:91:fb:
88:f6:9a:1a:79:a0:a1:c4:ac:ad:4c:20:99:9d:e3:
13:21:8f:32:26:99:a9:11:d9:c5:4c:b6:f9:6c:1c:
d3:6d:fb:2e:7d:2b:1e:f8:60:aa:06:d0:33:db:09:
19:61:ed:3f:e1:42:02:79:43:af:be:d4:58:7d:0b:
14:94:fb:91:61:4e:15:90:d7:99:2f:e5:38:42:87:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:44:6B:5B:35:9C:1D:9B:B1:39:4A:AF:19:06:AC:F0:6B:41:05
X509v3 Authority Key Identifier:
keyid:FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8c:0a:9f:8e:fe:1b:f6:19:54:50:2e:0a:3c:38:ad:a7:17:
97:02:e6:06:ad:b8:f1:89:a5:7e:4c:5b:01:73:86:8f:34:4b:
4f:d5:d9:6c:bc:1d:15:15:5e:9f:77:e2:87:30:4b:a4:f4:5c:
74:e8:34:f5:8f:33:ff:32:c6:ea:3d:18:95:10:92:c5:6c:24:
3e:e3:46:43:c4:23:77:02:12:c2:dc:8b:d6:62:a1:ec:ed:53:
de:b5:69:1f:ac:90:e6:98:f9:20:18:ff:4a:e1:00:f8:29:1b:
fb:fc:75:9e:2f:77:3e:d0:a5:48:f7:a3:12:5b:a4:31:24:60:
d0:04:c2:ea:1f:66:ee:3c:27:87:fc:3d:f7:de:88:2c:21:59:
c0:89:80:b5:47:80:18:46:e2:8b:f4:c3:9b:15:81:bf:56:63:
bf:b1:cf:91:cb:9b:3f:9b:85:d7:a1:40:82:ce:ef:fc:20:fc:
0c:b4:ff:a4:d9:82:a2:2b:16:2a:22:00:03:54:3b:39:ee:33:
83:58:8c:49:4e:b3:2f:52:09:ed:b5:85:97:b3:ca:1f:47:89:
16:2d:3c:08:98:c6:b6:bd:6c:7c:04:27:26:1b:d8:16:74:4a:
16:15:b3:23:18:16:c2:7b:15:5f:df:71:0d:ed:a1:7d:56:21:
be:a8:53:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:31 2025 by rpki-client