Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: H37oZjun6545E73vHfCzGJPTMQZOqciduuObDjlgyLs=
Subject key identifier: C0:E3:88:E3:15:71:F1:D0:A2:49:30:DD:32:B0:95:3F:63:8F:2C:80
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 0198D73B043D191054EB872B206A3A6F8E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 14:00:25 +0000
Manifest this update: Sat 23 Aug 2025 14:00:25 +0000
Manifest next update: Sun 24 Aug 2025 14:00:25 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: Zu4eQwOIL9Izn3Gy+xZJC++X50UJWdzcEBMuj3pgKNk=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:04:3d:19:10:54:eb:87:2b:20:6a:3a:6f:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Aug 23 14:00:25 2025 GMT
Not After : Aug 24 14:00:25 2025 GMT
Subject: CN=c0e388e31571f1d0a24930dd32b0953f638f2c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:34:a5:56:ac:92:4b:c1:d7:fe:35:0d:7c:
d9:c6:20:c6:79:ac:fa:58:0e:a1:21:fc:22:16:a6:
5a:de:45:41:c0:a2:e2:30:2d:56:53:05:ad:dd:31:
8d:26:f7:23:1b:27:f7:60:52:a4:87:8a:c7:43:a6:
0c:8c:a5:13:7d:b2:df:c1:7b:a4:4b:ee:93:ce:fb:
8a:85:a9:b5:bf:08:a8:dd:a0:c6:d7:45:08:f7:45:
71:40:10:9c:28:6e:e0:20:0d:bf:a9:0a:a6:8b:8b:
18:3f:e0:7d:e1:5f:6f:84:b0:75:aa:e1:09:13:1e:
92:67:7a:c1:b7:33:b9:91:22:e7:78:61:78:9f:28:
8b:46:be:2f:e5:7f:ad:fb:a1:c1:66:5a:1d:61:88:
37:7f:49:5e:9b:bd:2a:13:00:ab:37:56:db:3c:ad:
44:22:2c:77:28:df:20:f3:0a:61:4e:b7:dc:95:34:
da:87:9d:c9:aa:14:87:8c:ba:7f:a5:d8:bb:87:b6:
28:31:c6:a8:9b:51:ca:ed:99:be:34:0e:d5:33:05:
3b:dd:38:19:83:55:6d:1a:01:c3:d2:c6:45:27:1f:
3f:2e:8c:b6:f2:b2:38:df:2a:48:08:3b:fa:e1:79:
f4:a0:0d:b1:d2:93:63:c5:78:a9:c1:46:08:c9:95:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:88:E3:15:71:F1:D0:A2:49:30:DD:32:B0:95:3F:63:8F:2C:80
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:47:47:e0:ef:a4:29:ac:28:14:8e:65:41:be:fe:79:c3:0d:
c2:f6:7f:02:6a:52:66:e6:d8:6b:13:9c:90:3e:76:9c:16:d5:
4d:80:2b:66:95:3f:b3:02:cb:b1:47:b8:53:5b:ba:25:be:4e:
e6:e5:3b:75:c4:b5:95:1f:f7:1b:b2:de:62:54:58:07:42:70:
21:36:1f:ef:b6:9a:63:c7:71:c1:78:70:cb:30:ea:3f:91:75:
ee:64:27:1c:81:72:fd:6f:f6:48:fa:66:bd:d6:36:d0:6c:f9:
cc:4d:3e:a9:31:cf:3d:c8:78:df:7b:ab:e5:02:09:f1:d5:f5:
2c:ce:ae:36:52:75:0c:e4:bd:2a:39:75:3e:bc:31:6a:11:3e:
ca:1a:9a:d9:1d:d8:26:d0:a4:64:56:98:b7:15:fd:f0:9c:f4:
30:23:c1:a9:20:8b:31:a1:4f:c2:d4:38:b8:7b:53:ba:b8:1d:
30:ba:b1:1d:90:30:cf:18:a8:8b:9d:75:52:14:79:17:b0:4d:
a2:a3:49:83:9e:23:c4:2a:be:23:e3:20:e2:74:47:df:55:8d:
8c:a6:c8:2d:57:db:57:cd:f7:78:8c:b8:db:74:28:94:2d:71:
71:f7:eb:35:42:1f:de:d1:2f:f9:96:c3:56:c5:38:68:f8:0c:
59:90:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:54 2025 by rpki-client