Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: JU0/VBZ0ud8C6Nfs+mcnQExTeKKzI2mBz6A0ycTD7/c=
Subject key identifier: 51:11:30:B5:28:18:15:E2:FC:1F:30:4F:4A:93:E3:77:BD:F9:0E:F9
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 0198D65FA954484BFAA8E53F15FAC75D3FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 12F5
Signing time: Sat 23 Aug 2025 10:00:50 +0000
Manifest this update: Sat 23 Aug 2025 10:00:50 +0000
Manifest next update: Sun 24 Aug 2025 10:00:50 +0000
Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: EoJOApt3DDkPIusl/CjBtfazOZcGT1iXS1go27DIpTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a9:54:48:4b:fa:a8:e5:3f:15:fa:c7:5d:3f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Aug 23 10:00:50 2025 GMT
Not After : Aug 24 10:00:50 2025 GMT
Subject: CN=511130b5281815e2fc1f304f4a93e377bdf90ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:09:41:b2:5a:93:fa:7b:79:8d:e2:37:b4:
28:7d:95:cf:7a:5e:75:d9:50:dc:fa:a7:c1:68:53:
6f:1f:d0:b5:35:f1:c8:6c:ca:8e:93:95:bd:d8:ed:
8f:a7:1b:f9:5e:c9:be:83:78:88:32:93:fd:a6:ab:
05:05:6b:6d:d9:5c:6c:c0:b8:fe:c9:fb:a7:43:54:
d7:3f:e9:6d:0c:ca:77:44:b3:72:e8:94:88:a8:06:
a8:de:3c:d1:f1:5a:6f:d3:62:9d:21:56:73:dc:42:
f6:15:b8:9b:20:1e:24:3f:8e:a9:b5:b6:82:5e:d2:
73:41:df:11:30:4a:a0:16:b9:b7:8f:ed:08:98:54:
bd:ff:ad:84:9d:58:d2:f8:e8:9a:8f:cc:43:5a:0a:
6c:d3:29:6e:75:cc:47:42:fb:71:05:93:a1:fe:b7:
b0:77:e3:12:46:2b:02:23:f1:a7:cd:aa:7f:66:28:
05:c2:b6:35:94:e7:62:46:59:a8:d9:86:7f:dc:52:
77:a8:76:c0:31:67:d0:23:8e:f8:e5:60:88:16:20:
08:2e:ff:00:5b:c0:71:be:9f:0d:a4:01:c9:b2:62:
1c:e9:5c:ce:7c:5e:e0:c5:dc:a1:b3:dc:52:75:64:
3d:b5:61:5f:89:d2:f4:13:e5:7c:86:26:b5:40:07:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:30:B5:28:18:15:E2:FC:1F:30:4F:4A:93:E3:77:BD:F9:0E:F9
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cc:2b:fa:82:0b:32:02:1c:a0:66:1a:61:41:69:32:2e:a5:
ed:79:00:a8:30:74:8e:59:b7:9f:4b:62:a8:69:6f:c6:9d:64:
cd:d8:40:2b:ac:57:1a:3c:8d:0a:01:a3:bf:09:75:0b:fb:0a:
1f:75:d2:e9:ba:2c:e8:69:94:04:a4:5a:f7:0c:14:8e:3b:f7:
43:40:7a:cb:08:3e:4f:67:3e:01:c7:69:9f:6e:fe:9e:0f:0d:
2a:6b:77:1c:1e:12:3c:6b:fe:2c:37:cd:f0:94:65:fe:f4:eb:
24:21:cd:b5:00:f4:c7:da:3f:56:cb:2e:b6:fc:6f:b6:21:25:
af:46:09:55:2e:a7:e1:42:74:8a:6e:95:72:97:f4:03:a0:90:
cf:7d:c9:e0:11:b9:34:cf:2a:27:85:d1:ec:ff:75:26:4e:49:
42:43:41:16:5f:27:e8:17:89:c6:01:9b:9a:2d:69:1f:d4:ab:
ac:c7:27:f0:62:de:af:24:97:c9:eb:5e:17:3d:80:5a:17:40:
fe:da:a7:da:b4:19:b5:c0:33:de:5d:b2:6e:62:55:d7:a6:d4:
ec:cb:fc:01:46:d3:40:02:a0:83:dc:14:cc:e1:7c:0c:42:a5:
e0:4a:68:d4:82:84:c8:25:1a:43:40:19:d6:cb:4c:78:54:1b:
8a:cd:32:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:50 2025 by rpki-client