Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: OqbxLSQEqCrfDfNm6W9pRrun/BM7Re8adBDj9eJ+Jp4=
Subject key identifier: 85:D7:19:64:69:FD:59:48:50:06:7E:40:24:80:E9:67:9F:F4:3A:B9
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 0198D73B3B4413C7027600140509DBC142BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:00:39 +0000
Manifest this update: Sat 23 Aug 2025 14:00:39 +0000
Manifest next update: Sun 24 Aug 2025 14:00:39 +0000
Files and hashes: 1: W6ZuDAGnWoDaEzlWI7u6oQknSmA.roa (hash: OmbyY76V+595ZQjAafvVZcWcNGfzKgZ8Ut3VoJKhN9E=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: Y9ZwuU43eXwlX1xUPOnF+in7YCkTrh4/Td+AB9iVFcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:3b:44:13:c7:02:76:00:14:05:09:db:c1:42:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Aug 23 14:00:39 2025 GMT
Not After : Aug 24 14:00:39 2025 GMT
Subject: CN=85d7196469fd594850067e402480e9679ff43ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:a1:63:0a:9b:19:f3:0e:49:de:14:46:2c:
f4:4b:a2:24:f9:59:74:bd:6a:e2:46:1f:e2:55:32:
8c:db:29:9b:c1:a7:31:fa:3e:ab:f6:44:e4:4a:d0:
e4:a0:29:f0:a6:70:ba:97:7f:b3:c9:d7:a3:5a:5d:
06:c3:b2:a1:30:cd:8a:50:3c:09:11:c4:78:b8:2b:
ea:56:c6:a2:9e:51:e7:96:b5:2b:25:c0:40:90:4f:
68:48:ef:02:f2:ec:f3:aa:13:8c:d4:79:f6:d4:82:
97:eb:d3:b4:65:36:73:88:93:1b:93:99:a9:e9:1a:
ed:92:69:e4:fb:e5:4c:69:3d:5b:9f:1d:3c:8a:03:
bb:ab:0f:fa:2b:00:dc:78:a5:1c:95:fd:2f:2c:d2:
dc:57:54:2e:0c:74:19:1e:fc:1c:43:2b:e1:c9:b3:
c4:41:1b:e6:38:19:2b:42:f7:e7:12:2a:d3:ea:96:
96:3c:79:67:ac:e5:8a:c6:0a:e2:5f:db:30:17:94:
e2:25:91:99:6f:88:40:50:7e:c8:be:07:63:b3:8d:
25:08:3d:ab:e9:17:87:12:45:ca:7d:7c:51:d4:7b:
e6:00:45:ad:e4:b1:94:07:28:04:dd:24:9e:66:9d:
93:78:0c:c3:91:2e:69:21:8b:ab:b7:1d:12:22:90:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D7:19:64:69:FD:59:48:50:06:7E:40:24:80:E9:67:9F:F4:3A:B9
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6c:11:22:b1:1d:28:d8:97:16:f8:9f:48:63:81:4f:6c:16:
bb:58:38:d5:b6:b1:f3:93:6a:a7:d5:9b:d9:c1:6b:28:15:fc:
08:c8:07:35:28:6e:36:76:3c:bc:b3:82:ff:eb:18:b6:ff:9e:
6a:21:9d:ca:c2:d2:c0:66:22:aa:e1:7d:b8:13:e1:4e:24:19:
6b:ca:02:b6:29:21:aa:9b:f1:58:90:27:2b:a5:f6:cf:0d:2e:
59:3d:a5:3e:2a:c5:e1:32:cf:78:c6:60:2f:79:09:68:e9:c5:
97:20:f6:d3:a1:a6:df:8c:3d:bc:88:04:48:94:47:ff:5f:12:
96:fc:8a:00:62:99:f7:cd:a9:80:ce:d9:2c:3c:4f:78:78:7c:
6d:ea:c2:02:f1:fc:26:57:6b:c4:86:a1:24:f0:f9:4a:1c:32:
6c:e6:93:05:be:47:17:6d:e1:8f:92:1e:26:66:10:7d:72:fa:
16:ce:2b:56:cc:c8:2b:7e:88:fd:1e:bf:d3:13:9a:28:ba:34:
e6:fa:e1:17:65:9d:cd:21:8f:0a:1b:01:ae:22:eb:50:fe:e6:
3d:cd:ec:e2:95:a5:af:5a:41:26:74:5e:44:ad:dd:dc:04:6f:
96:fb:ff:a5:db:9d:63:85:98:ef:29:16:55:a1:54:3e:f2:61:
61:d6:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:36 2025 by rpki-client