Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: rhlQDo3k1zMmGcEL59lGpnAS6Clu+NGLJ/7eiaPISFs=
Subject key identifier: B4:84:1A:E7:2E:3C:B9:BE:A7:F2:77:9F:FB:6E:C0:95:A8:DC:F6:87
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 0198D6298681D58233E88AED17FB567C2BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 161E
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: 2cqLG7f7M7EO1CExAEwed3q2RJY.roa (hash: oMyZToCAGoMS3fuIPl6elQvL2EBYTw46vFWwPyR2dhM=)
2: 44aHSTc_N_J7ymJFhCAeUzS4V0M.roa (hash: k12ZQud9YaZ6rTtvVFGbQETqfgsqw1EgkhzhgzETi5U=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: CYXSamCbGSStSWh1pIKNxiaPGKef8ocAFK7gZ+r8RV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:86:81:d5:82:33:e8:8a:ed:17:fb:56:7c:2b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=b4841ae72e3cb9bea7f2779ffb6ec095a8dcf687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:52:38:95:66:41:4c:1a:6f:71:f4:95:a7:
80:0c:82:ac:00:62:0e:3a:de:03:f6:24:1f:db:2c:
e9:7b:a4:72:34:77:b6:63:3e:cb:c8:4c:29:0f:b5:
12:01:2b:9d:a2:31:18:ce:a5:06:9c:ba:da:9d:22:
4f:fd:06:ed:f3:d2:94:67:32:ae:bf:11:e8:fc:32:
de:c8:97:5f:34:34:40:fa:45:ca:22:9e:5e:b6:84:
0c:4c:c0:7f:ca:af:4a:da:34:21:dc:4f:18:f8:4d:
2b:34:64:02:76:cf:35:e7:9b:87:39:5f:d2:53:55:
70:82:3f:7c:5d:fc:0a:12:99:3e:f4:fd:3f:c4:94:
49:33:21:0c:09:21:7f:49:43:02:f3:57:03:ef:c3:
56:a4:02:e2:99:4f:6b:5d:0d:ae:bd:7e:12:91:46:
d4:6d:38:cf:fc:93:58:af:20:5f:8a:fd:db:c1:b4:
b1:03:75:50:98:06:2d:46:6c:ba:ef:c0:a0:3f:63:
7d:37:3a:47:c3:68:8d:86:92:40:c7:4a:eb:de:22:
97:a1:3f:20:2f:43:8e:5a:86:47:a8:54:be:bd:6d:
f5:2c:8b:43:fe:3e:60:c7:fc:b2:44:d3:ed:fa:44:
24:1c:b6:a4:8d:07:a2:5b:fa:d3:d8:77:b5:31:f0:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:84:1A:E7:2E:3C:B9:BE:A7:F2:77:9F:FB:6E:C0:95:A8:DC:F6:87
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0b:ef:a0:7e:e4:5c:ef:6d:30:89:2d:d4:52:22:f7:b3:1d:
fd:db:4d:9c:51:2a:16:67:8d:39:dc:3e:74:ed:f3:61:0c:8f:
de:89:2d:8a:35:a4:6a:79:df:fa:3e:9e:33:ec:c7:72:6e:36:
4d:7e:c5:c6:ce:14:5f:79:c3:a6:f2:30:95:3f:64:b5:82:27:
7c:be:fd:56:28:c1:1a:e4:df:bf:3d:6b:d1:9a:59:d7:1d:3d:
4b:53:50:c2:55:d4:b8:ba:86:f5:8e:85:80:9e:44:5c:c8:ae:
ad:85:5e:b2:e3:6a:28:9d:64:a5:58:a3:53:29:40:d6:ad:ce:
c9:7a:e6:2b:50:3f:ab:2d:e8:97:71:4e:25:9b:80:e4:aa:1b:
6c:bd:e7:8c:e7:1c:e0:b7:cb:1a:d4:1b:07:14:77:51:cc:df:
73:18:48:9e:be:7f:87:90:a0:b7:24:6b:6c:e7:28:34:28:0c:
bf:c1:8e:bd:42:0c:f0:83:2a:f7:c8:74:cd:88:8e:05:98:36:
a7:6f:6f:76:65:e2:33:d2:97:8a:bb:f8:29:f1:48:3c:30:43:
08:c9:9b:4e:12:23:fe:5f:07:2e:cf:92:70:1a:5c:44:84:1f:
93:9d:f3:b7:2b:30:55:a9:0b:7f:58:d2:7a:c8:db:c2:02:b4:
37:e9:f0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:38 2025 by rpki-client