Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: aw+rIPWx+fgf8nIBWvKNB5zxwlNDOBm+bXHodFt2uug=
Subject key identifier: A1:F8:66:B9:C8:57:AA:C9:74:CB:4F:95:83:1C:42:3C:69:34:62:80
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 0197C56F1B6B3819E7772D202467AB3C3EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 10:01:22 +0000
Manifest this update: Tue 01 Jul 2025 10:01:22 +0000
Manifest next update: Wed 02 Jul 2025 10:01:22 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: FeUa7PdgLYxx7NcLjAhaakWcUyAqAN1TmvIQc+FJBUk=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:1b:6b:38:19:e7:77:2d:20:24:67:ab:3c:3e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Jul 1 10:01:22 2025 GMT
Not After : Jul 2 10:01:22 2025 GMT
Subject: CN=a1f866b9c857aac974cb4f95831c423c69346280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:0a:7a:aa:5b:62:48:10:83:41:32:87:d8:
13:28:10:b8:fe:3d:53:ac:1e:42:b4:b2:60:e5:28:
0b:4a:1f:9b:87:c9:f2:8a:86:e5:e9:e3:6c:5a:ad:
a4:35:ba:1f:07:5d:9e:5a:e8:31:ac:ba:11:88:49:
7c:10:05:75:cf:c2:3f:9d:44:af:6d:3f:6c:a8:92:
5e:2b:15:96:e5:52:81:6a:45:1a:75:81:0e:10:1a:
0a:39:99:41:a9:b0:fd:12:18:58:52:8d:1f:fe:56:
00:66:44:a9:4a:7a:ee:a0:db:56:da:23:d8:1a:f7:
da:59:e8:af:4c:54:4e:51:e7:fd:0a:3c:c8:fd:ac:
08:5a:4c:33:d2:91:e3:68:80:68:79:f9:2c:f7:af:
70:41:0f:2f:dd:a9:21:58:3a:4f:73:5e:af:de:d1:
4c:2e:44:91:67:6a:00:69:81:48:e6:66:0a:74:51:
84:5c:93:b9:a7:4a:55:42:3d:59:fc:05:60:8d:ce:
6f:27:91:a7:c4:ff:32:86:b0:0b:df:72:d2:a2:a4:
1d:76:57:b2:1c:62:4e:27:cd:6f:ee:ef:35:04:df:
09:87:09:e8:1b:e3:40:a2:b5:ae:af:35:e4:20:06:
28:d3:89:a7:69:c5:76:8f:04:92:7a:d5:d0:8d:8d:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F8:66:B9:C8:57:AA:C9:74:CB:4F:95:83:1C:42:3C:69:34:62:80
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:97:83:69:67:76:33:93:a2:9c:61:0f:cf:1b:c3:a1:5f:16:
69:72:be:a4:e6:1b:80:d7:4e:cb:5d:b8:9a:5a:06:01:a0:b0:
a5:e2:c9:b1:96:41:3f:88:ec:7d:fa:56:a2:5d:51:1d:1d:3a:
ad:61:3b:5d:72:86:a1:35:1f:dd:ad:37:1d:9c:7d:7a:69:d8:
af:e4:e7:2a:98:c2:94:31:e8:49:c0:a2:cc:d5:8f:e0:bb:d9:
cb:bf:2b:4d:8b:69:76:94:92:8f:d4:9d:af:c1:bd:15:e1:99:
8b:93:3c:98:de:a3:23:f4:36:d8:ab:70:95:b0:b2:25:91:63:
f8:bf:35:ff:fb:90:52:b6:23:c5:df:e2:da:ee:ab:a1:e2:f9:
6e:68:62:fd:05:f8:d4:c4:6c:86:b4:3f:b2:85:22:da:6b:0c:
ac:d6:3d:21:c9:45:07:65:2b:d5:93:83:1c:00:99:a1:19:9b:
96:c4:c0:8e:cd:e6:e1:e9:23:40:17:94:29:95:86:40:3d:56:
8c:b0:49:23:51:16:56:e1:44:44:ac:36:34:f7:14:56:98:1e:
26:73:2b:56:07:a1:52:14:1c:c9:ff:45:29:d9:c5:bb:de:27:
64:3c:c8:88:6c:1b:ad:21:3c:14:de:7d:cf:a9:b9:68:c7:34:
ad:a9:8c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:13:48 2025 by rpki-client