Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: 4lVxT2XRfIZZAH6sTa1YiMF6abcQYFbuBYYemfacCD4=
Subject key identifier: 1C:DA:46:75:B9:38:08:5D:2F:8A:A4:07:99:0D:2C:C6:7C:78:16:5F
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 0198D706228B4E7C7F2E2298A76BBFC32E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 154D
Signing time: Sat 23 Aug 2025 13:02:40 +0000
Manifest this update: Sat 23 Aug 2025 13:02:40 +0000
Manifest next update: Sun 24 Aug 2025 13:02:40 +0000
Files and hashes: 1: NicO7X1eeOmGxSSK_nbDJZV9Pdo.roa (hash: brCTvgHrTley7WUwp/kIypsM1wDTrMGgNla9liJHlp4=)
2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: SO72MSAYO8Az57YwKoWluyvaDEBOMgkYwHQoazjpGLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:22:8b:4e:7c:7f:2e:22:98:a7:6b:bf:c3:2e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Aug 23 13:02:40 2025 GMT
Not After : Aug 24 13:02:40 2025 GMT
Subject: CN=1cda4675b938085d2f8aa407990d2cc67c78165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:d9:df:5f:d5:d1:c3:6f:5b:47:df:17:f4:
97:25:7f:30:fd:fe:3f:01:fe:95:0f:e8:29:4a:26:
84:55:64:1f:5a:79:bf:ae:88:de:54:5f:42:15:e5:
4c:1c:62:3a:33:a1:e2:34:cc:42:91:40:86:c1:ce:
ab:55:61:06:f7:d4:7a:f1:38:a0:47:f1:38:79:fb:
35:15:83:a6:81:75:34:21:45:aa:d9:52:b4:39:d4:
70:6a:10:af:a4:c8:f9:dd:27:ec:22:57:ac:95:85:
7e:1c:2a:25:69:97:e3:04:9d:12:64:e3:7f:08:c3:
ae:cf:fb:e2:74:95:50:d7:c7:8a:d8:66:9d:cc:57:
b7:04:1a:4b:70:f2:b8:d3:59:c7:7b:9f:2f:f5:4c:
4c:e9:3a:f8:84:51:80:d1:c1:f1:46:7b:64:51:6a:
8f:19:e5:4f:af:7b:c1:58:d0:3b:ed:5f:27:ed:8a:
d5:45:07:c7:5d:57:25:13:d6:49:bd:ea:4a:c5:58:
11:1c:ff:8b:4e:be:e6:d8:ca:69:c3:02:8c:ed:4a:
cb:78:b4:69:f1:98:38:fe:13:60:a0:b4:3b:45:87:
11:32:d2:d9:40:c9:b8:55:15:b8:d2:85:7b:93:be:
d4:84:b9:57:e8:e2:2b:16:ed:0b:9e:58:a3:51:55:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DA:46:75:B9:38:08:5D:2F:8A:A4:07:99:0D:2C:C6:7C:78:16:5F
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c4:71:dc:8d:d7:41:43:43:76:ca:ee:97:3a:bc:ec:eb:ad:
bc:d3:0f:32:54:ab:3a:a8:db:18:90:cd:61:e7:46:30:50:44:
99:d9:23:b5:0d:6b:9d:8a:d7:46:df:02:21:05:5b:f3:93:92:
8a:5b:3f:26:77:6b:2d:74:03:59:f4:ad:4d:1b:f4:51:3e:63:
d1:9f:1b:78:d8:d2:4b:89:60:cb:1b:6f:9c:55:65:81:35:14:
41:88:58:b5:42:be:a2:7e:72:89:a3:00:d8:63:04:9f:64:26:
da:4e:d6:ea:27:4f:e8:0b:e9:ca:14:02:ff:21:ab:9d:0a:7e:
5e:93:42:93:50:aa:9e:88:6c:d8:13:6b:aa:f3:b5:cb:5e:86:
be:f9:4e:78:06:fc:94:d7:d2:62:8a:ca:c5:da:6f:f4:4f:b0:
05:d9:ee:39:2c:42:f5:56:4c:e5:fe:98:06:d0:a3:1b:3c:42:
de:07:4b:de:46:7d:82:60:41:ee:ad:9b:19:4a:99:09:9a:67:
5f:37:e2:51:29:b3:7f:74:a0:f3:70:de:a3:c9:70:41:f2:d0:
20:84:79:c1:73:86:b8:3f:f1:7f:f1:69:06:08:34:d0:5c:d2:
40:74:5c:c8:87:73:fb:97:0f:ee:f5:41:8f:0d:89:60:5c:91:
eb:99:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:12 2025 by rpki-client