Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: bhcZJRD5UfFOz09AuoaobJIBMuzC7GS6G4u3zbUTONM=
Subject key identifier: 43:92:BB:D9:03:8E:39:43:67:B1:F3:B4:17:C9:59:BE:7A:B9:BD:73
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 0197DB88CA1EB83B21D41B153ED2A01BAC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 155A
Signing time: Sat 05 Jul 2025 17:01:04 +0000
Manifest this update: Sat 05 Jul 2025 17:01:04 +0000
Manifest next update: Sun 06 Jul 2025 17:01:04 +0000
Files and hashes: 1: UkqG3VMYAz9uABWF42sKAydGWoA.roa (hash: /dg3EZ5BvktCoE6vyv9z5Q4gql01gT6XeimrmuNAS5k=)
2: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: 8VI4/TXs7e+AjBEi15oq+PYW8OBGdE/esxAh/9382Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:88:ca:1e:b8:3b:21:d4:1b:15:3e:d2:a0:1b:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Jul 5 17:01:04 2025 GMT
Not After : Jul 6 17:01:04 2025 GMT
Subject: CN=4392bbd9038e394367b1f3b417c959be7ab9bd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:70:4d:61:9a:fd:ff:80:02:fb:5c:4e:0f:
a8:f2:4f:ae:9f:7d:44:0c:48:a4:fa:95:84:c5:27:
65:c7:15:03:31:a8:d7:d8:ea:e2:74:16:b2:b6:b6:
f5:cf:72:59:68:82:7d:55:5f:36:58:71:64:2f:35:
a5:df:81:5d:fe:23:ae:3c:3c:a9:b1:6d:91:01:aa:
76:47:60:29:70:89:8d:6b:53:bc:8e:25:66:e6:09:
48:f1:48:0e:f2:8e:77:4f:6e:a7:55:76:85:16:ae:
53:d9:d9:aa:61:f5:91:e8:13:51:4a:1c:de:a6:6e:
3b:51:b1:29:e0:a6:df:f0:3c:83:13:72:6c:b2:12:
86:78:3e:19:35:be:92:9a:13:74:f5:84:b0:a7:28:
95:41:f7:3f:39:cd:4e:65:96:b0:d7:1c:7b:5d:2c:
6a:a4:22:24:57:85:4b:c2:8d:3d:74:00:59:e7:86:
62:1c:ff:1c:79:87:fe:83:5c:5c:78:2e:4d:97:12:
ed:d5:24:4e:67:82:ba:0d:8d:98:82:d7:3c:1f:bb:
3c:e1:19:c3:ac:03:9f:29:9f:ba:00:99:d9:26:26:
14:1c:33:b4:fc:2a:33:ae:37:56:b3:65:32:1b:6b:
46:67:2d:6e:0e:33:c6:ca:eb:a1:39:18:80:4f:5b:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:BB:D9:03:8E:39:43:67:B1:F3:B4:17:C9:59:BE:7A:B9:BD:73
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:76:9b:e6:8b:c5:ff:b9:57:ee:7f:4a:7f:2b:16:87:70:d1:
42:4d:00:ca:1c:54:78:5d:11:d4:12:de:33:d9:d0:97:e8:81:
7a:b8:81:15:25:a9:ad:52:28:0c:f2:26:ad:70:13:c5:7f:e2:
b6:a6:08:78:01:dd:c6:e9:b0:a7:00:e1:b8:56:a9:b1:e3:90:
05:67:12:59:3e:a4:81:18:46:6d:c1:73:12:62:2a:c3:8f:14:
29:7d:4a:8f:f3:db:1c:b2:13:2d:50:d7:40:4a:fc:3b:73:99:
0e:3a:24:24:f2:98:3d:a5:5b:92:ff:aa:75:40:f3:27:bf:4a:
83:70:24:1a:2a:c6:ce:0a:79:81:83:99:35:37:40:f3:fd:f0:
e0:c2:9e:d5:d1:89:ba:64:cf:1b:eb:c9:bf:e0:e9:c3:06:0c:
5e:a9:dc:29:15:54:d4:a3:23:5f:16:a7:08:1d:ff:75:7f:24:
19:0b:d5:4e:be:ad:00:dc:b9:71:da:30:4f:b8:21:d4:24:9c:
b3:51:87:69:e0:05:16:a6:97:da:ad:c4:51:56:5b:07:df:6d:
05:de:73:3c:c6:80:31:27:22:d1:e7:c2:59:98:d9:e2:af:e4:
f1:f2:39:dd:69:c5:7e:c3:ce:c9:ef:98:d0:1d:42:83:64:ed:
43:24:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:42:26 2025 by rpki-client