Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: LiJLzM/VPKN17/e+ZT0LkJf2JyobZXeADEYw5cRCypU=
Subject key identifier: BB:43:03:1B:E9:E4:DF:77:6E:2D:3A:78:74:05:DC:77:B4:98:89:FF
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 0198D5F1B5B4176B704BBA87C8A8D35C07D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 10EE
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: 8m52WXmC6DqVDLH9lI-6WR69u6s.roa (hash: 0BZo5xqp89NE8ExAG9qblE2VcBVND0AxeF/zdrSRKa8=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: ltR7DBNUrKK9dPtOVFKgCo+tDSmbyDJmJicATA8IG3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b5:b4:17:6b:70:4b:ba:87:c8:a8:d3:5c:07:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=bb43031be9e4df776e2d3a787405dc77b49889ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:bf:35:37:5f:19:84:d0:e9:b9:61:09:b9:
42:b7:98:24:72:22:01:37:ec:a2:37:d3:3f:b7:43:
60:94:40:cb:0d:f3:5f:a2:c9:e8:80:51:ed:3f:40:
11:6b:02:f0:08:f4:33:7c:4c:e5:81:9c:ac:83:00:
7f:3c:4f:2b:29:7c:ce:2f:b9:60:43:0a:9f:21:cf:
40:79:c2:16:95:cb:9d:27:87:a1:92:dc:43:58:3a:
c9:53:03:e9:4d:30:01:01:43:89:51:8e:50:7c:82:
aa:b0:9d:7f:f9:ba:2b:0c:9c:04:f6:7b:f2:00:77:
be:60:84:21:c3:0d:7c:d0:60:8a:43:e7:5f:58:b6:
98:b1:f1:e9:fe:df:cd:a9:9c:9c:83:b6:d5:26:ef:
cd:32:6e:76:1e:8c:54:b3:2f:0d:9a:06:ad:43:88:
f5:73:37:cf:c4:43:ff:cd:07:3e:2b:0e:48:a8:d3:
06:09:28:bd:07:90:7a:f9:29:41:26:20:04:a4:03:
b5:c0:f8:c8:c4:42:e6:a8:27:d3:df:d2:e3:5f:6e:
ef:9f:17:5f:29:9e:22:5b:c4:a3:0e:36:93:61:fe:
58:cf:32:b8:d7:85:3c:bc:a8:cd:e3:ef:ef:db:b2:
2f:76:8b:92:ce:1b:53:76:d1:67:d0:47:2c:f4:1f:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:03:1B:E9:E4:DF:77:6E:2D:3A:78:74:05:DC:77:B4:98:89:FF
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3b:91:d1:73:7f:47:27:6a:6b:c9:ba:33:dd:07:f5:c6:5d:
7c:36:af:ce:e1:35:d9:06:a4:a2:89:38:83:de:d9:f4:4e:38:
88:af:36:a8:db:2c:84:be:7d:dc:2d:80:c6:28:66:54:18:30:
e3:4c:ff:36:1c:83:ed:3a:14:96:f9:9f:15:16:06:86:1f:53:
da:1a:16:c0:24:94:3d:7e:34:5f:35:d6:2c:7f:3d:df:ac:53:
7e:24:18:15:2c:75:e9:c2:c0:5f:a6:32:06:00:12:db:59:ab:
87:c7:53:20:2e:64:a9:fa:23:b1:e7:5b:3a:7a:d5:2a:dd:c0:
a7:fd:52:77:61:5b:94:bd:ea:b9:f8:c2:38:32:9a:96:aa:54:
7e:ee:54:e6:27:d8:35:f0:82:cc:d4:b2:79:44:f9:aa:34:0a:
6c:15:ec:30:e4:3e:32:38:2b:5d:3b:49:8f:a6:e6:86:ee:49:
d8:b8:69:71:d0:3e:16:ef:ff:de:bd:19:82:68:a4:50:82:72:
77:76:3f:a2:99:d4:00:bc:bd:43:16:a3:e3:dc:b1:2b:2f:31:
70:55:63:05:8e:54:74:3c:7c:5f:af:8d:22:7a:ab:8a:79:98:
a2:20:6a:af:16:23:61:68:a7:dc:ef:4d:1b:33:1b:a4:5d:d5:
a2:3b:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:02 2025 by rpki-client