Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: Utlsh3xRFGAF5hI53exutRiKnWBdipzKfDeW9jM3bHQ=
Subject key identifier: 19:0E:13:F5:67:C3:2E:2F:06:6B:9A:68:2E:86:83:C4:29:E4:8C:D0
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 0198D515A47CAA95224CC279D60072568C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 043A
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: YErDtGCcx1pvQOSki1VTLG+/8rXuaaa8a5Ihs00jSuA=)
3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a4:7c:aa:95:22:4c:c2:79:d6:00:72:56:8c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=190e13f567c32e2f066b9a682e8683c429e48cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:ce:8c:b6:d1:d4:a0:75:c7:78:8c:61:13:
fc:f2:be:fb:bf:a5:45:e3:3e:8a:ab:7c:32:b2:69:
61:30:96:0c:31:64:c8:ca:c7:45:3f:fd:75:c8:ce:
25:76:ab:f6:f8:30:34:09:7a:a6:10:60:a7:88:77:
61:d6:e4:c7:90:fe:8b:f0:e0:9c:56:ea:c5:16:bf:
35:3b:90:fe:60:58:89:a3:33:24:c3:23:d7:ac:d4:
8b:c9:ef:b0:4a:f9:76:e5:4a:33:3e:f2:27:16:f1:
45:d3:01:b0:96:9d:48:54:19:da:a4:60:d9:d4:28:
17:71:d4:e4:9c:11:61:98:b6:23:6a:a4:fd:b4:0a:
01:f6:bd:50:78:7d:33:a1:2d:d3:4a:4b:54:22:21:
99:d9:45:40:3b:03:68:f9:8a:69:82:81:e9:bc:e7:
d1:9b:4f:79:95:c3:ca:bc:54:c3:42:87:16:7b:73:
5a:68:0b:bc:cf:e9:4f:4d:e5:87:d7:fb:10:d2:8c:
b9:72:68:ec:c6:b1:63:a9:00:fc:7c:a6:89:7b:93:
9c:96:09:0c:9a:f1:6b:05:a9:cd:1d:4c:96:9e:11:
86:a7:ca:30:60:ca:18:02:91:62:a1:e6:4f:25:20:
c5:ba:ed:f3:04:84:c7:e1:b7:a8:bf:ec:df:12:81:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0E:13:F5:67:C3:2E:2F:06:6B:9A:68:2E:86:83:C4:29:E4:8C:D0
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:47:22:85:7d:c9:68:0d:b1:88:13:86:79:28:08:f9:52:92:
f0:89:ae:fa:76:bc:0b:89:5a:e0:33:39:3c:bd:5e:36:69:3e:
7c:49:72:40:04:0d:c8:c6:11:11:03:b6:19:3a:5e:3d:8b:59:
30:a8:1e:1d:e6:e3:55:ec:8f:96:49:fc:86:f6:2c:6a:93:22:
46:13:72:9d:65:4f:84:23:da:1f:f2:c1:54:d1:b6:ad:ec:dd:
da:15:d7:e9:d7:bf:20:a3:71:b1:f1:9b:ac:c4:45:6c:35:7d:
0a:17:2b:5c:7c:51:98:49:6b:8d:d7:1e:45:7c:83:32:a4:43:
66:66:1d:14:7f:ed:45:2d:b3:09:1d:55:aa:d8:02:a0:03:7a:
0c:31:09:e1:a2:6d:0a:76:5d:12:ff:6f:93:df:66:74:79:4d:
1a:56:a2:9f:2d:a8:71:b2:f4:b3:ec:58:30:04:21:64:32:c8:
b1:11:63:27:99:37:06:9e:93:0f:94:5c:30:13:30:de:e9:f6:
77:ef:2a:94:2a:46:11:a9:cc:7f:c0:a9:4c:cc:58:c1:f4:19:
e8:f4:e5:37:87:fb:ad:4c:9b:71:0e:7b:81:61:a8:96:a7:83:
1d:db:8c:b0:9e:72:f9:66:aa:1d:d4:39:9c:71:43:b8:57:ae:
c5:37:11:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:18 2025 by rpki-client