Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: bx7W91Yhc4kcxLQ0uokNrrYYdyEox+nQK5WH0vm2JtY=
Subject key identifier: 8E:78:6A:42:62:3A:21:DE:C2:8B:C0:87:EE:9C:37:29:9C:E6:32:46
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 0198D5839279AEAA32CB6B9AD67DF3672C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0AB8
Signing time: Sat 23 Aug 2025 06:00:26 +0000
Manifest this update: Sat 23 Aug 2025 06:00:26 +0000
Manifest next update: Sun 24 Aug 2025 06:00:26 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: ipL1Ewjh9zbRSpBpwamUh0hpUVDeRfFDUNcJTMKWESU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:92:79:ae:aa:32:cb:6b:9a:d6:7d:f3:67:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Aug 23 06:00:26 2025 GMT
Not After : Aug 24 06:00:26 2025 GMT
Subject: CN=8e786a42623a21dec28bc087ee9c37299ce63246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:0d:8f:92:18:78:47:27:28:2c:d8:b1:aa:
34:a9:9f:96:2f:1d:3e:e3:ca:3a:bb:13:ad:1d:85:
da:43:46:9a:e2:88:c5:25:17:42:d5:09:18:7a:16:
e7:a8:7c:80:1d:f4:51:1a:3c:08:f2:4e:88:97:0e:
cd:5f:48:b5:6c:86:c1:03:70:e1:8b:5e:71:01:9d:
9e:fe:53:61:c8:0d:65:14:2c:3a:75:3e:db:8a:8d:
2c:61:62:40:00:57:49:0f:cd:90:18:9a:b6:bc:9d:
05:f4:4d:fa:88:fd:8c:69:8e:22:7e:70:df:cb:92:
2b:4b:8f:dd:81:29:08:18:41:ac:75:3e:70:be:78:
93:ae:e1:5c:10:bb:40:4c:55:11:7b:23:70:ed:d5:
8f:e0:17:b5:36:54:9d:41:95:ee:78:59:05:e1:51:
66:a4:14:2d:27:54:2f:6a:2c:57:db:08:6e:fd:98:
74:f7:be:30:90:21:b3:70:5b:56:a4:01:d1:da:cc:
68:45:d6:59:d8:48:7f:cb:a1:c5:a1:af:56:a0:fb:
7f:cc:1c:74:00:0d:f1:a1:0c:8f:ac:c7:77:d6:b6:
71:1b:3a:40:cd:48:f6:5e:38:f8:de:c2:09:66:95:
d3:a6:3c:e1:fe:c9:f3:d8:c8:8c:d6:77:38:fd:65:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:6A:42:62:3A:21:DE:C2:8B:C0:87:EE:9C:37:29:9C:E6:32:46
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8c:95:98:40:9f:1e:ec:21:36:71:de:10:de:be:72:2b:82:
3b:32:8f:4d:89:9f:eb:36:70:33:71:08:2f:c2:b1:44:03:06:
0d:96:05:d7:cc:e3:e2:88:04:ee:de:cb:21:a5:ac:1e:32:fd:
9d:7e:71:5d:62:cb:8c:c5:e0:dd:b0:d3:5e:24:71:23:61:0c:
d7:67:63:76:c2:a3:89:e4:07:d9:3b:7e:df:b6:93:69:fb:fd:
4e:75:e3:df:6f:54:6f:5a:0b:79:49:b6:ba:fd:49:e2:69:ea:
01:11:51:aa:36:fa:5b:6e:ff:b4:91:c9:66:c6:0a:19:41:6a:
81:7a:7a:61:1b:52:11:84:b3:36:f7:87:51:5f:1a:fe:5f:0d:
5e:38:05:eb:78:05:8e:68:ed:16:72:de:67:30:17:1a:c4:97:
57:e4:d5:d3:4b:22:d5:3c:54:fd:7c:20:65:a2:79:c2:03:db:
b6:82:8a:b1:c2:43:b4:99:a4:9d:ee:4c:ac:5b:e1:75:74:db:
d3:19:43:f5:df:2a:55:cd:de:07:4b:79:1e:7b:41:33:d9:cc:
2d:da:b6:98:74:e5:cb:30:aa:71:03:32:8b:bc:48:92:a0:76:
e6:6b:d7:54:fe:5e:de:2d:c8:f7:39:2e:25:88:09:06:ae:50:
69:2c:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:38 2025 by rpki-client