
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: tqa849TxPKW848ayIdJ9WRcKYLOaPADnJEMdi2lYOpw=
Subject key identifier: 7F:67:83:A6:98:7A:F3:31:1E:DF:89:7F:87:63:55:73:B3:15:93:3C
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 0198D6604F1B059E1053AD4867289ADF5491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: 3P628PQM+60fKiiWk+jljIlH/eROll1+e8ONXvnhimY=)
2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4f:1b:05:9e:10:53:ad:48:67:28:9a:df:54:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=7f6783a6987af3311edf897f87635573b315933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:55:d2:6f:dc:10:3f:10:36:13:0b:94:57:
b3:6d:92:52:ed:5e:85:94:df:9e:71:c4:67:24:bc:
15:7f:94:e0:93:1f:ba:ea:8b:16:f7:d8:3f:02:fb:
0b:a3:7b:c2:60:4b:7f:9e:f9:61:58:8d:c6:40:e2:
a5:29:0d:88:03:74:eb:40:bc:1c:3a:cd:45:85:0b:
8e:67:6b:e1:08:12:27:dc:0c:d6:57:06:f0:42:7f:
29:2b:dd:e7:8b:0c:86:71:26:e7:23:72:c7:72:2c:
ba:43:f0:1a:70:f6:96:b6:8f:2a:66:4a:9b:ac:58:
3e:7f:8a:a2:56:0d:51:54:02:26:24:d6:47:ce:7a:
f6:c1:d2:7a:a7:fe:82:4a:85:af:27:88:71:46:27:
c3:29:64:d6:c4:2a:cd:51:1a:85:0d:b0:8d:c7:d8:
da:35:1d:c1:f0:76:d2:f6:b6:06:fa:ce:05:cf:61:
e4:47:27:b4:20:af:42:e6:af:9a:15:ae:e0:1b:a1:
7d:fc:e3:71:30:47:69:09:1c:a8:16:de:da:b4:d7:
c0:4a:07:b7:39:6f:5c:dc:12:c2:5e:90:98:eb:35:
e3:de:dd:85:0c:e3:74:5d:2b:dc:e2:a3:03:75:3f:
6f:84:83:2d:6b:7e:ac:01:4a:46:66:5e:28:95:6a:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:83:A6:98:7A:F3:31:1E:DF:89:7F:87:63:55:73:B3:15:93:3C
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fb:12:16:30:cc:7c:8f:9d:7a:50:ac:65:60:66:e6:b9:bd:
a9:d1:6b:3d:9e:cd:64:8d:9d:29:1b:bb:5f:6b:19:d2:4b:94:
65:65:4a:06:66:e9:8c:a3:89:d6:44:00:6e:6e:37:67:5a:71:
c0:2d:ee:9b:e3:f9:42:c4:32:09:85:70:0f:76:77:cb:ed:05:
09:37:8a:8c:8d:88:ef:a5:db:fd:97:64:be:92:72:46:01:0f:
f5:b2:d6:66:c1:f3:04:9b:7b:3b:61:95:26:06:0e:03:ef:cc:
81:fb:eb:7e:5d:c8:70:35:bc:2c:02:e0:b1:88:6b:b0:99:68:
bb:b1:4b:8c:52:b5:48:09:a2:e5:29:e9:90:13:ca:af:56:ef:
0e:2a:7a:32:40:c8:6c:2b:12:41:8a:6c:3a:ca:77:20:80:0f:
ed:46:b3:b9:77:ab:5e:c4:3f:8b:06:59:8f:81:4d:6d:ca:cf:
39:9f:17:32:fe:d4:f9:dc:3f:76:65:e1:c6:1b:e1:29:59:58:
81:60:cb:c0:bb:6a:bd:3d:1e:c5:9f:0a:77:19:c8:c2:c2:88:
1c:4c:04:53:f8:b4:2b:ab:0e:cd:9c:37:7b:6b:00:63:e8:9b:
c1:53:3b:f5:28:78:12:98:b9:41:82:c8:36:91:46:01:27:2e:
44:f2:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:27 2025 by rpki-client