Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: pmNZvSGgI+xKiOuUIG8eu10ua6Y702EUXZXITFBOLAs=
Subject key identifier: 8F:5B:15:6F:27:17:F2:BD:47:F6:DF:9D:5A:C0:33:D9:9E:1C:6F:8E
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 0198D73B4415252020D7F1FD66B623DF8E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0D32
Signing time: Sat 23 Aug 2025 14:00:42 +0000
Manifest this update: Sat 23 Aug 2025 14:00:42 +0000
Manifest next update: Sun 24 Aug 2025 14:00:42 +0000
Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: q6jAc9mjoqW9NlIyRSWQZ1IInNlyRGzuCazNxT9ZXyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:44:15:25:20:20:d7:f1:fd:66:b6:23:df:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Aug 23 14:00:42 2025 GMT
Not After : Aug 24 14:00:42 2025 GMT
Subject: CN=8f5b156f2717f2bd47f6df9d5ac033d99e1c6f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:bd:e7:9d:4c:ed:69:49:d3:7b:f3:a1:87:
ed:5e:88:0e:82:2b:b4:36:47:8f:75:52:ca:db:08:
8d:28:13:77:57:52:74:2e:12:d6:2a:e3:b3:06:b9:
dd:62:74:48:5a:58:77:24:41:4a:5f:09:a0:7c:29:
fc:6c:19:b8:9c:64:c1:f9:28:ce:ad:e7:2f:e5:ec:
c4:a0:a3:c4:26:10:f1:3a:7e:ac:f5:68:d2:4a:8b:
7a:b5:7d:c0:3b:0c:0e:85:d5:34:16:c0:83:dd:16:
24:0a:10:e7:6f:24:04:d5:e7:e0:a2:d9:94:e6:37:
78:6d:e4:99:7b:89:a9:e6:a6:23:07:b9:c9:bb:a4:
d5:62:47:57:67:d3:bc:85:30:ed:1c:cb:8d:14:1b:
3b:91:57:07:9c:e9:14:80:c5:ed:9c:64:84:23:45:
35:42:4f:8a:76:4e:6c:59:bd:4b:ca:1d:56:b5:93:
9d:30:28:26:2a:63:09:90:39:71:d9:c3:87:74:88:
0f:13:47:06:d2:aa:5e:b1:3f:14:76:7e:ff:a0:a7:
c5:77:75:42:71:06:fb:88:9a:fd:08:7b:c4:99:13:
4b:e9:cf:15:ce:56:98:f8:bf:87:3e:a2:92:f5:89:
4e:ea:2f:52:40:a7:e9:17:9a:e1:1a:b2:3c:78:b9:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:15:6F:27:17:F2:BD:47:F6:DF:9D:5A:C0:33:D9:9E:1C:6F:8E
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:eb:2f:6b:f7:78:39:3f:19:63:f7:54:83:5a:94:d4:ea:b6:
71:7e:7f:c0:0f:de:60:9b:2e:6d:a9:2b:11:a9:c2:bd:fb:f2:
22:d0:14:20:28:d2:51:f3:51:c7:67:0f:c7:d4:c3:a4:7a:db:
6f:7e:59:28:e5:04:12:07:4f:32:d5:43:be:2d:ab:d8:5c:e7:
cd:0f:33:f6:96:f5:31:87:74:17:69:c8:26:6e:bd:f2:a3:35:
ac:fa:7f:2a:d1:5a:94:05:22:cc:5d:09:18:13:cb:f8:76:de:
cd:d5:83:cc:3c:bf:6a:98:20:6a:16:a6:de:76:0f:a9:a7:46:
ba:9f:4b:4d:65:52:a1:4d:a3:82:2c:07:4c:08:85:3e:7c:60:
34:49:fa:6c:e0:25:eb:32:0b:4c:4a:b2:9c:65:9a:1e:10:52:
8f:89:cc:61:73:8b:3f:34:e2:06:62:0f:20:ae:02:4d:71:e4:
e6:d1:79:5a:69:a9:b8:21:57:d4:51:a8:a9:d2:6d:96:d7:08:
f2:f2:6a:88:d6:84:c8:4f:7b:ad:76:60:5c:59:f2:0d:3f:28:
28:5c:ac:57:1f:b6:02:29:5a:9d:01:ab:67:54:d6:e6:13:b7:
c1:be:8f:b6:73:5d:49:c2:b3:b1:e8:46:3f:9a:30:96:6a:fb:
b6:d7:4f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:53 2025 by rpki-client