Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: TCAvdQId/22YnTifpSY3IiZsUBgFhU/1BKXgDYYDaHU=
Subject key identifier: 0C:12:BA:46:6E:F3:D4:3C:0D:55:B8:EA:D2:1B:D7:A5:F4:F5:12:B8
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 0198D5BC22C43534385CAD1E75FA02C6EDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 09AB
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: fvnyt6q6CEvFNf7kIQQl2zOhTyqEyjb3b+rzPjbEYfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:22:c4:35:34:38:5c:ad:1e:75:fa:02:c6:ed:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=0c12ba466ef3d43c0d55b8ead21bd7a5f4f512b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:16:24:a9:82:a0:2b:df:98:37:12:cf:cf:
06:83:81:c2:f9:89:b7:3b:47:67:d1:6a:7a:26:1d:
4c:bf:f2:0c:52:03:da:c4:1f:33:23:8e:46:8a:4f:
52:35:18:b7:44:f3:32:7c:0a:92:a6:ad:d4:e2:c3:
73:e6:cd:77:e3:68:a3:25:29:6a:37:3b:d0:48:c9:
41:4b:36:c0:36:ee:ef:8d:f6:5c:1e:26:92:e5:5a:
96:3c:87:be:f6:e7:6f:c6:60:23:66:2c:26:ee:d7:
e1:9f:5a:cb:2a:e5:47:e2:f4:59:98:94:da:55:02:
c5:45:50:ac:32:85:ab:81:ab:03:93:ff:f9:f4:d3:
79:e7:86:41:25:a5:9a:bc:42:71:06:fb:95:7b:8d:
ef:e3:44:92:5b:5d:4d:96:62:d2:bb:11:a2:98:3e:
80:0a:75:b4:a5:c6:59:06:59:9b:76:65:fb:0b:76:
f6:83:ce:60:6d:1b:24:03:95:47:0c:4f:07:dc:03:
a7:09:8c:d6:47:7a:dd:44:2b:e2:52:07:00:42:1a:
74:98:a7:ea:07:88:a8:99:0f:70:7e:5f:1a:b0:ef:
fd:21:b3:92:e7:2f:3d:e0:8b:26:ef:c5:3e:b3:39:
88:a5:83:cc:7c:06:52:85:37:1d:d8:05:8d:50:71:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:12:BA:46:6E:F3:D4:3C:0D:55:B8:EA:D2:1B:D7:A5:F4:F5:12:B8
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e3:91:68:d2:26:be:e1:b6:a4:80:b2:4b:8f:5c:ee:91:0e:
a8:83:9c:ca:31:e8:52:f9:19:95:81:2f:80:f7:a3:31:4a:87:
1b:70:90:00:74:f0:30:f7:32:5f:46:b7:98:1d:99:79:25:72:
32:ca:d7:be:e0:be:20:24:43:23:6c:29:10:79:4a:7d:d4:c3:
18:20:5e:32:0c:22:48:1f:49:a6:b4:0c:4d:ca:5d:b5:25:ef:
f3:77:62:16:8d:5e:ae:b9:ed:cd:b4:b3:9c:f5:a7:f7:07:75:
51:57:28:0f:93:08:0f:c9:53:0c:56:70:07:1b:f7:05:4b:ee:
f0:44:11:1a:06:2f:97:a9:21:35:e6:fe:12:0f:b7:cc:88:9c:
bd:13:bd:13:0f:03:2b:4a:57:f8:dc:dd:c5:60:09:0f:23:44:
6f:b9:4e:45:78:23:9d:17:63:b6:5c:9d:d2:04:aa:f8:cf:99:
02:41:bb:3f:61:00:8f:c5:e4:4d:33:f4:36:b5:b4:fb:d5:78:
0c:25:cb:e3:25:24:5b:c0:24:a5:5a:86:cc:77:24:00:50:b6:
a7:a0:78:88:a3:bf:23:a6:9c:cd:75:a9:34:63:4c:0d:a1:03:
a3:ca:fb:33:0b:28:b4:d6:49:3c:31:8f:5b:bf:c0:d0:4c:fb:
66:12:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:49 2025 by rpki-client