Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: VfcYH3IEEEKV24r8aiR1zhOlcPFVtGJ6tsm5eNIFlQQ=
Subject key identifier: C6:ED:19:1C:13:64:34:DC:70:D5:AB:70:DB:01:99:F7:11:14:99:CE
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 0198D5BBA7851303D8D149089E90ECF4759E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 1110
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: xu99OyYnpf1OZU5AcLa56ZLNgjjCzwa1kOuW6oiumrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a7:85:13:03:d8:d1:49:08:9e:90:ec:f4:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=c6ed191c136434dc70d5ab70db0199f7111499ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:25:a2:bc:d3:c1:26:41:28:fc:e8:6d:12:
5e:bb:5e:13:76:8a:ac:57:47:cf:1a:ac:f9:e0:41:
63:65:bf:e0:f3:3a:e7:07:53:88:d2:0e:5f:1a:cc:
17:19:a8:be:61:6f:62:cd:6d:f5:eb:13:dd:74:1f:
ac:68:7d:25:dc:c7:a4:40:99:4e:6b:a0:95:dc:35:
74:db:e7:a2:48:5e:44:9a:d3:9a:3c:9c:d9:e5:35:
6e:01:1c:07:e2:76:51:4d:a1:29:43:ff:be:43:6d:
7f:62:0a:61:31:64:a1:8d:f2:e4:82:4d:2b:75:f1:
cd:32:0a:2d:cf:ef:d4:d3:05:d7:4f:ed:1b:a1:a7:
64:de:51:ab:b6:a9:49:62:37:ae:d3:5a:96:ae:74:
05:a0:6e:4e:1e:1e:37:ad:8b:39:1c:21:50:31:0f:
02:73:b7:2a:40:d5:ef:67:ab:2e:b1:ed:93:76:0c:
03:0e:c9:4d:6b:57:8f:50:78:45:0a:e1:90:50:3a:
b1:ff:d7:77:f4:08:c3:f6:a0:ad:ba:cc:fa:b4:df:
f9:a7:27:61:00:da:6f:ff:98:a9:64:c8:ae:cf:f5:
9a:16:14:b6:47:55:e5:e5:57:f0:e8:31:75:d7:10:
96:53:30:53:65:e0:5d:eb:b5:35:d5:89:bc:51:98:
02:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:19:1C:13:64:34:DC:70:D5:AB:70:DB:01:99:F7:11:14:99:CE
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ec:cf:46:cd:a6:9d:cd:5c:0a:69:7e:f4:bf:2e:e0:29:4a:
4b:e7:ff:b8:9d:27:82:4f:80:36:be:3e:f3:44:40:62:7d:0c:
62:6f:cd:5b:ab:7f:31:4f:9d:cc:bd:b0:24:91:ee:41:36:63:
3a:6f:a6:1d:60:11:d1:fe:c6:e9:ef:e8:75:68:28:18:87:2b:
69:95:33:1f:28:0e:64:a7:2a:b4:79:65:07:f4:93:72:9d:2c:
02:ea:75:73:5d:5f:26:df:76:35:c6:ca:9c:e9:e5:1f:c0:58:
38:14:69:20:d0:e9:d0:51:f2:fb:f5:8f:7d:2c:a9:64:83:c8:
75:86:37:fa:00:9c:16:29:f0:59:3b:46:bb:ad:15:4e:ce:14:
3d:4c:7a:39:89:82:70:7a:29:3b:24:05:e0:4a:10:66:0e:1f:
66:42:d1:44:27:ff:24:99:5a:fc:b1:03:00:d6:38:07:53:e9:
cb:f9:97:b8:a6:35:c7:51:c7:af:b1:27:d0:34:38:b9:ab:f6:
8f:0c:8a:f9:cf:bc:c3:4e:68:31:b3:4f:f8:59:63:6a:8e:ee:
f5:40:3b:cc:94:87:42:58:e9:05:43:8e:9c:c1:07:73:23:c9:
ff:a4:3d:82:65:4c:63:14:2b:7c:c0:3e:41:3f:78:09:c1:32:
6a:11:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:16 2025 by rpki-client