Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: Zumydc7z1OKJqeYLJ8H5tO727YdO8fwaX+l/amJgO6I=
Subject key identifier: 02:E6:BC:BD:AD:D4:D6:8E:F4:E2:C4:45:4C:5F:AE:E8:B8:08:15:6C
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 0198D705E3F039366627A23A1CE2FC4D60ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:24 +0000
Manifest this update: Sat 23 Aug 2025 13:02:24 +0000
Manifest next update: Sun 24 Aug 2025 13:02:24 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: MafUYkF2NUr/UC+vKZtaXec8x1HkdWT9lQc/1wmi+QU=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e3:f0:39:36:66:27:a2:3a:1c:e2:fc:4d:60:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Aug 23 13:02:24 2025 GMT
Not After : Aug 24 13:02:24 2025 GMT
Subject: CN=02e6bcbdadd4d68ef4e2c4454c5faee8b808156c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:44:89:5c:de:b3:ec:ae:85:34:e9:99:fe:
3a:ca:f4:a5:31:c0:b0:f9:65:46:87:ae:ac:18:c7:
68:70:11:fe:d5:d8:fb:36:7d:e0:0b:25:7e:02:79:
07:c1:b4:5b:36:c6:ac:1d:16:4c:b3:6d:02:fc:a5:
7d:b5:5f:dd:0a:9a:c7:b8:c0:df:68:4b:10:6f:4b:
39:39:a5:ea:5a:d9:36:55:0d:01:7b:62:e0:45:5f:
0d:84:cb:71:34:e9:0c:9f:93:5e:cf:0a:6b:2d:1a:
9e:99:84:e7:31:b9:4e:48:9b:ca:fc:ae:6c:f4:fa:
02:d9:26:5d:f0:bc:20:f6:37:0c:77:93:0d:f6:f6:
c5:fb:a0:89:27:ba:e8:b9:27:b6:74:15:2e:be:2c:
1b:0f:60:66:71:98:7f:5f:55:fa:26:7b:17:b2:8b:
1c:57:de:c9:6f:01:5e:29:32:dc:eb:eb:c1:4e:30:
89:31:4b:25:06:ef:86:ff:45:20:66:a1:90:13:63:
7f:8a:34:45:c7:38:ab:fc:a3:93:33:85:2b:31:e8:
cd:ae:5a:41:4a:7c:a8:38:28:f9:9c:ae:d3:da:51:
0a:d3:40:f2:51:a0:71:3d:fe:bc:90:71:93:3d:d5:
80:73:e1:f0:62:cc:b0:4f:9d:17:ef:80:5e:fb:c2:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E6:BC:BD:AD:D4:D6:8E:F4:E2:C4:45:4C:5F:AE:E8:B8:08:15:6C
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:69:9c:f3:e7:6a:ea:41:d9:ba:7f:33:b1:4e:72:40:5c:ff:
02:8c:d2:ee:b7:28:d3:59:69:f6:3b:f4:a5:1e:8b:1e:fd:06:
9c:03:c9:f0:14:9d:cd:79:25:7f:9a:af:7d:3b:3a:88:22:f3:
c1:0f:d3:2b:2a:29:fa:54:6b:bd:fb:8d:f4:54:08:b2:19:c0:
00:07:a8:5a:dc:8d:b4:39:a7:b5:ac:57:fb:91:0f:b9:d7:2f:
be:80:e5:eb:49:fe:f6:47:24:40:62:75:67:a7:53:d6:41:26:
b7:31:a8:6a:aa:13:28:db:ca:14:6a:e4:aa:fe:00:e4:56:86:
f6:be:59:5c:89:c6:1c:63:87:09:07:4e:09:79:5e:48:76:cc:
e5:e1:e6:05:b5:b4:f6:3e:02:18:92:36:be:d9:76:c2:b1:2f:
5f:52:cf:6c:55:19:5d:d6:73:b4:49:30:f5:4c:c7:2c:50:c7:
aa:58:2b:a1:ad:ff:65:4c:e2:ce:39:0c:43:a4:62:9d:49:8a:
dc:fd:38:fb:6d:74:0b:88:0f:43:50:e1:2b:b9:5a:04:6a:f9:
fe:fe:bb:b9:14:d2:95:09:e1:a1:25:3d:c6:97:2c:31:88:4a:
bc:a7:bc:81:8f:b3:a1:e7:f3:63:87:19:27:15:11:57:84:e3:
30:78:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:45 2025 by rpki-client