Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: 1YRNJoDEgsHilYcSCzgdZfI68yxUtrsB62IREQDoFis=
Subject key identifier: 2D:6A:1B:C7:57:32:B6:C5:4F:87:77:74:A2:67:CB:31:75:79:5D:8C
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 01984C666513D0B47B3DC84A5204744EBA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0D10
Signing time: Sun 27 Jul 2025 15:00:35 +0000
Manifest this update: Sun 27 Jul 2025 15:00:35 +0000
Manifest next update: Mon 28 Jul 2025 15:00:35 +0000
Files and hashes: 1: BRx8YXqDNB1GFUFqyh6QeZ00QCQ.roa (hash: o3eKIyn+wElbYPzG51u2wAS6yMUVN8sHDDwj5Rm2E/Q=)
2: TDNldyoVb4xBkRrsANEwRdX0Uqs.roa (hash: wQFfix2hzJo3LB++Adj8kc2QXPUVVh12Ff6IX0c9r8w=)
3: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: DTSV6KlkrTxDso0PsFShEM9tTTXMek9UeJa4iQg4jSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:65:13:d0:b4:7b:3d:c8:4a:52:04:74:4e:ba:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jul 27 15:00:35 2025 GMT
Not After : Jul 28 15:00:35 2025 GMT
Subject: CN=2d6a1bc75732b6c54f877774a267cb3175795d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:4e:2b:41:ed:ea:5e:23:2b:95:0a:e7:9a:
fa:95:ee:8d:ed:0f:46:9c:d1:23:28:d5:c5:d4:33:
db:50:73:23:c4:2f:da:84:1d:5c:a6:ab:c8:0f:c6:
89:f1:b3:b0:c8:ce:a8:5d:ba:df:ea:41:95:a7:5a:
d8:06:b9:fe:7c:00:e2:c7:5e:b1:cf:54:70:5e:d9:
91:57:19:dc:5c:1b:fc:46:52:47:cb:f4:66:3d:f2:
e6:f0:b9:31:04:84:fb:da:59:b3:a6:70:24:1c:35:
2b:b4:75:a2:ce:0c:bf:7e:4e:c6:bc:d2:65:40:58:
a4:6b:3b:d8:a2:be:f6:a6:5c:06:6a:c9:9d:52:ff:
d4:4f:b5:7b:06:04:3c:12:ac:dd:fe:bf:cb:f0:7c:
59:0c:da:78:46:d1:77:ae:0e:ac:90:5c:8f:e4:0f:
58:25:0d:25:02:8f:e5:82:85:43:8f:ac:78:c8:74:
e0:f4:c9:a7:fb:ce:9c:69:6c:d2:cd:c0:83:c6:4b:
86:82:37:81:57:54:90:84:07:33:3d:27:61:ac:b7:
53:a3:26:80:e1:a2:94:71:4f:9f:87:c3:4c:96:d7:
b3:cf:1f:45:46:94:89:39:85:99:18:5e:13:85:bb:
10:83:d7:a6:5d:f1:73:1b:f4:ed:e2:74:71:b6:97:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6A:1B:C7:57:32:B6:C5:4F:87:77:74:A2:67:CB:31:75:79:5D:8C
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8d:a3:2e:1a:d8:d4:be:84:36:fc:ac:4c:4a:a0:b5:47:91:
01:fe:e4:4e:02:8a:bb:c1:7f:5e:49:2c:6b:05:b8:5b:14:d1:
6d:2e:bd:c1:79:4c:4b:9b:4d:a2:86:c9:37:be:67:71:83:56:
3d:a8:7d:f0:ad:11:88:38:a6:51:85:34:99:8b:25:77:cf:53:
59:62:8c:4c:5c:0d:5a:1e:0a:94:e9:47:44:d0:d2:bd:77:a3:
d3:70:5d:c3:5d:32:0a:69:4b:62:85:d9:ca:6b:43:e7:93:9b:
ff:bb:4b:70:80:5e:97:af:9d:50:4c:b9:22:be:8b:9b:67:51:
08:b4:67:54:8a:0e:0e:0d:4c:1e:eb:16:79:fb:67:f5:22:9f:
d9:4f:86:47:2d:f3:c5:f2:00:ae:db:a0:93:47:d0:7c:91:93:
f8:83:4f:cc:6a:9a:60:81:00:e6:d2:05:78:64:98:f2:cb:bb:
81:f8:ce:bf:29:75:2a:e6:f0:57:36:e5:1c:05:43:d4:12:6c:
20:e5:6c:b7:f3:47:f0:96:ad:9d:89:eb:d9:5c:5f:61:a1:bd:
ca:b9:a3:4c:a0:5c:21:31:64:88:2d:3a:60:8c:36:26:21:d2:
d5:4a:5e:ec:e3:b8:31:47:71:0e:33:58:1b:e2:d9:a2:c9:7b:
9b:66:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:44:08 2025 by rpki-client