Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier: YG5HdSoWqtEPUt7XoCuraplvBm8w8Mxbg+wOppZSqqo=
Subject key identifier: 85:AC:F9:B7:96:A7:0D:9B:EF:49:EC:8A:62:3F:F3:68:DB:E0:E0:53
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 0198492E1CB8C9EB6D6D7FB816D031D9D85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 00:00:15 +0000
Manifest this update: Sun 27 Jul 2025 00:00:15 +0000
Manifest next update: Mon 28 Jul 2025 00:00:15 +0000
Files and hashes: 1: 2EgNkY8LCfJBqiF5G8pJe3q0hB4.roa (hash: wdnhU8m5AMaVCnPJuJ1ikMuyahXryJ7xnwDGzqvqxIk=)
2: B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa (hash: x4fcMnOhpMuR2+7kVYptH+8Mn3pldQm1ilWOcm4WRJw=)
3: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: ErvABGaelQ8rPuuHkFRZcHTKoN+8eyebgc/La58OZA8=)
4: jKTi0IFy2Gsl-io5IjP67e8YnpY.roa (hash: zmbRyxceh2NVjEHPxC/G8V+VaBl1rJ3CnIcL4cBiYPg=)
5: onHMu3bAahxq_cU4SfKfk6E_UV4.roa (hash: iPBBLCVey8nRw59EFOtKkUkXyLv07ioTCFN/ZWTNZaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:2e:1c:b8:c9:eb:6d:6d:7f:b8:16:d0:31:d9:d8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jul 27 00:00:15 2025 GMT
Not After : Jul 28 00:00:15 2025 GMT
Subject: CN=85acf9b796a70d9bef49ec8a623ff368dbe0e053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:4a:00:59:60:d4:a8:ee:d5:4e:6f:f6:2e:
df:5c:7f:99:2a:f1:fd:ee:f6:e8:28:ba:e3:88:79:
aa:a6:0d:fb:29:e5:b0:47:95:77:b2:70:d5:8c:aa:
71:4e:df:fb:93:8c:15:86:df:fd:4d:39:92:00:1c:
41:56:d8:4d:12:aa:44:47:0b:51:61:8a:a7:e5:cb:
ad:99:1f:ec:97:96:7e:a7:b9:73:f3:79:e6:8e:9f:
4a:15:c1:8e:07:43:dd:0a:eb:ce:a0:a8:89:a5:f6:
b6:a8:7c:dd:22:4d:02:cb:d1:b0:23:14:6e:b8:02:
74:aa:b7:70:01:80:82:b8:ec:28:d0:d9:79:3c:ea:
ed:5c:2a:5b:a1:76:66:04:b4:91:db:33:67:0e:30:
e2:c6:6b:0c:5b:8c:dc:26:0d:7a:67:b2:cc:da:c9:
f5:fc:9e:00:3b:48:c5:0f:a0:79:98:17:b5:44:d6:
68:fb:e2:51:85:0f:1c:17:d3:b8:00:18:a1:8b:ec:
1b:00:10:6f:e4:79:1c:33:b5:c7:11:1f:12:f2:50:
c7:69:80:94:10:4c:ea:26:77:27:50:f2:9c:47:41:
3f:e5:3c:09:0e:67:19:ff:bc:10:69:19:61:0d:14:
ff:c5:66:59:de:73:92:e9:1a:91:5e:80:55:e9:f6:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AC:F9:B7:96:A7:0D:9B:EF:49:EC:8A:62:3F:F3:68:DB:E0:E0:53
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:48:6e:62:fd:5c:d0:09:fd:d2:7d:2c:e4:cd:bf:65:86:98:
82:32:c1:63:37:f3:fd:bb:dc:e3:eb:c6:f4:d4:34:57:32:01:
df:28:ef:2e:92:19:af:71:6f:d3:b0:68:71:d9:9b:c8:28:fd:
be:c2:71:2e:ec:12:9d:e1:36:a1:28:22:17:a2:c8:93:72:63:
f2:a5:db:a9:6f:6d:7a:42:56:67:f4:af:5e:fd:e9:13:07:ca:
a9:85:22:11:3c:ee:c3:38:9d:72:dd:b3:b0:bf:09:d9:cc:e3:
c9:8f:ee:92:3a:2c:e9:af:e7:a4:91:28:2b:cc:59:ed:c3:cd:
e2:14:ca:b0:af:33:95:1d:5c:25:bf:c2:70:8d:b2:35:c9:43:
c0:63:10:49:7b:b3:f4:68:ff:4b:83:7a:b5:7e:88:9f:71:0a:
04:af:4f:28:06:65:9e:6e:7e:c5:b9:84:07:90:2c:5c:97:38:
00:c1:8b:89:98:0c:f4:f5:c5:ed:b3:50:1b:96:a5:4a:5d:6f:
8d:e4:ab:80:16:5b:86:f7:a0:47:b4:ac:c9:00:d2:ae:63:f2:
69:a1:b0:c5:73:4a:c0:bb:74:ba:68:10:7c:8e:d8:5b:0f:5b:
c2:00:3c:b4:c6:8c:4f:76:b4:a6:4d:06:c7:9c:00:6b:a6:a5:
3c:be:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:38:41 2025 by rpki-client