Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: jYLuG2L9jWPjBlTzJQl2at5sQWJMN99LTEcfuz3ywrg=
Subject key identifier: 44:2A:0B:07:4D:2B:E8:80:B6:98:31:41:C5:80:F2:56:D5:FD:63:C3
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01984BC1756AB4C4E21C2158DA372B24A9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 12:00:26 +0000
Manifest this update: Sun 27 Jul 2025 12:00:26 +0000
Manifest next update: Mon 28 Jul 2025 12:00:26 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: 2ydtXIgyE++wL6Kvub0Mh+TlRc+toz4Uzfr0tPPBX6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:75:6a:b4:c4:e2:1c:21:58:da:37:2b:24:a9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Jul 27 12:00:26 2025 GMT
Not After : Jul 28 12:00:26 2025 GMT
Subject: CN=442a0b074d2be880b6983141c580f256d5fd63c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:7c:b5:57:8b:48:23:a8:45:b0:e6:f3:85:
79:5f:2b:c3:ed:3e:d6:cc:f8:dd:5a:29:81:2f:7a:
c6:8c:e6:76:0f:0c:30:c6:e9:f2:84:57:93:bb:dd:
4d:55:f6:95:85:8a:bc:23:3c:1f:8c:37:0f:58:0d:
6d:2a:10:52:29:f2:f9:21:d4:ef:8f:2f:6a:28:13:
38:15:f8:76:a5:b6:38:ba:91:82:60:2e:23:d1:c2:
2d:4f:17:05:96:91:b4:23:4c:67:f5:37:12:a0:31:
7e:2f:3d:e7:32:a7:97:1b:ba:63:1c:5c:32:57:09:
c7:cd:f9:54:c9:fc:48:d2:88:21:0a:d7:9f:76:36:
b2:d8:75:1e:7f:fb:d8:9e:da:c2:6a:7e:4b:77:ae:
b2:ff:9c:e9:f0:eb:73:cf:d4:e6:76:4a:de:1a:2c:
48:72:ab:61:a3:4e:7e:d0:4f:62:e8:bd:4c:54:70:
43:a4:aa:b0:d4:8c:2d:4d:ef:fa:ec:84:56:e0:b4:
0a:3c:a1:b2:17:15:df:cd:e3:8a:26:ee:06:39:4d:
1c:1f:02:59:ba:13:53:ea:74:82:ff:5b:33:ed:19:
e0:8e:24:a0:0f:6d:4f:01:49:5b:fd:4e:bf:1a:bb:
2e:dc:9a:dd:0f:8d:40:7e:7e:0d:a2:56:32:4a:29:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:0B:07:4D:2B:E8:80:B6:98:31:41:C5:80:F2:56:D5:FD:63:C3
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:62:c9:f1:71:e9:59:61:6f:40:29:86:01:c4:f5:65:06:
ff:55:e1:47:73:6f:26:25:d6:1c:ae:f2:d3:ac:7f:87:e1:de:
cf:9f:e4:f3:1c:78:ac:64:27:26:60:d1:23:95:fb:c1:43:a8:
55:97:a4:53:dd:19:b3:75:59:a4:f0:f7:25:c3:77:5a:97:08:
6e:b4:8e:68:f3:0d:8e:f7:40:e4:a1:05:6e:7c:f2:91:2c:a8:
44:54:6a:bb:7b:57:c9:83:e7:6d:fa:eb:bd:46:61:dd:d8:14:
ee:1c:4e:eb:9b:8b:8c:56:82:c2:83:92:17:41:f7:9c:51:4d:
db:05:e3:bf:8b:49:f1:d9:65:55:eb:a0:d8:6f:4c:d7:2d:a9:
af:13:df:ad:f5:ef:ce:70:53:f3:3f:f5:95:bd:d1:4f:80:79:
e5:ec:8d:be:6c:12:c0:94:1c:63:85:23:f9:d4:c7:9c:55:7e:
e7:7f:3a:31:fc:cd:67:35:e1:49:86:a3:84:dc:66:bb:05:2a:
fd:3f:00:64:de:cf:1d:c6:6c:ee:9e:cb:a4:81:42:07:39:af:
fa:49:69:9b:ac:51:f3:b6:e3:0d:0e:9d:57:f8:04:ce:6f:4a:
dc:8c:47:48:85:70:2b:c9:fa:e2:ab:41:32:a0:a4:86:c3:37:
9c:91:63:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:59:01 2025 by rpki-client