Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier: FWGrduyUaVWGXmN+1CPhZG463RGdCQFq+c2Q0oxgKx8=
Subject key identifier: 0F:53:E4:52:26:6D:B1:C6:17:81:E2:1E:4B:0E:17:91:FF:1A:44:74
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial: 019847E55C610D43987E3EB0DCD4B8A4331E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number: 0ECA
Signing time: Sat 26 Jul 2025 18:01:10 +0000
Manifest this update: Sat 26 Jul 2025 18:01:10 +0000
Manifest next update: Sun 27 Jul 2025 18:01:10 +0000
Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: wZF+Sb0A//a+v/0opofUvKKzysscIoDjphyJyWQEvPw=)
2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:5c:61:0d:43:98:7e:3e:b0:dc:d4:b8:a4:33:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
Validity
Not Before: Jul 26 18:01:10 2025 GMT
Not After : Jul 27 18:01:10 2025 GMT
Subject: CN=0f53e452266db1c61781e21e4b0e1791ff1a4474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:99:fd:04:32:f7:77:2a:89:ed:c9:6b:e3:
84:93:9b:9a:96:4c:59:74:89:40:a2:c2:26:56:b8:
30:32:0a:c3:83:dd:17:8f:b1:78:a9:2d:dd:7c:8c:
a9:c5:00:5e:b0:d6:86:bf:b4:a4:4f:77:94:9d:f2:
df:15:d9:04:ad:73:e5:41:f9:a3:a8:bc:2b:f6:68:
e4:41:79:e2:86:73:ae:0b:eb:a3:ab:a4:08:be:23:
75:61:a6:dd:bd:4d:c8:7d:32:ee:a5:fe:9c:a8:db:
54:5a:fe:b2:1d:fb:f8:ea:7b:5b:70:06:3c:c2:5b:
16:1a:1c:ab:9d:51:55:5e:fb:0e:b0:f8:4a:05:7a:
67:4c:08:1c:b1:2f:e7:eb:ec:e5:04:19:d0:38:91:
c2:08:e7:4e:a7:7b:55:f8:67:4f:85:68:b3:28:1a:
44:f0:55:07:10:ee:84:4a:68:bd:14:84:2a:09:b0:
0d:f2:27:62:40:70:8b:44:25:43:47:f8:5a:98:57:
24:e9:a6:8a:a6:20:de:66:51:2b:f1:0c:77:35:f4:
48:59:c3:3e:8a:e2:75:75:06:49:9a:23:47:17:9d:
e9:44:0b:13:5a:63:dc:48:f6:f5:ec:09:7f:7c:5e:
b4:49:ea:87:97:88:5a:54:08:f7:cd:b9:f9:18:84:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:E4:52:26:6D:B1:C6:17:81:E2:1E:4B:0E:17:91:FF:1A:44:74
X509v3 Authority Key Identifier:
keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:19:40:98:65:82:89:1a:a3:1c:cb:84:aa:61:09:8d:77:
1b:97:9f:a3:15:33:8f:e4:44:82:d2:c3:3f:b4:84:66:aa:bc:
b2:56:f5:63:73:00:f9:93:d3:7d:83:c2:5b:4e:80:30:8e:23:
bf:e9:97:32:c1:96:b2:f3:4e:6c:09:17:66:93:24:2c:51:c3:
f8:40:3f:23:b5:01:30:79:61:dd:15:f9:7c:2c:d0:aa:dd:a7:
08:34:bf:48:56:f4:67:94:07:95:3a:68:f6:f5:fe:56:fa:3f:
37:6b:e4:dd:24:6c:82:1b:be:50:d4:fd:0c:85:e6:f8:e4:2a:
d0:7c:b4:d8:7b:ee:99:00:89:95:ce:7c:6b:6c:c5:ff:71:83:
4c:06:8d:97:9c:1b:b9:b0:91:e1:f7:88:c9:b4:da:8e:32:79:
1a:91:c6:7e:31:c4:3f:0e:e7:71:14:2a:45:81:79:ca:93:01:
56:ce:46:28:3a:4d:f6:60:43:40:31:aa:a2:1a:7f:2c:85:f3:
9d:28:e3:a7:88:c1:19:20:06:51:9a:c9:8c:c6:e8:a7:2e:61:
38:22:fd:5a:73:5e:04:e3:48:5c:78:1e:d0:12:4f:7f:d5:71:
a5:30:38:94:15:18:ed:64:35:0b:4e:47:f5:1e:35:15:e8:48:
ee:97:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:52:53 2025 by rpki-client