Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: T+gwnAZwpCkFUWGnfal17xLSKjJra2+QYyejirzS22M=
Subject key identifier: 00:47:69:70:9B:83:C6:1D:47:7D:55:81:38:A8:07:E2:04:5E:70:C1
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 01984AAEF49CF798EE10DA21E83097FDE0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 0A8C
Signing time: Sun 27 Jul 2025 07:00:36 +0000
Manifest this update: Sun 27 Jul 2025 07:00:36 +0000
Manifest next update: Mon 28 Jul 2025 07:00:36 +0000
Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: 912G/zdLiiGEkevUfWZZ3wzHIKffu0Pax58PHyjH1WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f4:9c:f7:98:ee:10:da:21:e8:30:97:fd:e0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Jul 27 07:00:36 2025 GMT
Not After : Jul 28 07:00:36 2025 GMT
Subject: CN=004769709b83c61d477d558138a807e2045e70c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:9a:62:3d:2b:9c:a0:dc:66:67:17:99:3a:
bf:e7:f7:a5:55:66:cb:3c:46:62:82:3a:2c:39:d5:
55:b7:14:a9:c5:8f:c5:1b:5f:2d:6c:bb:b1:13:3c:
04:85:d9:61:d3:55:35:7b:e8:de:5b:c6:99:4a:d4:
3f:b2:b3:9f:4c:fd:e3:58:bc:22:94:94:4f:52:04:
78:76:e4:a9:37:fb:b1:dc:a1:6c:68:1c:1e:91:93:
f5:9b:0a:af:fa:d7:b3:fa:e7:b3:4f:fb:33:f9:35:
fe:93:00:66:3d:21:20:a0:47:97:84:fa:b2:51:7c:
ec:b1:29:3d:f3:0e:b6:b4:4e:8a:cc:c5:6a:cb:07:
11:bf:26:1c:dc:46:9b:be:bd:e0:57:62:24:b5:09:
a4:51:39:79:ad:12:6f:10:a1:19:1f:78:e8:35:4b:
46:a8:3f:66:0d:91:be:67:dd:54:90:cb:24:cd:2b:
4d:96:b0:b3:85:cb:8f:19:15:36:d6:ba:d9:51:86:
d8:38:33:f2:43:f1:43:b2:3b:a0:da:ec:6b:cb:eb:
e7:04:c4:98:f2:e8:1a:49:5c:27:f6:98:9a:f1:3b:
2b:e0:a0:91:a0:48:aa:88:e6:3a:37:9b:70:64:0d:
b2:a2:06:6e:b7:45:23:9d:77:e0:0e:2b:92:f3:50:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:69:70:9B:83:C6:1D:47:7D:55:81:38:A8:07:E2:04:5E:70:C1
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e2:9d:e2:04:79:25:e8:fb:b4:3e:86:3d:eb:c0:a8:c0:91:
85:06:f4:16:ec:7d:95:10:fc:25:46:e5:f0:7d:cf:db:4b:01:
3f:af:2e:ca:0d:a9:58:cb:a6:1b:1f:90:1b:03:0b:a0:23:8f:
47:fa:aa:16:a2:2f:f0:aa:f8:2c:cd:c9:fb:7a:dc:b9:a9:6c:
25:27:1d:a7:76:32:e9:94:23:83:1f:b0:b9:97:d3:dd:f5:27:
9f:8d:3d:94:c5:47:2f:ff:8d:3d:09:e3:00:f6:de:7c:d4:94:
72:27:3e:f4:51:76:2b:d8:0f:d2:d5:c3:57:8a:5c:74:78:f6:
3f:09:e1:7e:83:7f:c8:44:d6:0f:45:c5:e6:c3:a4:11:3c:08:
5d:ec:d4:88:7b:39:72:b2:a9:f8:90:97:52:0a:a8:50:7a:2f:
54:d8:9e:9f:2f:ea:84:da:e1:ae:09:b1:a2:d9:62:40:ae:05:
23:22:62:94:44:67:35:f4:6b:de:80:c7:09:6a:ec:ca:f8:8c:
79:ff:1f:4d:7b:e5:d2:fa:7f:1c:ad:b2:8b:f4:fb:b9:6a:df:
4e:4f:a4:56:fa:46:c7:61:d9:e6:81:b7:40:c8:4b:b0:d5:f7:
46:4c:68:e7:35:06:71:b2:f6:b9:4d:29:8e:9f:c9:ea:60:91:
fe:c5:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:42:23 2025 by rpki-client