Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: oh4I68n03ZtW7mWRj+uLZk3Nej4ZCJY0azD99V5Hjkw=
Subject key identifier: B9:7A:24:78:27:AB:6B:5B:F7:CC:16:00:D4:B3:C6:FC:B7:BB:13:93
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 01984B54FF6B0E7C22054C864C6EC3F425AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 01DF
Signing time: Sun 27 Jul 2025 10:01:58 +0000
Manifest this update: Sun 27 Jul 2025 10:01:58 +0000
Manifest next update: Mon 28 Jul 2025 10:01:58 +0000
Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: Y0c5l/X2bVWWgW7gwA7hAYDVDzb+J5Cja9ZH10ahLK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:ff:6b:0e:7c:22:05:4c:86:4c:6e:c3:f4:25:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Jul 27 10:01:58 2025 GMT
Not After : Jul 28 10:01:58 2025 GMT
Subject: CN=b97a247827ab6b5bf7cc1600d4b3c6fcb7bb1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:95:01:85:22:fc:77:b2:71:3d:8b:47:cd:e6:
3c:3d:05:33:14:63:71:89:42:b5:83:81:8c:75:eb:
87:19:8f:d2:84:1d:b9:3c:00:8f:cd:98:e9:dc:a3:
f4:f2:39:89:71:c0:4b:86:9b:26:6c:6e:c6:60:6d:
ee:2a:59:da:c1:18:44:9a:40:03:00:b6:65:75:38:
59:39:85:62:84:2e:59:c9:4a:04:b6:10:71:c3:07:
a8:6d:87:c4:e9:e5:bd:d1:cb:5d:c3:08:8d:2a:e9:
4c:6e:f5:31:ea:18:41:7d:f9:ce:bf:9c:97:0f:f8:
1d:e6:89:e1:ad:fc:25:89:17:66:5a:6a:38:76:9a:
18:c7:06:6f:8b:55:ae:f7:06:5c:33:3a:4e:35:f3:
35:59:d6:60:8b:6c:13:df:7c:d8:0c:39:d2:12:1c:
a7:9f:d0:0b:b3:85:63:d0:21:7e:41:14:38:4f:51:
42:22:da:89:7c:d8:ef:0c:41:be:f5:3c:87:33:e7:
19:73:d5:98:f2:c9:4c:86:ae:f9:bf:c8:9b:d7:03:
77:e2:24:eb:09:bb:9e:ca:9a:10:86:97:1b:0f:c6:
38:97:76:a8:c2:21:0f:e6:60:61:92:1b:9a:60:a4:
de:8d:d2:13:24:f6:96:94:a0:c0:6d:6f:13:e9:8b:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:24:78:27:AB:6B:5B:F7:CC:16:00:D4:B3:C6:FC:B7:BB:13:93
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:50:33:c1:66:a7:fd:1e:62:07:c8:f6:c0:93:be:11:d7:1b:
c4:8f:11:0e:28:99:cc:f7:20:82:04:e8:75:a6:3e:6d:ef:20:
bd:d2:8c:b9:35:c5:8c:30:60:24:c3:9e:38:6d:14:88:e5:b8:
46:3a:3b:ee:43:7b:41:e5:2d:d0:37:1c:3f:b7:d4:d5:e6:f7:
b0:d2:2d:fc:e6:6b:5f:2d:44:ba:a0:ae:31:8d:fb:b7:77:a9:
3c:d4:7b:06:da:aa:d2:73:d8:e0:a1:df:8b:30:98:81:0a:0a:
40:d4:83:52:c8:cd:8b:12:84:a6:3a:f1:f9:87:b7:c2:fb:18:
44:e9:42:53:09:6c:af:91:c2:d2:e6:08:c4:0d:ab:f8:77:98:
7e:32:09:6c:1e:bb:24:96:1b:f9:97:4c:eb:34:70:e0:02:62:
07:a5:01:c8:6e:97:50:11:cb:5c:0f:dd:14:43:e3:7d:15:33:
98:5a:2c:ba:13:e7:3b:e7:41:0f:8f:43:2e:cc:8d:08:7d:3c:
37:bb:4a:f0:e6:1c:fa:3a:41:6a:f9:ab:a3:bd:47:b2:ca:16:
38:8e:2a:8f:2a:34:ed:02:0c:07:c8:34:27:2e:2b:9a:09:40:
8a:f8:4b:c4:64:0b:5b:7f:80:3f:0c:71:5b:e3:e1:91:fb:b7:
c8:95:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:12:11 2025 by rpki-client