
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: mL9sXEqWy7e8Pffp0sbF8JuyLROJ9cIYzOnYK8HP+n4=
Subject key identifier: 91:48:58:75:F6:24:4C:8C:5E:7C:9F:19:4D:FA:0E:E7:2E:EB:97:52
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 019856EA92BD855756EB8FA8B9B33432A0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 13C6
Signing time: Tue 29 Jul 2025 16:01:10 +0000
Manifest this update: Tue 29 Jul 2025 16:01:10 +0000
Manifest next update: Wed 30 Jul 2025 16:01:10 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: IL4Vbzj2GWbofouSx5k6DwUCVGqiHFiOSLmy/ISjwdg=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:ea:92:bd:85:57:56:eb:8f:a8:b9:b3:34:32:a0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Jul 29 16:01:10 2025 GMT
Not After : Jul 30 16:01:10 2025 GMT
Subject: CN=91485875f6244c8c5e7c9f194dfa0ee72eeb9752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:cc:17:1f:d9:f1:3b:e2:7e:a4:f1:4a:c6:
0a:8c:00:dc:22:c7:43:c1:78:de:2f:5e:e7:9b:15:
14:8f:68:0a:75:70:3b:23:03:62:98:01:05:0b:b6:
dc:d4:7f:d9:7d:49:0c:68:e7:ec:33:50:6a:05:c4:
4e:11:f7:90:71:6c:7f:76:34:63:ac:98:ea:a1:b9:
47:75:f8:71:d0:5a:4e:51:49:7a:62:7a:f5:a7:91:
84:64:eb:05:c0:8e:c4:51:7a:56:a9:c7:e4:8c:88:
d7:00:3a:a5:cc:67:7a:90:f4:d4:b5:3c:a9:e6:de:
94:69:02:97:66:98:e6:98:66:da:fd:04:7a:d9:26:
7b:29:28:e9:62:e5:c8:ba:37:98:a3:e2:9e:32:a3:
a9:ab:3d:a0:f6:a9:a3:2e:32:19:dd:f3:96:ba:b3:
a0:dd:e6:c8:ce:d9:9d:5c:81:71:cd:8e:07:9b:bf:
b8:7b:d3:d2:e1:02:59:9f:9c:46:0a:a4:de:4e:49:
c4:a5:58:d0:29:ce:d0:7f:e7:45:2d:ee:c5:99:20:
bb:2a:36:cf:d5:05:94:a6:e8:d1:71:07:39:d9:7c:
46:b1:35:11:f3:d2:9a:0b:a2:27:76:31:11:21:de:
b7:ce:c3:48:27:16:0f:86:2c:fe:62:61:17:52:e6:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:48:58:75:F6:24:4C:8C:5E:7C:9F:19:4D:FA:0E:E7:2E:EB:97:52
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:90:a4:fe:c0:54:2b:c4:a3:12:b3:ea:60:0f:19:7d:f9:05:
13:df:2d:b4:70:c7:1b:7c:9f:81:17:9a:5a:fc:7a:8d:87:c3:
1c:a4:50:7d:57:3c:40:8d:e0:39:cf:95:b1:79:1e:0d:46:dc:
63:8b:ac:fe:3a:09:f3:48:9d:a8:81:d3:bb:bf:d6:94:8a:66:
34:29:9d:20:c5:42:d1:9c:b1:11:f0:75:c8:08:c5:43:70:12:
97:70:9d:cc:18:c4:a9:53:3f:36:08:22:30:af:c9:ac:47:67:
f6:47:63:6f:68:15:3c:53:08:38:00:b5:1e:c7:c5:ac:02:10:
d6:c4:45:3e:7f:a7:04:9d:4c:47:71:ba:ac:3c:da:6d:51:da:
c2:f9:ea:7c:7d:ea:ac:bc:fe:7c:ef:5d:98:ba:e7:33:41:1f:
95:54:ad:48:a1:9b:7a:99:ce:9e:2c:57:8f:26:1e:91:a1:a6:
65:be:dc:21:61:3a:d5:3e:b4:7e:7f:93:89:d0:24:cd:2a:c2:
ab:cd:f3:2f:e6:8d:94:85:7b:d3:72:0a:24:e4:ae:7b:51:4b:
29:29:2a:95:21:6e:fd:b0:b1:05:72:0c:43:e8:13:d8:ca:42:
16:ea:f6:db:8b:58:c4:36:16:8c:ea:47:21:df:da:02:17:81:
b8:5d:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:05:01 2025 by rpki-client