Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: urvC8Jm3uL7dr30qEyDv01robXHca2g0mJMiP0dy4ok=
Subject key identifier: F9:0E:57:30:1F:A4:BF:0A:45:8B:E0:17:F8:83:8D:7F:F5:38:66:AB
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 019848C07A9848780BADA4D6DC2E5932C63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0D14
Signing time: Sat 26 Jul 2025 22:00:30 +0000
Manifest this update: Sat 26 Jul 2025 22:00:30 +0000
Manifest next update: Sun 27 Jul 2025 22:00:30 +0000
Files and hashes: 1: dWmsOWayzQrhACw6PZROUA9TY4k.roa (hash: k+N79FADkE2zFtD7FMss3oaOymFQNUYiml90eSHs5KE=)
2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: xTS+g0CwtcNc+USI+23l7MvwGKFVdB5lR6E6WchYGM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:7a:98:48:78:0b:ad:a4:d6:dc:2e:59:32:c6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Jul 26 22:00:30 2025 GMT
Not After : Jul 27 22:00:30 2025 GMT
Subject: CN=f90e57301fa4bf0a458be017f8838d7ff53866ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:12:48:96:d5:75:85:79:c7:a8:68:f0:86:
c5:ad:dc:de:c7:04:3a:c6:de:88:71:20:76:03:70:
44:8d:bc:b0:f3:bc:bb:84:c8:c6:78:8f:e5:d4:96:
4d:90:07:f0:a1:c4:6e:d3:b8:1a:11:ab:ab:f4:70:
62:08:8b:a8:30:90:e2:27:7f:a6:1c:e0:3d:ba:5f:
c1:c8:7d:24:d5:cf:90:53:8e:73:80:b3:5a:39:95:
6a:97:47:6f:4e:a3:74:16:40:5f:a2:25:c4:6c:be:
67:7a:e5:8d:cf:db:20:c7:fc:e3:ba:40:79:c0:f8:
7d:dc:d6:fa:3c:4b:32:2d:c0:29:f3:21:3f:f1:a3:
84:d8:f8:ff:c4:7e:6d:e4:ad:80:5c:01:28:9e:15:
9d:71:60:55:bc:ed:03:d6:3f:c2:39:f1:85:f7:d5:
dc:67:6f:86:ff:41:3a:80:a6:fa:72:f7:c3:57:21:
24:23:0e:21:1d:7f:c6:e7:05:a2:aa:c2:c0:cf:e6:
58:b5:8d:dc:1e:a9:2c:a7:ba:88:25:4f:f1:09:ff:
4c:ee:f4:77:33:44:44:56:e7:31:eb:95:5a:9f:7c:
f6:eb:3f:e7:e9:f8:df:3f:91:5b:7d:a7:c6:5c:6a:
a4:c5:60:ed:e4:b2:c1:af:3f:41:d3:bc:e1:ff:58:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:57:30:1F:A4:BF:0A:45:8B:E0:17:F8:83:8D:7F:F5:38:66:AB
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8c:61:4c:29:4c:03:99:58:e1:e5:93:e7:83:07:32:c3:7f:
98:3e:4d:69:78:d4:fd:95:ce:bd:5a:4b:d7:8e:fb:72:46:f8:
be:65:0c:d2:38:0c:d1:6d:c9:98:3a:df:7d:55:12:e5:29:b5:
f3:9b:74:6d:a4:43:3a:5b:ca:e7:f6:de:c2:84:e9:83:b2:a8:
96:57:6e:5c:3f:a5:c6:bb:e6:2f:84:8a:3f:b7:92:ae:2a:0f:
64:33:e5:1f:dc:35:16:20:7a:99:70:7b:cb:22:d5:69:a8:e5:
2e:9a:8b:2c:ec:13:50:45:96:a2:1d:a5:74:a0:e2:9e:11:c7:
04:67:d5:37:f3:2f:b2:88:89:93:35:e2:d7:89:6c:ae:b8:30:
e3:1b:8b:a2:3a:ec:63:93:70:24:86:ce:a2:34:f8:75:21:1c:
54:b3:f7:2a:c9:46:b9:8b:58:c3:73:b4:46:b5:c7:aa:aa:85:
ad:9c:c0:70:cd:f8:5e:70:b4:c1:5e:66:e3:d3:78:b8:32:fc:
f0:fa:a5:32:af:0a:24:38:5c:09:82:d1:3b:48:31:4c:9c:1e:
8a:40:25:07:cd:d4:17:8a:00:f8:10:c0:12:bd:fa:cd:8c:85:
da:ad:d1:0a:fb:34:c5:5b:e6:0b:e1:3c:5c:6a:1b:ac:a0:77:
d4:a2:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:25:02 2025 by rpki-client