
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier: avWIVgIYmq4X6AHA9zObhfGVPnUmOWz9CbFN4NUg//k=
Subject key identifier: C1:0F:2A:51:95:0C:1B:2D:1C:92:6D:D3:C0:D3:56:D8:65:BE:89:63
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 01984709354885879788960D8AABD1D980E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number: 02B2
Signing time: Sat 26 Jul 2025 14:00:42 +0000
Manifest this update: Sat 26 Jul 2025 14:00:42 +0000
Manifest next update: Sun 27 Jul 2025 14:00:42 +0000
Files and hashes: 1: 8ERPvpxKfVBfAUigys2-PiTFfqA.roa (hash: KAiZ9xkRQ32j6xO0jLEnhDznPnUl1zJBNWjMk46qfE0=)
2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: QYAKgZz97hymOuf+Iipe0Ux3FEccS0iyQ2JmbgG5UzA=)
3: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (hash: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:35:48:85:87:97:88:96:0d:8a:ab:d1:d9:80:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Jul 26 14:00:42 2025 GMT
Not After : Jul 27 14:00:42 2025 GMT
Subject: CN=c10f2a51950c1b2d1c926dd3c0d356d865be8963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:40:2d:8b:0c:f5:d0:cf:f6:90:d0:84:3a:
b6:0e:fb:33:c9:70:56:5f:5d:1e:9d:1a:0c:7d:55:
31:6c:51:ac:57:02:fe:73:f5:de:dc:c0:4e:c5:b3:
97:64:74:34:4d:a9:dc:7f:c2:6b:89:b7:a1:b8:4e:
3f:df:f8:5c:5f:bc:c7:d3:ba:8d:af:9a:57:95:3b:
df:e9:64:03:50:23:65:e9:99:47:a8:66:d8:71:1d:
f1:08:a8:3e:2b:2b:a0:83:48:f0:82:a5:58:0c:79:
e1:37:31:93:fe:77:a9:58:88:d3:f1:90:9e:81:ca:
fd:3d:f9:9d:d5:ef:f2:15:d2:17:54:79:a9:8f:8c:
f1:5b:e5:11:a3:2e:14:0f:52:65:3a:20:1b:a3:60:
65:7e:ce:3b:e1:6c:14:92:d8:a3:fa:1e:14:32:02:
7c:14:4e:3f:43:7a:37:8e:71:81:1d:b8:93:a2:22:
98:f7:33:98:f9:4f:2e:5b:32:ec:4a:d1:d9:8c:73:
18:47:5c:74:b8:1a:14:18:73:84:36:a9:3f:30:49:
12:85:0a:01:85:b8:2a:97:7a:d8:11:65:53:34:0f:
50:df:45:8e:d9:81:87:a3:36:ea:63:96:eb:51:9e:
aa:af:bc:39:da:30:c5:c2:de:40:03:e5:4f:0d:8a:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0F:2A:51:95:0C:1B:2D:1C:92:6D:D3:C0:D3:56:D8:65:BE:89:63
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:50:14:bf:ca:04:c4:da:d6:e5:d8:53:d8:bd:37:66:44:ba:
66:37:c0:11:b3:c8:d7:ad:db:fe:7f:ab:aa:80:25:b0:15:25:
8b:19:eb:7e:bd:ce:89:96:20:b3:87:78:6d:42:ed:c9:e8:3e:
df:c0:9d:87:91:82:fa:de:3c:cd:12:0d:e8:23:90:2c:3d:05:
b7:c4:13:a2:7b:3c:36:dd:c6:9d:d0:88:9c:67:fb:f9:a3:c9:
de:c3:45:fe:b6:e3:4e:2a:34:ba:51:7e:79:f8:d4:16:aa:11:
c3:03:01:b3:97:c6:24:4e:9b:49:58:56:b7:e5:37:c5:be:67:
75:05:9f:59:b4:7b:8d:16:43:c8:13:c0:87:f3:b1:6b:80:d6:
de:d0:f9:44:36:0a:d4:dd:19:83:6d:e9:53:a7:f6:25:62:3f:
d2:ec:6a:62:26:7f:38:ba:92:96:80:5b:da:6c:11:51:45:10:
14:e2:56:8d:8d:f1:de:50:c1:2c:41:fb:ef:ba:8e:14:8d:a7:
d1:40:6d:52:c3:d8:86:41:c6:87:8a:ce:08:c0:b1:44:b8:b1:
b8:3c:8d:87:0a:19:13:bd:6c:c2:e2:e4:18:3a:2c:ba:d2:11:
f3:bf:b1:c4:a4:59:93:fb:2f:f4:ca:70:c6:c9:b7:6e:05:b9:
c9:51:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:18:18 2025 by rpki-client