Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
File: fiCwNOLEl7GIRIje8QaXJwR2UCk.mft (raw, json)
Hash identifier: I+K52UQeRXj34Elp4F8v20c+qdld9r1CZoYpcrPgpFs=
Subject key identifier: 68:EB:01:07:C4:B1:E4:C2:20:30:48:34:1F:37:68:48:60:82:23:0D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01982F3811318C1EF4D2ED85015B5CC23EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
Manifest number: 0777
Signing time: Mon 21 Jul 2025 23:01:00 +0000
Manifest this update: Mon 21 Jul 2025 23:01:00 +0000
Manifest next update: Tue 22 Jul 2025 23:01:00 +0000
Files and hashes: 1: 1ps_JXvHrVoFUPxYGp2BHP36Ztc.roa (hash: ta8CMfbMk29Fhndl6ZZIYNJy1DPsZd7Ckx7RxOALCt0=)
2: B8FR9SA5Fk8sfSBZT2d88IzPSuM.roa (hash: xWCZc/aZyTQfJO3Hey5rRYelsTLc0vBGe/wKJpUha0w=)
3: MX-RxL21AwQXVelzA4IrJb3dj-4.roa (hash: dxUOm/3bYpTRNviiYZNfM07knnqfGC+IudqU1B6rLJM=)
4: PaJ1NV9XG903UofLMhbqDFeoGRI.roa (hash: cV1+9IwWjMr3CVVFN5PwdUeZyMxTTrMoErA9Ufghrjc=)
5: YBTox9L1nyGe0S64chJC_1Czw9k.roa (hash: NLJbxCqnfGXHXt4p8cWte0jW0S2HVN77+xC2WNPU4K4=)
6: _c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa (hash: wQQa9Mnur4vqn575tKy3l6q/9fmjlstZd96o2yaRPEI=)
7: fiCwNOLEl7GIRIje8QaXJwR2UCk.crl (hash: LGZQ/q3LVjWJ9ABNnnPkRbODqZXwAMJnE+RjbLvnGvk=)
8: rDdl4wb7d9_eC22yvGjUcZm-ZF0.roa (hash: IxVCz/Sbbi4L+BIjve8uTsWyEfGjkV7LQaO0qi7hXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2f:38:11:31:8c:1e:f4:d2:ed:85:01:5b:5c:c2:3e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 21 23:01:00 2025 GMT
Not After : Jul 22 23:01:00 2025 GMT
Subject: CN=68eb0107c4b1e4c2203048341f3768486082230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:02:b4:ad:f7:aa:da:82:cf:8c:c3:c4:f8:e2:
cd:ce:10:f3:7c:ed:91:e9:10:57:a9:62:f3:d5:d5:
ae:03:36:20:de:eb:69:f0:36:9c:5f:8f:02:97:d6:
7f:93:7f:7f:05:4f:40:25:be:e0:7c:da:67:f2:12:
84:00:cf:fb:bd:93:6e:0a:a7:02:76:2a:63:d5:52:
76:5d:e9:ca:9d:a5:bb:98:4d:7f:a3:2a:17:4b:81:
ea:98:03:fb:46:a5:67:d0:5b:6d:2d:31:85:4a:8e:
58:1b:ba:36:6b:78:a7:b8:ac:1f:25:87:b1:4c:97:
e3:51:1c:b1:00:13:17:8b:f0:53:8d:d7:34:37:ae:
e4:1a:09:e8:b7:3f:95:77:6d:99:3b:ce:a8:26:75:
f1:60:eb:74:e5:48:ab:4a:87:41:07:c3:6b:f5:62:
e2:5f:cb:08:0a:5f:0c:96:b5:01:c4:32:8d:7d:5f:
92:a4:13:11:6d:a6:b8:2e:69:c2:3b:f6:33:7e:b6:
b1:85:8b:40:db:35:a5:90:9e:13:77:b6:bc:13:8b:
d7:26:84:a5:53:36:72:02:45:f2:82:5e:49:e0:0a:
ae:aa:3c:1a:d0:bd:f9:ea:d4:e1:1c:44:83:e4:3f:
99:8f:6b:59:97:5a:bc:ec:8c:aa:e1:ab:d5:49:d4:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:01:07:C4:B1:E4:C2:20:30:48:34:1F:37:68:48:60:82:23:0D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:be:9b:4a:c4:a1:86:5e:42:f5:e0:74:60:41:e7:c7:77:ea:
a0:ff:43:ae:5e:c0:f1:0f:ce:5c:b6:33:aa:94:01:dc:62:dd:
fb:d9:59:46:cc:79:4d:c8:1b:d4:29:d9:7d:ef:31:0a:b0:35:
fd:3e:e5:93:df:ff:ca:a8:64:f9:b5:74:50:1f:51:12:c0:d4:
ed:8c:50:17:d7:db:42:8c:46:fb:5a:96:65:ae:22:18:7d:fa:
df:66:48:ba:f1:75:90:39:20:3d:99:ae:d3:bd:b1:25:1f:9d:
e1:fe:e7:c3:95:bb:12:45:7e:c8:80:04:3d:0f:23:cb:55:ca:
9d:f2:4d:83:02:31:33:c9:9a:e5:3f:e2:ab:b2:75:e5:38:df:
11:b3:38:e7:01:51:43:f1:29:67:37:a0:c0:52:01:66:17:79:
33:c4:5d:ef:6f:c4:1f:35:8c:b9:82:3b:80:4b:5a:0a:b0:fe:
9c:c4:c5:ba:5c:f9:2e:65:70:2b:ff:6b:91:94:c6:0e:20:05:
62:76:26:54:cc:08:7d:2e:58:e0:69:24:2a:81:46:aa:12:57:
a1:b2:cb:69:17:ea:00:0f:09:ab:2a:ce:38:26:08:ae:a4:57:
dd:e0:6f:9b:e8:c4:e6:ee:05:48:78:60:d6:2d:b0:e3:00:9e:
d0:dd:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 01:15:35 2025 by rpki-client