Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier: hHkSvUKIzYCiQjcgMpIIdLp/0tgea5UpfIQ2ol7KRJg=
Subject key identifier: 31:26:9C:F9:3D:BB:0D:75:19:81:D4:C8:1B:6F:C5:2C:6D:7D:B9:4E
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 019849D358D948B6EEF6FDB3887BFD83A6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 03:00:44 +0000
Manifest this update: Sun 27 Jul 2025 03:00:44 +0000
Manifest next update: Mon 28 Jul 2025 03:00:44 +0000
Files and hashes: 1: M3Ha07iuSnJt99v-sGLNUx8BBLI.roa (hash: IIpH3NsZ7PItLDv9GEILJ6qdrVTgVESMLfrKLW1hfuA=)
2: RP3f5WWvkrYQJc7jqMUs8Y1XTtU.roa (hash: hk9tzETRgkzSw8scjlpsIlP6fKBNwXAqFAfpPNKquL8=)
3: SinlQ5z34pUrW8vj7b8roBMhucc.roa (hash: l2JuiUg6/TaOO5OR8orwqynZnR5QYj967JWl5ck7FYw=)
4: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: c2O6zp0eq0BeVl9wcjfRlYs6dd84C7KaE0PO1YyvhEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:58:d9:48:b6:ee:f6:fd:b3:88:7b:fd:83:a6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Jul 27 03:00:44 2025 GMT
Not After : Jul 28 03:00:44 2025 GMT
Subject: CN=31269cf93dbb0d751981d4c81b6fc52c6d7db94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:96:28:1b:93:63:80:46:bc:50:f6:97:a0:
4a:e4:c0:02:29:0d:72:ce:a5:78:f0:2e:c2:cb:3c:
9e:a2:54:25:ed:31:4c:2c:25:c1:76:95:d8:c4:52:
12:f6:93:35:7f:9c:55:93:c2:f1:c7:86:01:59:8b:
6d:1e:8a:25:78:39:54:4b:a3:d7:9a:22:c3:19:29:
d7:b2:65:37:a8:78:86:56:f5:44:9c:0f:36:ab:24:
d4:f1:26:72:58:b8:38:15:bb:c7:ad:a0:85:90:64:
2c:98:e9:35:67:fd:1f:3c:65:77:ce:a8:81:1b:8c:
31:05:4a:de:86:77:da:0c:4d:d6:ef:f6:72:47:3c:
a6:ce:1f:a8:78:0a:12:24:75:34:a8:6c:9f:9c:8f:
f6:e3:f7:ff:fe:51:52:ca:c5:d0:d3:01:c0:df:f1:
39:02:90:6d:05:57:72:bb:f2:a6:d7:5b:b4:71:46:
ce:19:5b:b2:c9:2c:4c:c5:4d:57:4d:fc:d6:5b:9f:
6b:3f:b9:d4:ca:f9:16:9f:21:fb:16:66:fa:d4:8e:
19:c6:9b:10:57:25:ff:8e:73:a5:0e:89:2e:66:6a:
cd:dc:87:aa:04:56:f0:21:61:26:55:19:c8:fe:ec:
28:1a:49:45:0c:5c:15:f3:49:93:68:57:33:34:b2:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:26:9C:F9:3D:BB:0D:75:19:81:D4:C8:1B:6F:C5:2C:6D:7D:B9:4E
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e7:4e:4e:f7:67:c7:cc:03:f4:df:33:4a:c0:be:03:57:01:
db:72:65:e0:dc:e3:5e:9b:1d:0c:df:47:c4:a2:61:33:e2:b6:
fd:d9:61:7d:e7:0c:32:98:2d:5a:c7:e0:96:a6:bd:7a:15:35:
f9:f8:12:2e:ee:10:64:99:ae:25:fb:f9:79:92:0f:f9:d5:5e:
7c:65:c4:52:7c:15:eb:71:c0:87:b1:f8:9e:f6:ff:b9:88:9f:
33:90:d8:f3:36:5b:cb:7b:94:8b:14:b6:1b:56:41:00:1e:2b:
92:e5:09:a7:4c:48:25:07:5e:1b:b3:c5:59:63:ab:ad:65:f7:
33:d6:61:41:ef:03:30:49:e2:99:d7:15:1d:8f:77:40:49:df:
a4:f6:79:41:78:e9:1c:63:8e:11:c2:1f:18:d2:99:eb:7d:e3:
3a:ea:31:09:bb:09:0c:e9:1c:c9:ba:8a:e2:9c:84:5b:2c:08:
56:f0:13:49:86:26:65:e8:55:43:13:69:b5:d9:4c:5f:44:a5:
13:ca:a3:bc:49:4e:e2:43:e1:34:a9:c2:37:09:25:ed:ad:39:
fd:22:54:a9:8d:2f:16:23:af:5b:d7:02:94:cc:f6:98:fb:85:
03:a7:af:54:dc:fb:66:4a:da:d5:27:7a:d0:bc:00:57:11:1d:
31:45:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:03 2025 by rpki-client