Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: bCbDvgr7KvHeiZOGoAV3xty961rmOOsKcDLr7rFbnf8=
Subject key identifier: B6:5B:65:8E:3F:44:C7:A9:B4:56:0B:3B:F8:3A:47:65:B6:C1:35:94
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 019847ADD18D07E813A710B41813FBD8715C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 0D27
Signing time: Sat 26 Jul 2025 17:00:30 +0000
Manifest this update: Sat 26 Jul 2025 17:00:30 +0000
Manifest next update: Sun 27 Jul 2025 17:00:30 +0000
Files and hashes: 1: 2CYNXB5qZHN7in7RGaGVmXvb7Xs.roa (hash: n74UAylTv760Shvrd+PI6ipCj4rV+2WaR3QnP3+8e6Y=)
2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: qLN8A05u6lCEja2g4mC0h947ycQ2rAKIJT7wZH0qqg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:d1:8d:07:e8:13:a7:10:b4:18:13:fb:d8:71:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Jul 26 17:00:30 2025 GMT
Not After : Jul 27 17:00:30 2025 GMT
Subject: CN=b65b658e3f44c7a9b4560b3bf83a4765b6c13594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:56:47:f5:8b:85:4d:eb:d8:aa:12:2d:2a:
5a:c9:02:d4:32:f8:af:7f:ed:21:59:a2:1c:b6:ad:
63:61:f9:49:bf:23:98:cb:97:60:65:71:91:77:bd:
86:1e:d0:c3:7e:00:b3:f3:04:06:4b:ff:f0:e0:18:
1a:89:62:df:e8:63:45:c1:1a:0f:09:47:e2:21:26:
00:f2:c7:ee:7d:d4:dd:1c:0c:fe:2b:6e:ae:b3:15:
68:83:ba:d3:99:8e:0c:c9:6c:26:2c:ee:e6:7e:a2:
4f:cd:b9:3a:1f:55:7d:d7:d2:5c:bd:d4:92:7c:2a:
05:5e:9f:a5:c1:e1:f5:da:1d:78:e4:85:6d:c0:d2:
2f:2b:6e:a2:83:e4:cf:6d:da:c5:5a:8d:c6:b5:09:
af:b1:0f:22:d7:17:09:93:3b:12:8f:27:cc:ff:9a:
1d:4b:fd:74:45:20:3b:3a:43:90:13:61:54:9b:e0:
4c:c1:65:a9:12:51:d6:9c:59:16:e8:9c:c8:ef:c1:
32:d8:b6:ea:ba:e3:84:87:62:a0:90:ce:af:a6:01:
7e:a2:3b:b3:a0:c5:58:d7:dc:5a:0a:98:6e:95:75:
f7:11:ed:70:4e:3c:12:e9:e3:11:aa:9b:62:4a:f3:
e1:a3:da:93:b8:56:ca:c9:95:5c:9f:96:dd:f2:10:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5B:65:8E:3F:44:C7:A9:B4:56:0B:3B:F8:3A:47:65:B6:C1:35:94
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:05:13:81:b5:62:21:df:86:5f:ad:e4:9e:5a:78:ba:4a:41:
b1:26:ec:c9:f6:3b:08:e8:1a:d2:a7:26:16:17:25:93:23:93:
2d:61:74:ff:af:10:e6:9a:24:80:49:f9:92:91:38:c6:75:7c:
95:92:13:e7:3b:1b:69:fd:cb:45:1e:db:6b:84:13:62:e4:14:
65:43:5f:dc:67:85:ee:00:6e:32:e4:7d:29:70:06:3d:b4:36:
1e:15:cd:84:22:71:f0:ed:50:05:a2:52:85:26:78:92:c7:a0:
5b:72:85:e3:11:d8:56:06:1f:2b:1c:5e:12:a0:a7:4b:0b:7a:
13:44:6e:e4:12:1d:77:3d:1e:10:6a:f9:0d:0b:b6:1e:6f:65:
7e:85:a1:70:95:de:b4:ad:d6:bd:05:b5:45:f7:6b:1e:5d:f6:
62:14:7e:8b:26:4c:80:0e:0c:ff:80:13:30:da:f0:1c:34:38:
8e:b2:55:d3:a8:8f:85:67:6d:79:36:7c:2f:36:1b:85:dd:34:
49:5a:c9:75:bc:48:2f:ce:46:5a:7f:ae:5d:7d:99:4f:fc:7d:
79:0a:15:bc:d3:7d:bb:90:18:45:14:e6:e6:dd:5e:3a:bb:35:
d0:24:86:af:7b:31:48:06:26:a9:ad:ff:8e:9b:c4:57:32:a2:
2f:89:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:03 2025 by rpki-client