Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: bDb7HS6Yc3myjiP5I1ss+6zT8KlgrqzQJ8MrR8KLFJI=
Subject key identifier: 17:78:07:DA:B7:31:82:B4:C3:50:89:1C:11:C9:5D:21:CF:33:64:3F
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 0198496658A74130E4D94CC585143E0DD01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 0942
Signing time: Sun 27 Jul 2025 01:01:40 +0000
Manifest this update: Sun 27 Jul 2025 01:01:40 +0000
Manifest next update: Mon 28 Jul 2025 01:01:40 +0000
Files and hashes: 1: WdmL2O8VPrkR42ZOw2QephNcMKQ.roa (hash: hlVVES8UOIZDvKYVagg5Nkh0JVEcOtJVFmlV0ra9F/8=)
2: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: zRUA1mtYnn9jmHeAThDF9qckZiLITLCJQZys7NnPa7c=)
3: lujy_B0CgE3UQHNrtRpIDknhG84.roa (hash: HhEZYonW06tw2KSs5U9keAqL3PO1g1AoWXaLns6T1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:58:a7:41:30:e4:d9:4c:c5:85:14:3e:0d:d0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Jul 27 01:01:40 2025 GMT
Not After : Jul 28 01:01:40 2025 GMT
Subject: CN=177807dab73182b4c350891c11c95d21cf33643f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:b9:64:2d:29:4a:cc:46:f8:6a:41:73:a6:
b8:97:6e:30:a7:52:ce:3e:49:b7:35:f3:34:c6:84:
08:b6:94:7e:2e:46:a0:5d:8a:a6:72:1a:2e:48:a8:
51:12:db:e5:76:64:1d:96:fb:e2:7d:67:4e:af:b5:
aa:73:70:db:fe:31:30:76:ef:3e:0f:8e:9c:fb:0c:
63:c3:02:25:d1:ce:9d:71:6e:5e:6b:9c:33:23:0c:
61:30:8d:5f:9d:02:8d:e2:d1:e6:2e:50:b9:4b:dc:
dc:51:ec:c4:6b:ba:50:fe:21:06:c5:5b:a6:b2:f7:
00:d4:8e:4c:72:31:30:6d:7a:3e:39:c0:10:33:b3:
32:75:f8:54:15:00:60:c6:b2:09:65:d0:54:9b:f1:
49:9d:7c:53:c9:21:f0:70:87:a9:af:c5:25:91:47:
ee:85:a9:14:e3:03:29:3d:0a:e5:2d:12:37:a3:02:
c4:c0:2a:ed:c0:de:af:63:38:15:e6:1f:7f:31:9a:
03:02:28:e9:f0:4d:8e:33:00:b5:8e:31:17:5a:a9:
b1:45:c2:e2:64:06:52:12:63:e2:4d:24:ec:2f:17:
44:2c:1f:20:4a:a2:e4:25:66:de:6a:04:cc:60:dc:
a0:2a:0d:28:51:18:e5:2e:0d:ef:a7:e3:bb:0a:ed:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:78:07:DA:B7:31:82:B4:C3:50:89:1C:11:C9:5D:21:CF:33:64:3F
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:26:9a:8e:21:9f:ff:9e:b7:8a:2a:85:45:2b:9f:cb:1a:2c:
3f:36:8b:97:b5:f3:17:e7:e9:74:8a:70:fe:32:86:a0:fb:40:
86:17:fd:bd:87:d8:fe:fb:f5:4d:f6:72:39:47:fe:15:99:7e:
02:db:7b:27:6f:eb:fe:3a:15:75:e3:7d:85:78:00:89:3c:7f:
0f:ab:89:ef:ed:dd:da:ff:67:d1:ac:c9:b5:6b:34:19:bd:5b:
6d:42:9e:df:02:8b:3f:39:ce:79:3a:10:f9:9c:ac:a3:4a:71:
17:58:fb:be:b2:5b:5a:68:23:0b:64:ae:4a:62:d5:7d:23:49:
9e:92:6e:57:28:59:85:aa:89:5f:3b:40:ba:1b:19:ec:74:0e:
72:fd:7d:d8:69:fe:7e:12:be:76:98:5d:07:d2:77:b7:09:6c:
0b:f7:f3:fc:3a:0c:51:24:3b:50:37:92:b3:fa:d0:44:c8:67:
21:d2:ce:bb:35:3a:fe:2a:68:ec:33:8d:f8:f1:d0:ba:9a:73:
8a:4a:c4:4f:ac:75:51:b1:ec:65:b6:be:4f:1d:33:af:4c:05:
de:69:8e:0d:1b:15:2f:65:dd:75:b6:5f:72:81:42:b0:ea:07:
24:31:19:1a:56:c3:d3:e0:66:9e:72:f7:c3:3a:d4:86:d9:0e:
96:b8:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:07:39 2025 by rpki-client