Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: 1OYu1h5aW2HmiUZZb3m5rFp/BZin8wefjN29A6obLmI=
Subject key identifier: 73:1B:D6:96:94:5D:C8:6F:F8:C4:70:D5:D0:46:33:1E:5B:33:7C:67
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 019848C0D71B7888CFF05760548A8E961AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 22:00:54 +0000
Manifest this update: Sat 26 Jul 2025 22:00:54 +0000
Manifest next update: Sun 27 Jul 2025 22:00:54 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: JRMlUu4no3rGAUaIuVmW97l5OIRmuKS2etfv9ijuO/0=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:d7:1b:78:88:cf:f0:57:60:54:8a:8e:96:1a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Jul 26 22:00:54 2025 GMT
Not After : Jul 27 22:00:54 2025 GMT
Subject: CN=731bd696945dc86ff8c470d5d046331e5b337c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:5f:b6:7f:66:0a:45:c3:53:3d:45:14:b3:
91:6e:6d:fe:ff:84:a8:1b:4a:dc:e5:c7:88:55:cc:
20:24:dd:29:d5:bf:5e:ad:17:36:ff:0a:5a:46:fe:
9c:7a:3c:67:e5:9b:c6:c9:ca:2d:10:ec:d3:78:f7:
ae:32:8e:79:4b:cf:3e:c9:cc:1f:2f:b2:fa:b6:0b:
2d:b4:8e:94:79:18:6f:05:83:12:ac:23:c5:e8:79:
8a:56:11:ba:69:ad:a9:35:19:90:81:8a:0d:de:7d:
d5:00:94:01:53:ca:b3:0d:75:24:b2:b0:2d:08:0b:
56:e9:2c:63:d5:b1:6b:5b:7b:b6:4e:6a:08:2e:d0:
5b:af:b6:14:2d:85:30:55:18:c4:50:38:a5:62:5d:
c2:69:3c:af:1c:78:f5:0b:f6:ad:b7:34:a0:f6:3b:
7e:95:8d:b4:b9:5d:c2:22:6f:fd:d7:f3:50:14:c1:
9b:19:63:37:1e:98:cb:0d:cc:7f:05:d2:4e:fb:94:
f4:81:07:be:41:6b:2c:71:fc:2a:78:1c:32:81:80:
1d:13:30:e3:2a:8d:11:13:e3:64:5f:84:b9:43:4b:
e4:76:fa:e6:e6:5d:ff:af:a2:18:ad:d9:83:37:8c:
a7:db:28:b4:b9:35:1f:ea:5c:bf:7f:e8:50:83:2d:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:D6:96:94:5D:C8:6F:F8:C4:70:D5:D0:46:33:1E:5B:33:7C:67
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6c:c1:f9:49:a3:83:25:54:dd:ec:62:a7:09:19:d2:67:2d:
f7:f2:61:15:31:57:ca:16:98:93:ee:5d:2d:24:69:e4:b0:1a:
f3:9d:cb:92:e8:3b:10:26:fd:f5:ae:2c:fa:97:07:1f:a4:df:
5d:4f:f4:a4:d1:d0:e8:77:3a:6f:36:fb:a7:d1:62:63:3c:e9:
ef:63:c6:f9:2a:07:bc:c8:07:19:5a:33:eb:3f:a4:49:33:76:
c5:cd:e2:21:81:a9:e4:2f:c5:a0:0b:4e:d4:c4:94:7f:00:20:
c0:80:8c:b5:c7:db:fb:35:6d:08:3f:d5:05:2a:ea:69:33:14:
4c:cb:99:9b:fd:dc:86:79:0f:de:e7:3f:bf:91:95:9b:96:15:
5c:08:96:50:8a:a5:bc:7c:72:aa:c9:cc:ed:7c:38:12:a9:04:
2c:60:76:59:7f:bd:ba:19:ce:80:33:3e:93:dc:e9:7f:e8:58:
ce:78:34:0d:8e:fd:39:37:73:cc:dd:a8:99:a2:13:48:01:d8:
f6:48:27:cf:72:3b:ae:1e:b0:54:f8:0c:21:87:cd:96:27:09:
c2:2f:ac:d9:c4:7f:45:53:3c:d6:a3:9a:c9:ac:e2:52:7f:4f:
4e:7a:2a:64:36:51:97:56:3f:28:23:d6:15:d7:7c:20:5d:7b:
5a:68:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:44:07 2025 by rpki-client