Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: bcAxAqUUoBgG2FlcR8S6af6plz1i6wc9KDYAMl+wt9M=
Subject key identifier: 9D:64:27:B9:D7:98:8F:47:85:C5:C3:41:7E:93:2F:9F:9F:EA:CE:48
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 01984AE57FA4902E1216336204D7F2A3E2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 05B7
Signing time: Sun 27 Jul 2025 08:00:11 +0000
Manifest this update: Sun 27 Jul 2025 08:00:11 +0000
Manifest next update: Mon 28 Jul 2025 08:00:11 +0000
Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: dckax4mN4bg+eJVu8CQo41QlfvK0MTlOELcki75WpWI=)
2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:7f:a4:90:2e:12:16:33:62:04:d7:f2:a3:e2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Jul 27 08:00:11 2025 GMT
Not After : Jul 28 08:00:11 2025 GMT
Subject: CN=9d6427b9d7988f4785c5c3417e932f9f9feace48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:fc:6a:a2:e0:30:e1:7c:2c:94:0c:a6:b0:
6d:9b:f1:e0:a5:2a:9c:95:46:b4:40:47:c1:11:7d:
fb:10:b6:5d:26:b9:8d:57:c3:3c:c5:9c:ba:80:9b:
2d:0d:29:94:2b:3b:ea:89:c1:6f:49:33:02:1b:df:
83:d2:fb:d9:fd:96:d7:96:e9:72:5c:47:50:b2:51:
22:7e:23:3f:3e:84:6d:4a:89:d6:10:e7:d6:bb:a4:
b8:83:c1:27:cb:9e:bc:6b:4d:3f:36:95:1d:15:3b:
00:fc:06:02:b8:a5:f6:ba:10:05:d1:5b:a6:c3:7a:
92:ad:63:5e:53:0d:e6:94:79:87:bc:f9:ca:e1:16:
0c:91:b2:e9:ad:40:41:b4:26:20:ac:54:87:28:4d:
8a:09:b9:b4:a4:03:19:9a:8e:c1:07:98:43:9d:0a:
aa:23:6e:f0:de:06:e5:e4:65:bc:e6:77:47:7f:a9:
5e:d7:05:62:21:ba:80:95:dc:8d:07:6d:8c:29:30:
36:1d:00:37:28:dc:94:2d:ea:57:60:af:7c:64:74:
e1:fc:0d:a7:51:51:a5:64:bf:2b:91:c1:9c:32:81:
25:cd:6c:0f:92:13:1d:60:ec:9c:e5:64:d3:22:7b:
1c:3f:25:9c:47:ab:3b:c9:78:ce:93:a7:6a:e1:c9:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:27:B9:D7:98:8F:47:85:C5:C3:41:7E:93:2F:9F:9F:EA:CE:48
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:db:76:24:18:36:3e:54:ad:14:c6:68:0f:33:5f:d1:65:72:
9e:3b:81:d1:a8:b1:81:31:3a:3d:36:13:0c:e9:13:87:17:65:
1b:e5:d1:be:d8:9c:bc:88:f2:43:6d:da:fe:64:28:a8:52:30:
09:3b:c4:2a:6c:e3:fb:61:12:87:14:22:3b:25:ee:81:a5:52:
74:22:ac:5c:14:71:4e:23:3b:8e:f3:d1:e4:c8:22:b5:e5:04:
88:6c:12:e5:d5:3e:9d:da:64:cb:68:41:90:94:8a:b4:c1:e2:
c6:dc:bb:18:74:b3:d3:50:d3:96:10:38:e0:6e:48:e6:38:e8:
bc:f4:53:7c:91:14:e1:f9:5e:14:65:b2:b1:b5:58:9c:cf:51:
5b:d9:56:42:2d:2d:ae:f4:34:92:94:a3:5b:d2:56:07:45:2e:
f6:41:dc:01:78:0a:00:e7:01:8b:7d:c5:17:3c:ca:d4:c8:cb:
f6:b5:6f:5b:70:c4:64:ae:6d:26:ec:b0:88:5d:c3:3a:a9:2e:
6c:66:d9:39:19:a5:f9:82:3f:cc:a0:a1:5f:1a:60:d0:0c:cf:
db:36:24:c4:ea:4a:e3:d7:77:2a:91:38:20:dc:10:bb:ce:f5:
e2:d4:a2:7b:35:27:09:c6:6f:e1:71:d1:ae:7d:f6:63:44:17:
dc:03:86:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:02:17 2025 by rpki-client