
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: WcYfxcdWnjSvF/mbbw75FoOXxk/Tabus5OxjR7fa+I4=
Subject key identifier: 99:79:DF:F3:81:D2:5E:67:02:04:5E:1C:88:25:EB:F2:DE:F0:2D:D6
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 0198443F23D8C51DEE541884714994B2976A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 05AA
Signing time: Sat 26 Jul 2025 01:00:45 +0000
Manifest this update: Sat 26 Jul 2025 01:00:45 +0000
Manifest next update: Sun 27 Jul 2025 01:00:45 +0000
Files and hashes: 1: 8Rj91VmErY8nG9AvttlpyE1wLJw.roa (hash: M9Ao53zeBk6GPnJYr5ZYdgrGPitX+aJ7EjLXG/7qqNM=)
2: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=)
3: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=)
4: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: B7kJBw/v/ryLgPZ0UaFQlfw5IZ9ukYh6V3yyUol/QpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:23:d8:c5:1d:ee:54:18:84:71:49:94:b2:97:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Jul 26 01:00:45 2025 GMT
Not After : Jul 27 01:00:45 2025 GMT
Subject: CN=9979dff381d25e6702045e1c8825ebf2def02dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:c8:28:33:16:7e:0b:61:eb:09:c3:e5:82:
b5:30:96:c9:e4:6d:65:53:6c:5a:75:99:74:90:b2:
2d:ed:ba:63:7b:47:92:e4:03:60:24:ec:e1:d7:3a:
85:d7:4f:fb:ee:15:07:66:13:83:2d:c2:4f:16:ec:
ef:69:43:95:4c:2d:25:78:0e:cf:16:b3:4e:6e:63:
14:8b:6a:df:88:05:61:52:11:5d:96:8c:ad:24:38:
e3:c8:21:94:09:6d:d5:ef:11:3a:a9:a2:78:93:ee:
14:ef:da:ca:2c:68:0c:6d:31:38:bc:c3:d3:8e:86:
d3:6b:b3:a3:4b:b7:8f:55:94:45:17:91:f3:41:bc:
28:c1:36:6d:f9:85:40:c7:7d:f6:32:48:87:27:6e:
b3:df:ff:d1:8e:f3:4a:3b:fc:c1:4d:8c:2c:d7:bd:
51:f5:ce:13:2e:80:48:3b:06:93:ff:96:22:ea:6c:
f5:8f:61:39:ab:9a:95:a4:dd:05:78:bc:4b:41:8d:
c2:0b:4a:a1:d9:5f:d1:dd:6a:e7:94:ea:6f:ad:b2:
93:be:22:a8:6a:86:0b:0d:53:32:d9:b5:54:f6:f9:
ae:30:20:ee:a9:52:1d:57:72:39:10:8b:17:10:ba:
87:89:41:9d:b8:09:6b:3f:3e:f6:fe:f2:88:7a:3c:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:79:DF:F3:81:D2:5E:67:02:04:5E:1C:88:25:EB:F2:DE:F0:2D:D6
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:38:20:fc:43:a9:6d:71:90:c3:ea:08:35:b4:53:47:30:1c:
c8:a5:c6:b4:8d:b4:a7:23:34:37:6f:31:f3:e3:23:74:66:3f:
3f:f1:98:99:12:80:0e:7f:99:58:d3:9d:b7:eb:38:8d:41:4e:
8e:cb:cc:23:e3:2d:ad:69:a4:8a:97:a6:85:f2:48:40:c7:56:
88:5e:25:ad:ad:0b:64:38:ea:4f:a6:7b:11:ed:b9:2a:24:d0:
ad:3d:b0:8f:e9:26:e7:8b:7b:c7:65:03:ae:a9:90:64:fa:7d:
ff:cc:5a:64:59:53:4a:71:c7:6b:4c:b4:07:ec:d8:5b:96:cb:
26:57:3e:bc:e0:55:c9:67:28:a2:68:d6:ac:9a:d4:94:86:80:
c7:db:f1:6b:5f:d8:32:7c:c1:df:5e:f8:18:bb:5e:8a:d3:72:
9c:0c:8c:ea:cb:f3:be:e6:a9:46:59:80:85:c2:97:35:cc:a4:
35:fb:59:33:c9:41:0b:57:dd:7e:7a:4c:16:d4:b5:ff:61:58:
72:2b:98:e9:e1:68:72:13:81:b1:4b:75:70:20:9e:d9:3e:fc:
cd:0b:bc:78:7d:b4:90:f3:25:bc:0c:d4:37:85:ec:2e:20:8f:
f9:09:29:eb:76:57:16:3b:d7:4c:fe:13:cd:88:af:33:4c:2a:
97:29:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:30:43 2025 by rpki-client