Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: GETdDpFSJt1IRvM8K/3Ps58axM3wnrEusl3E2tSa/oE=
Subject key identifier: 25:21:68:1E:85:9C:62:E7:57:1D:45:F8:D3:69:03:DF:36:DA:CC:20
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 0199C4C5101521FFE68BAFCEDAD0968916F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 058D
Signing time: Wed 08 Oct 2025 17:01:12 +0000
Manifest this update: Wed 08 Oct 2025 17:01:12 +0000
Manifest next update: Thu 09 Oct 2025 17:01:12 +0000
Files and hashes: 1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: Fmc+UrXStn5gHVnUc6+U37ALNWFLBxrDU2PmhFdLc6E=)
2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=)
3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=)
4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:10:15:21:ff:e6:8b:af:ce:da:d0:96:89:16:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Oct 8 17:01:12 2025 GMT
Not After : Oct 9 17:01:12 2025 GMT
Subject: CN=2521681e859c62e7571d45f8d36903df36dacc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:bc:19:9e:16:f4:ba:33:f3:53:e3:5d:79:
af:46:b9:0e:71:27:b5:12:34:35:fe:48:67:08:4d:
fb:33:c5:2b:e2:48:89:98:0f:27:24:c0:7d:a5:0f:
cb:16:91:d2:2e:dc:b6:64:b1:0b:30:a7:f7:56:39:
d5:f2:61:dc:c7:c0:6a:05:6d:c7:8c:11:90:e3:7f:
9d:5e:42:13:61:46:79:ca:23:db:b6:5b:92:64:64:
f7:7e:2b:4b:c1:1f:f9:e4:0e:88:e3:2e:d9:6c:1d:
d8:cd:05:9b:f6:af:82:d9:68:cd:b3:05:9f:3a:f0:
c4:d9:78:bd:86:9c:58:ea:1a:75:a7:31:3a:b7:c4:
06:31:3f:11:c8:2e:60:df:ad:53:80:a1:fc:91:39:
98:7f:10:f5:1a:bc:c6:38:41:6d:1e:71:ca:1d:cc:
d9:2b:6c:0a:c8:59:60:d1:1c:a3:c6:d8:5a:dd:32:
8f:2b:0c:d8:24:c1:2e:0e:24:f2:ec:99:10:78:ab:
05:fd:2f:66:3b:f5:02:d5:ab:2b:9a:25:0d:c2:fc:
9b:94:46:88:03:b8:de:ea:aa:ad:e7:b2:f7:79:36:
c9:3c:27:b5:5b:11:6c:66:c1:6b:00:dd:f2:f6:3e:
28:ab:07:57:07:a5:66:15:b0:d3:bf:6c:cf:3d:41:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:68:1E:85:9C:62:E7:57:1D:45:F8:D3:69:03:DF:36:DA:CC:20
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cd:1f:f2:3f:17:b3:5a:d3:f7:c4:40:60:47:ed:61:99:7c:
91:9a:71:7f:e0:76:ef:30:0f:c5:ca:b5:7e:2a:68:33:2c:45:
b0:b6:f9:0a:62:0a:42:8b:c3:93:c9:22:44:71:84:e2:35:5e:
c0:3f:07:b2:6d:2b:ad:d2:9b:6a:3b:91:24:42:87:53:23:51:
aa:27:47:3f:ce:1a:ac:47:45:d1:fb:0a:f6:58:aa:cf:3a:b8:
53:c0:58:13:96:a5:dc:85:24:7b:3d:97:49:85:72:d1:56:29:
cc:09:3d:a8:b4:c8:dc:87:fd:20:18:f5:b0:2e:3a:71:91:22:
1c:e7:1b:eb:d6:16:d6:a6:0c:43:e7:d3:80:08:f0:fc:22:14:
d7:6b:58:fe:0d:e2:44:0c:7a:ea:b0:2d:f4:80:e2:95:21:96:
6f:02:aa:46:fc:fd:53:23:f1:34:ce:7c:13:8f:81:57:9b:5f:
ea:47:32:3c:3e:2a:64:14:4d:81:af:ec:2e:1d:33:52:81:4b:
8d:41:c0:11:3b:43:e1:a0:c4:9f:7b:78:97:8e:8b:dd:16:95:
ab:a7:fa:24:c5:5d:c1:5f:3c:9a:11:21:61:d4:e8:e2:c0:fe:
4d:8c:61:2a:79:74:65:f8:79:a2:72:cb:ad:a1:03:9f:cb:0c:
13:d0:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:53 2025 by rpki-client