Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: DWH90oklPJ8Wqwl4UXwjOv2jfTb8RTNUhneB5goPKj0=
Subject key identifier: 1E:18:00:24:9D:59:50:24:DC:EB:71:71:21:91:A4:66:44:EC:F4:E6
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 0198443ECEB2ACA1E713F1C84C10BD12ACC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 0CDF
Signing time: Sat 26 Jul 2025 01:00:23 +0000
Manifest this update: Sat 26 Jul 2025 01:00:23 +0000
Manifest next update: Sun 27 Jul 2025 01:00:23 +0000
Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: dTHd4eGv4XgSwDJ9SYkKZuHw+nQSKKFA5owrolCmz3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:ce:b2:ac:a1:e7:13:f1:c8:4c:10:bd:12:ac:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Jul 26 01:00:23 2025 GMT
Not After : Jul 27 01:00:23 2025 GMT
Subject: CN=1e1800249d595024dceb71712191a46644ecf4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:10:b6:d4:be:29:fd:b3:e7:ce:8b:b6:65:
2b:e6:4d:3a:b5:f6:0d:4c:1d:1a:4f:d1:e7:ec:48:
a9:25:16:06:10:25:0d:ad:67:d6:09:67:ca:33:6b:
9f:7d:c0:c0:05:b0:84:04:22:ac:f7:9f:9f:33:b7:
36:ad:11:c0:24:b3:8a:3b:37:61:ee:7e:d8:2d:41:
8e:4d:ea:74:9e:66:13:0f:ba:51:58:8b:81:b6:ea:
59:1b:0d:6f:cf:41:bc:3b:04:dd:a5:1e:3f:5c:ef:
9e:06:ce:da:2a:e5:81:45:02:8d:dc:9d:ff:ca:3e:
ba:45:10:37:b7:f8:22:47:fd:29:bf:bd:03:85:e6:
28:16:bc:52:2f:08:00:1c:49:86:b4:e4:a5:be:f5:
eb:5d:15:e4:ff:d4:81:47:1d:ce:4f:98:79:44:5b:
53:90:9f:84:80:4c:5b:c1:45:9f:cb:c7:dd:dd:db:
79:83:04:2e:a7:85:44:33:77:7c:c3:a3:01:3a:b2:
e6:2e:ce:3c:2f:86:c1:9c:64:d0:68:56:0a:db:f8:
0b:7d:c6:03:d0:5c:94:50:35:88:ea:8f:eb:68:47:
5f:1a:90:1b:ef:f4:f0:95:3f:91:d0:42:fe:20:e1:
1b:81:e7:0b:c9:ea:18:8f:9a:97:7d:26:85:2d:fa:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:18:00:24:9D:59:50:24:DC:EB:71:71:21:91:A4:66:44:EC:F4:E6
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4f:3a:df:20:57:02:ff:b5:4e:be:ac:74:4b:ff:8b:dc:81:
b1:24:c3:65:f1:45:a4:9f:79:4f:0c:cb:72:a7:94:33:7e:fc:
07:b3:57:bd:63:e6:a7:40:70:1f:bc:d5:00:af:57:85:c7:7d:
b7:fc:be:22:65:05:f0:b2:24:ab:11:8b:81:b1:73:8d:7a:9d:
d3:ed:8a:a5:0c:63:8d:2e:4b:ed:17:86:e8:d0:40:b6:ca:c8:
35:65:58:fb:34:c5:f0:70:84:ad:09:9b:91:1a:a0:e6:43:33:
3e:0a:4e:f9:dd:33:32:2d:7c:aa:a4:4a:35:7e:1e:c4:cd:da:
c1:d3:4b:1e:0a:69:2a:4f:b4:eb:c3:61:55:63:e3:49:8a:27:
a1:91:50:6c:be:02:b3:c9:b6:bd:ae:2b:6c:0b:90:05:06:d2:
13:5b:95:38:c0:cd:a8:b9:28:14:42:09:8f:73:d7:28:d9:91:
3c:db:45:b3:b3:76:7e:41:96:b8:0e:1f:c0:24:a6:95:3e:f2:
0f:88:99:13:98:55:84:e5:27:ba:a0:b2:18:a0:f6:68:5a:68:
4c:b8:0e:20:88:b2:af:97:7e:12:28:b3:5d:65:30:bd:6e:01:
8d:48:5d:76:8c:a9:57:c5:ae:49:6a:fb:74:f0:aa:56:08:87:
83:9c:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:25 2025 by rpki-client