Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: ifHjB/kUT9LDf441GxZvXyOOX6+rLhJSRUI4n2BHok4=
Subject key identifier: 9D:A8:1D:47:FC:AC:5E:41:17:5C:CD:A6:A7:B3:A0:3B:A5:FB:F5:DF
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 019849D366F6107E5BC1BC647F0CA5FD92DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 0E5B
Signing time: Sun 27 Jul 2025 03:00:47 +0000
Manifest this update: Sun 27 Jul 2025 03:00:47 +0000
Manifest next update: Mon 28 Jul 2025 03:00:47 +0000
Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: b3WeiXy+PwQMRPCbDwxmR3z3eKVsyvYMZQZZqfWxHEo=)
2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:66:f6:10:7e:5b:c1:bc:64:7f:0c:a5:fd:92:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Jul 27 03:00:47 2025 GMT
Not After : Jul 28 03:00:47 2025 GMT
Subject: CN=9da81d47fcac5e41175ccda6a7b3a03ba5fbf5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:a8:00:bf:2c:80:44:f9:25:f6:57:91:8a:
38:75:90:f5:7b:11:3d:ec:f7:96:c9:e2:b3:a2:16:
ad:c1:ce:d0:b9:bd:cb:68:83:e7:62:44:28:75:32:
69:28:51:2d:61:3b:b2:84:02:70:ea:d8:c2:37:db:
76:ba:f2:5a:d1:2a:6d:c4:63:f9:4c:c4:f1:3d:95:
fa:8e:e8:1d:b9:0f:bc:37:fa:a2:d7:99:fa:ae:36:
cb:4e:ae:9d:95:99:75:b1:ad:62:56:5e:dd:c4:86:
0c:8b:80:0c:a3:a5:0f:40:d9:b0:9f:f7:55:bf:e9:
ad:ec:0f:44:d8:ca:be:28:4b:83:de:e6:8a:27:5b:
5c:43:19:e7:5b:72:b5:07:9f:0a:92:12:44:e7:60:
92:9e:12:5a:9b:94:a7:b3:af:4a:3f:6b:82:96:eb:
bf:91:ec:63:10:a2:4b:b9:25:4f:6a:b1:de:77:30:
35:13:05:89:7f:8f:30:e2:a8:2e:41:01:2e:a7:e9:
26:ea:0b:cf:f0:38:94:94:be:59:5e:a3:3a:46:b2:
6a:8c:30:ed:fb:e5:8a:54:ef:9d:91:21:41:15:80:
c4:83:5f:40:83:fb:60:43:cd:16:fc:2f:0a:5a:68:
97:3d:d8:13:66:1a:2b:6a:da:32:f2:97:53:f8:ad:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:1D:47:FC:AC:5E:41:17:5C:CD:A6:A7:B3:A0:3B:A5:FB:F5:DF
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:26:bc:ea:1c:e9:a0:d9:eb:94:e4:92:cb:5d:65:7f:fb:4d:
80:6c:80:88:42:a5:b0:f5:00:20:76:ee:48:38:15:5d:91:87:
84:8e:55:27:90:44:27:0c:b6:1d:fe:9b:eb:a8:91:68:9c:b1:
8e:78:90:a9:55:42:25:6e:7d:91:40:f7:d6:97:70:a4:1f:eb:
63:0b:f3:6e:e4:ce:95:b5:6c:e5:16:16:0d:0b:95:43:a6:41:
d4:dc:f7:3b:af:b5:94:e5:24:01:56:eb:41:7d:28:02:9b:b0:
e4:33:cc:75:8d:4e:b5:70:2b:6f:ce:e0:34:9c:00:83:30:f9:
00:e1:d8:77:02:7f:cd:3e:21:3a:69:c6:1f:ab:d0:da:03:cc:
33:ce:3b:a7:77:95:f8:6b:e4:d3:5b:8b:b9:a2:b4:f4:6c:c0:
c8:6a:59:40:bf:b6:0e:52:05:6c:1c:50:e3:ef:e5:7e:14:2c:
a1:b0:7c:06:ba:08:79:be:78:7f:53:26:f6:42:4d:68:c3:41:
55:fe:c5:95:b6:c0:2b:17:83:1f:45:b6:03:e5:ff:eb:b3:fe:
fb:57:b9:77:e1:7c:92:48:22:82:a6:08:62:05:93:e7:9d:c0:
1c:57:49:af:34:00:00:d9:ee:d5:55:a8:58:1e:af:79:ff:fa:
27:6d:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:52 2025 by rpki-client