Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: zCvxFHf54Ica4t20iwuwkAQyuQ1zwtcU4lcTX/YZJtc=
Subject key identifier: D2:C5:B7:D2:EE:7C:1D:47:5A:19:2D:C2:5D:93:07:FB:FB:BD:ED:55
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 01984A40E4DD5AF8E2EFE9C0D273E55233B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:23 +0000
Manifest this update: Sun 27 Jul 2025 05:00:23 +0000
Manifest next update: Mon 28 Jul 2025 05:00:23 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: msBLGuvD0vrN7NwP9+1vO2s+pXHUwi1zyidtTeGvIqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:e4:dd:5a:f8:e2:ef:e9:c0:d2:73:e5:52:33:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Jul 27 05:00:23 2025 GMT
Not After : Jul 28 05:00:23 2025 GMT
Subject: CN=d2c5b7d2ee7c1d475a192dc25d9307fbfbbded55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:64:c1:c2:82:c5:f2:59:0e:9f:db:87:fa:
13:70:57:0c:c9:7e:a8:40:8a:4e:ef:44:32:43:e0:
38:9a:2f:09:91:c5:82:76:c0:c9:54:3e:2d:40:fe:
21:1b:6f:9c:84:55:50:ec:0d:f8:aa:d1:ae:a5:cd:
2b:fd:d6:10:eb:db:3f:0d:4e:f9:07:19:7f:0a:a2:
0c:73:0f:66:bd:ae:be:b2:df:ec:0f:64:81:8c:9b:
9f:1e:56:71:d7:92:a9:c9:4c:af:be:a2:9f:80:4b:
d5:4d:98:b6:74:4d:dd:da:10:29:8d:3e:be:04:ce:
65:33:7f:61:13:ea:d1:1f:98:a3:7b:b0:22:fb:dc:
a7:ef:92:44:3b:84:b6:7e:f1:50:c1:62:4e:f2:04:
55:de:95:65:58:8e:e9:9c:73:24:da:b5:8c:71:8c:
61:02:be:3f:a3:02:d1:3c:ee:0d:94:a8:3a:ce:1b:
5c:46:63:21:ee:1e:f6:d9:b3:0c:8f:d7:e7:ef:bc:
b7:f0:fc:20:55:3c:cf:5d:ce:c0:99:57:7d:e9:f9:
9e:99:a6:d0:69:63:f6:45:a0:c5:0e:4c:d9:1a:7f:
9e:d7:2c:6a:0a:e6:0d:04:14:11:57:2c:de:13:56:
f5:e1:f4:d9:4f:6b:79:a3:6d:cf:51:af:d0:81:3f:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:B7:D2:EE:7C:1D:47:5A:19:2D:C2:5D:93:07:FB:FB:BD:ED:55
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:81:5d:be:5b:4d:67:56:0f:dc:5a:b6:89:03:f0:e5:59:
58:7c:11:57:a8:79:6d:80:63:66:71:67:7d:c8:59:7d:3f:9c:
b7:e6:f8:66:35:0b:13:05:d2:2d:6c:08:fc:5d:1a:e6:6a:f6:
9d:38:36:cd:4a:f0:4f:42:66:ca:9f:96:00:84:80:ef:82:a7:
38:12:88:d2:b4:cd:5f:63:6c:e2:22:ab:93:17:32:12:a7:86:
7d:f8:a8:40:3b:37:3b:a0:fb:42:1d:31:78:8d:04:bb:a2:ee:
78:d3:26:9c:68:6b:8d:9a:cb:5b:c0:2b:0e:04:6f:1c:83:23:
fd:44:a7:2a:2b:85:27:be:bb:e4:32:1e:66:4d:0d:af:41:2d:
31:c9:b2:85:07:3f:be:91:4d:74:b8:f9:12:97:6c:f6:54:f9:
47:df:e5:a9:e2:be:91:5e:ed:6c:b1:c3:fd:1b:cf:26:f7:96:
eb:53:5a:3c:62:5d:2a:f4:62:68:6e:c0:e1:dc:7b:8b:e0:95:
e8:12:c8:a9:fe:6a:0c:28:ca:75:de:7b:ff:6e:99:0b:4c:7d:
2a:32:74:3f:5f:f8:33:23:80:e3:eb:cd:64:d0:68:5f:62:53:
2f:ec:67:b3:e0:cc:df:e1:5f:83:02:c8:1c:d5:76:a4:64:dc:
ec:56:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:25 2025 by rpki-client