Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: XtNhN0WCqOUem0+Af9LOmNS4m68ms2UD5EzgfHV5c1Y=
Subject key identifier: 99:0F:C4:64:30:95:08:F0:6D:4A:19:91:96:98:C3:61:D1:80:CF:EF
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 0198481B7B2F7526B8D9EEC217841B5328BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 12FF
Signing time: Sat 26 Jul 2025 19:00:17 +0000
Manifest this update: Sat 26 Jul 2025 19:00:17 +0000
Manifest next update: Sun 27 Jul 2025 19:00:17 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: P1JNvG/y9VvH5tJVyCU9isu7lZG1Aadk5M++xqWHbW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:7b:2f:75:26:b8:d9:ee:c2:17:84:1b:53:28:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Jul 26 19:00:17 2025 GMT
Not After : Jul 27 19:00:17 2025 GMT
Subject: CN=990fc464309508f06d4a19919698c361d180cfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:7a:88:71:c2:4a:d8:5b:0f:73:8f:a0:34:
41:d8:16:c2:26:3a:dd:c9:5c:b7:2b:a0:7d:1b:f8:
45:16:25:82:5d:74:aa:68:76:bf:4f:4f:3c:0b:9e:
26:90:bb:83:2d:fb:b3:6e:34:c0:58:5c:f6:4e:da:
02:4e:78:88:6a:33:f8:5d:c5:b5:67:49:c0:cf:e7:
d3:81:1d:18:c2:6f:a1:c3:4a:02:78:d7:a3:1f:f9:
cf:5f:2c:fb:5a:82:23:ca:4b:c1:b8:b9:ad:6b:e3:
76:86:29:72:fc:2b:bd:bb:25:15:8f:0b:73:4f:c3:
81:ff:07:7d:66:95:26:f6:4a:b0:85:81:f3:22:f1:
22:30:f8:31:58:3d:ac:05:ed:94:0a:ce:6c:b1:f3:
ef:b5:4e:ec:2b:24:3f:0f:09:f7:a2:67:a5:42:8b:
8a:1b:a5:6f:a9:7b:85:35:76:06:76:55:6b:06:2d:
94:17:4e:5d:a3:58:41:64:e1:82:f1:14:47:2a:b8:
03:5f:02:e6:6c:9f:9a:38:e0:6a:23:69:cd:36:a3:
f7:e3:c8:7c:f4:77:f5:46:28:46:1b:73:31:1c:5f:
59:da:72:50:fa:ce:0d:54:62:3f:22:0b:10:02:33:
10:e6:52:c4:06:80:29:bf:2e:2a:8a:c9:d6:40:45:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:C4:64:30:95:08:F0:6D:4A:19:91:96:98:C3:61:D1:80:CF:EF
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:36:37:03:39:9b:ed:fd:aa:19:ba:d3:5c:69:17:a1:54:a0:
83:0f:cf:0b:7c:56:a4:84:92:43:cc:62:ea:2c:a4:90:0f:0a:
3c:5b:23:c8:b2:45:02:1d:68:2f:9d:dd:3e:f6:b2:25:e9:bf:
72:1f:b4:ec:49:1c:41:63:aa:44:56:1b:0b:6b:12:74:6d:97:
94:42:8e:d4:87:63:bf:e6:dd:4a:65:30:ec:ef:0f:0d:35:ce:
35:64:a3:3c:8c:2a:fd:b7:ae:2c:5c:4d:96:94:f9:e0:84:30:
86:e7:1d:0d:0a:b2:55:5c:7c:92:0a:8f:6f:cf:d1:e2:00:4b:
aa:00:b4:61:34:98:8a:46:db:a6:54:44:36:81:5e:4e:8e:0d:
84:4c:85:9c:68:bd:15:93:69:fe:c5:d2:4a:11:16:a8:5f:bf:
bd:ba:aa:61:00:c9:ec:f6:22:79:57:38:45:18:8e:8e:fd:db:
24:62:1f:47:85:7c:4c:11:b6:ee:05:61:cc:85:66:4c:93:61:
4c:07:b1:af:ba:59:a2:bc:ca:1e:b7:8d:28:7d:ee:ca:e7:ec:
a2:3b:aa:37:fb:5a:4d:ec:3c:de:0f:8c:1f:29:34:dd:e7:24:
04:e9:dd:af:bc:b4:b4:d9:e8:c5:bb:af:7e:ff:68:dc:ca:95:
3f:ad:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:18:02 2025 by rpki-client