Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: htRuS+Nl2sw4H6XmfQAKM//OB6DvGp3DNesGLGetcH8=
Subject key identifier: C3:96:9C:0C:1D:AC:13:7F:E0:2A:B4:2E:F5:55:1B:5C:26:88:8A:16
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 01984777BED403242A55E73CB5957DEA5E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:01:26 +0000
Manifest this update: Sat 26 Jul 2025 16:01:26 +0000
Manifest next update: Sun 27 Jul 2025 16:01:26 +0000
Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: 77wVZhxQ2+fG2e5f5UGjKtamb0NAtFzTILFy0/Fm4Yc=)
2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:be:d4:03:24:2a:55:e7:3c:b5:95:7d:ea:5e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Jul 26 16:01:26 2025 GMT
Not After : Jul 27 16:01:26 2025 GMT
Subject: CN=c3969c0c1dac137fe02ab42ef5551b5c26888a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:96:6d:34:3d:67:00:23:7f:41:55:1a:cb:
3d:13:a5:e3:d1:7e:24:69:f2:49:d8:07:d0:6b:29:
de:7c:93:40:93:db:4f:13:ea:00:d2:65:81:aa:b2:
b0:ab:2a:0f:4f:4a:97:48:42:04:85:62:a0:0f:6e:
d5:db:d6:2d:6f:49:83:8e:23:98:f8:40:7f:b0:34:
4d:01:5b:3b:8f:d3:12:04:d5:16:13:e8:ed:99:df:
26:8e:da:e9:58:26:f3:87:23:78:81:ea:b3:21:f2:
10:ba:fc:1d:6d:9e:01:04:fc:d2:4a:55:ed:d3:87:
19:36:73:6b:be:24:aa:84:0f:d7:84:b4:e0:d4:1a:
9e:98:87:4e:ec:64:76:cc:92:74:19:41:d0:52:72:
08:10:4c:33:5e:9f:09:52:0b:9d:dc:84:8e:ca:e2:
6b:f3:49:fa:c4:ca:5c:b6:44:2b:1f:fd:fa:dc:10:
fb:8c:ba:27:98:5b:d0:38:b4:f8:0f:ed:0b:41:21:
02:15:04:71:83:b4:67:fb:29:55:10:76:ac:c5:8e:
92:95:54:22:45:76:1a:28:7b:9e:6e:b4:4a:96:fc:
51:c9:06:d6:95:74:f3:4f:6a:59:e9:bd:44:5b:9d:
cf:13:dc:fe:3b:71:9d:4a:4e:0e:f1:6d:73:e9:42:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:9C:0C:1D:AC:13:7F:E0:2A:B4:2E:F5:55:1B:5C:26:88:8A:16
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:87:38:f5:10:8c:e9:ed:d7:6e:f9:b9:60:f1:0f:40:1f:6c:
87:29:6c:1b:21:d5:d3:e2:6f:25:62:68:47:2a:a4:2b:48:14:
c6:b3:eb:2a:a1:70:aa:f3:2d:1c:40:6d:ab:e1:c0:07:c2:05:
00:90:16:f5:5a:52:8f:f6:64:9b:64:ce:62:32:f3:8e:fe:f4:
4f:0b:3e:bd:5e:84:68:4e:79:5b:e4:aa:e0:88:e6:9f:82:ac:
c8:83:64:c6:31:6d:84:c5:41:98:b9:08:f4:ef:37:81:60:fa:
69:db:73:ab:9d:84:12:e4:18:db:e5:3a:28:e8:16:bd:97:31:
d4:ce:9d:bc:0f:1f:18:c5:c9:d4:36:84:53:07:57:ab:a4:41:
6c:1a:b4:5c:33:47:dc:14:47:ce:73:15:52:35:e1:ac:95:07:
04:62:de:c0:af:4e:4c:a0:0e:20:41:9f:48:58:68:b9:00:17:
bf:6a:32:49:63:78:74:8b:d2:57:10:e2:55:13:ec:16:24:32:
17:77:fa:a5:e4:59:ef:38:5f:b3:8b:07:bc:ab:34:d6:48:e1:
1a:03:29:53:3a:07:08:c0:6d:7c:e9:d8:c0:9a:d2:21:dc:a5:
69:78:20:2c:18:d6:38:d0:2f:4a:4b:3d:0b:6f:dd:43:fa:fe:
25:c8:16:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:53:40 2025 by rpki-client