Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File: Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier: vf2Ks14zPG4HF+/Euu42dLg7FX4aTcqcZJLakWEfJ6Q=
Subject key identifier: 32:C2:E8:A1:1D:16:A0:0A:FB:FD:68:07:EA:DD:9D:49:3C:1B:F0:3B
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial: 019848F781749A93C58FFFBCAD7BB7987802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number: 06DE
Signing time: Sat 26 Jul 2025 23:00:36 +0000
Manifest this update: Sat 26 Jul 2025 23:00:36 +0000
Manifest next update: Sun 27 Jul 2025 23:00:36 +0000
Files and hashes: 1: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: +hcCw8htcZwBEpjsTPui/ST4XZCrlCjesLTOPxZBqEQ=)
2: T8lku0gm3fLIfup1o_IGJ-Nf8nU.roa (hash: LKcOl9u48RGXIFNErzIBt+0+CJzkc3SUSSRAWMDqgFc=)
3: gaLphM1A_moGiALt3CRC2ndoaVY.roa (hash: 3zCVRytJAz7EydYXmCr5U7I8CEvPHa4z1gbLc/C+dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:81:74:9a:93:c5:8f:ff:bc:ad:7b:b7:98:78:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
Validity
Not Before: Jul 26 23:00:36 2025 GMT
Not After : Jul 27 23:00:36 2025 GMT
Subject: CN=32c2e8a11d16a00afbfd6807eadd9d493c1bf03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:9e:cb:8c:ae:9d:bd:ee:78:34:66:62:12:
f2:d0:53:5c:9e:9f:3a:38:d7:d2:78:6d:fc:c9:dc:
a3:6b:95:23:20:c9:d6:4d:58:f7:22:0e:84:d5:3a:
6d:c0:73:a8:c7:4a:90:fa:2b:48:4b:c6:1a:0e:e2:
5b:ec:b4:68:90:16:f4:55:8f:0c:2b:33:23:19:ce:
28:b0:4f:b7:95:19:db:76:7e:e2:6c:b5:71:ae:fe:
2e:d1:06:be:ca:cd:49:0c:62:14:dc:4d:c0:8b:d6:
0d:f6:88:de:c0:be:5d:f2:2c:0b:00:4f:97:42:4a:
5c:1a:03:af:50:44:37:66:cf:ed:a9:34:b0:94:55:
62:cc:01:0a:23:a6:f6:00:38:dd:b7:16:18:f5:ce:
82:5a:b8:b3:4b:55:63:36:1f:17:f0:f6:f3:7f:69:
2e:ce:23:9d:ed:ea:ce:b6:1e:cf:9e:c1:07:f1:ea:
5f:61:9f:48:5d:2e:05:ca:02:3c:0d:1c:fe:56:e4:
82:20:2a:6b:0b:ef:9d:7a:e9:7d:43:b5:d0:e5:7b:
37:92:6b:c2:ba:bd:10:ad:7e:ec:56:28:86:bf:70:
cf:71:f9:87:10:2c:fc:90:48:d6:f4:63:40:88:82:
fd:eb:20:86:e0:d9:86:fc:ce:8a:ce:be:71:fe:e6:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:E8:A1:1D:16:A0:0A:FB:FD:68:07:EA:DD:9D:49:3C:1B:F0:3B
X509v3 Authority Key Identifier:
keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7b:ea:96:b8:03:4a:80:3d:72:54:a8:52:7f:53:74:e8:5f:
89:fc:e8:b7:1e:35:47:e5:f6:ab:db:56:3a:b9:4d:f3:0e:13:
ad:3b:50:dd:4b:24:4e:ac:00:19:13:e1:2b:a3:1a:07:6a:9b:
0b:88:98:51:4f:c1:f8:c2:4f:a6:80:c7:7e:90:63:3f:23:a9:
8b:81:f5:09:1a:ed:25:59:24:3d:34:4c:57:f6:9b:bd:98:0a:
df:cd:61:10:24:4a:be:2c:72:12:6c:9d:69:93:56:5f:18:b2:
8d:e4:a3:ac:26:17:ee:fd:35:0d:35:db:ff:ce:f8:f7:11:68:
28:12:dd:3e:be:1a:6d:7f:3a:5f:e7:32:d5:1e:e2:2e:1d:de:
7a:3c:d5:5c:dc:61:e5:6d:21:bb:08:90:ae:4b:b9:1f:75:b9:
b4:bb:f3:31:84:13:2f:1b:2e:6d:0f:b1:7f:a3:f1:1f:48:a0:
83:77:ce:fd:c0:46:68:97:6c:d9:51:8d:ea:15:8e:80:23:ef:
4b:f1:b5:6d:79:ae:04:1e:3a:de:80:c5:ad:f9:fd:43:9a:81:
df:60:c7:d4:20:42:90:91:62:c6:89:0d:79:43:9f:22:39:e3:
68:64:d1:47:eb:1b:e5:87:ba:6d:da:87:01:d0:ae:7d:33:cf:
eb:65:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:12 2025 by rpki-client