Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: DuuapuYq9l1lKemPS9I3N+G1EaApoUoh3Mq3lT5vOGs=
Subject key identifier: 61:E1:83:4A:85:CA:58:FB:32:62:AE:61:52:3F:0F:E8:94:32:4D:F1
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 019851C3A5A2456DD12C19601E3D23E544F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 16:00:32 +0000
Manifest this update: Mon 28 Jul 2025 16:00:32 +0000
Manifest next update: Tue 29 Jul 2025 16:00:32 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: iAWmFiHus7VDzE8tO9s1q1irgKgORysk75ttRCQ2v4A=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:a5:a2:45:6d:d1:2c:19:60:1e:3d:23:e5:44:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Jul 28 16:00:32 2025 GMT
Not After : Jul 29 16:00:32 2025 GMT
Subject: CN=61e1834a85ca58fb3262ae61523f0fe894324df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:f7:77:fa:25:93:fb:9a:cf:7c:ae:27:09:
e1:ef:c8:ee:07:e0:02:26:79:27:ee:c5:47:33:dd:
2f:14:32:2b:14:3a:4f:71:e3:0d:5c:b2:90:d1:24:
0f:ee:04:f1:89:26:07:04:58:0c:3f:08:03:93:1c:
a0:79:ff:9d:8a:9f:a5:3a:d8:33:34:66:27:dc:38:
a1:de:78:b2:01:15:31:70:03:d1:6c:dc:be:01:9d:
d0:70:bb:ae:11:42:ce:3d:36:69:b3:ad:ac:4d:35:
d5:de:e8:fb:7e:31:c9:0a:41:ef:e6:10:82:be:3e:
77:66:ab:6a:56:90:4c:7b:b7:70:f4:62:87:6a:02:
72:cc:28:e1:83:40:55:2f:85:04:ed:07:29:42:18:
53:62:3a:45:60:78:72:7e:ae:43:d3:2d:81:80:74:
64:4c:5f:34:75:0e:20:d8:ea:cc:0a:52:60:82:71:
63:2f:d9:a7:05:e8:33:a8:2d:62:5d:0f:29:3e:11:
0c:3c:49:59:a7:8a:41:df:d9:8d:3f:8c:96:fc:d8:
38:e2:18:db:f5:19:fe:bb:fa:de:c3:b4:8f:a2:02:
3b:f0:d0:ec:95:eb:52:5a:d3:e4:da:57:9c:9e:5d:
7d:ad:df:3b:b4:67:46:af:be:4a:69:cf:d2:88:e1:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E1:83:4A:85:CA:58:FB:32:62:AE:61:52:3F:0F:E8:94:32:4D:F1
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7d:30:86:e7:51:71:6e:5c:ec:0f:ab:5b:64:78:7d:5e:0c:
70:17:39:e0:1d:cf:f6:e4:58:cb:ca:95:0b:56:7a:ac:6f:d4:
28:45:65:d2:5b:9a:75:de:77:97:fa:55:9f:02:b3:a2:b3:e8:
86:76:21:f2:8e:2d:a4:7b:5c:76:1d:80:d5:81:ae:8f:52:3b:
42:26:c1:f0:23:b6:b2:64:e0:0c:c2:e6:6a:18:a9:e6:a2:b5:
74:07:f0:78:cb:97:6f:06:b9:d1:17:39:84:5b:69:50:4c:52:
a7:8c:b8:8f:59:35:6c:05:96:19:07:44:8a:a2:40:b3:8a:d2:
d1:89:ba:f7:38:e5:eb:83:20:99:1a:cf:ec:33:12:e2:71:5f:
64:c1:78:f8:01:20:27:33:4a:57:9b:11:b9:32:3f:04:fa:c3:
43:aa:3c:a3:93:53:3f:8b:f5:83:ae:55:58:81:79:50:5f:d6:
63:08:8f:ed:c5:a8:ee:59:24:4c:ec:47:c1:45:9f:3a:39:fd:
4f:3a:56:7a:9e:38:b0:b2:77:02:68:ef:de:d3:60:49:cd:5f:
83:1b:82:93:ec:de:7f:67:fd:73:62:f6:ab:28:50:fa:cd:6d:
3c:a5:b9:92:b3:03:68:dc:ce:7a:e2:5c:87:80:20:40:67:4f:
2c:65:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:13:32 2025 by rpki-client