Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier: 9lVaAEVpGWIKgjikl2vrBIZT+R9KA3YjGo0+Q+EnfY0=
Subject key identifier: D8:E2:E3:74:09:EE:D0:9B:48:F9:65:28:65:14:2C:30:AB:B7:D2:38
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 0198439BA68E594111D3F156F0A0A5F4136D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number: 12D3
Signing time: Fri 25 Jul 2025 22:02:10 +0000
Manifest this update: Fri 25 Jul 2025 22:02:10 +0000
Manifest next update: Sat 26 Jul 2025 22:02:10 +0000
Files and hashes: 1: 9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa (hash: bC7IXHx63H7lpbQ+lP0qMuIBLR6TNwS7YJHQvmLzCRc=)
2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: J8T7Bxa3NjDlf4WCLZXahTWe/vex4w+rbjoWamUHjJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:a6:8e:59:41:11:d3:f1:56:f0:a0:a5:f4:13:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Jul 25 22:02:10 2025 GMT
Not After : Jul 26 22:02:10 2025 GMT
Subject: CN=d8e2e37409eed09b48f9652865142c30abb7d238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:56:5f:07:d2:d7:28:75:7d:8e:3f:49:5a:
da:37:39:5d:e0:f5:92:22:0e:0e:67:45:89:34:28:
91:fa:52:e9:bb:d0:7e:b6:7c:99:56:cf:ac:91:85:
23:bb:c9:bd:4f:5c:9c:b6:bb:c1:d8:78:55:78:68:
d0:be:4a:e4:83:ad:02:99:63:92:16:cd:9b:57:fa:
07:c0:93:a8:6d:0e:a6:33:ca:75:f9:b0:1b:86:d0:
50:ca:e6:8a:29:9d:1b:45:5a:74:d3:e3:d1:66:3e:
0a:34:58:32:2c:c6:dd:9b:8b:04:65:6f:12:2a:34:
9f:fd:be:1c:cc:c3:6a:b2:79:6b:a1:84:5a:4d:3a:
c4:cb:2f:1b:53:f6:0c:1d:d0:dc:d7:9a:3c:f0:ae:
cb:01:f4:b7:4d:21:28:8a:5b:f6:6b:2b:bc:8b:b3:
8f:c5:26:02:c4:df:67:5b:5d:39:d9:3e:7e:76:17:
08:cc:a1:b2:51:38:98:08:d3:c6:16:41:47:c9:f6:
44:7a:77:15:0f:20:ed:f3:6f:bc:15:57:b4:d5:86:
77:9c:aa:35:20:4f:0b:62:80:d0:64:02:24:fa:52:
5a:d6:e0:22:08:d5:de:28:d2:4a:16:c7:79:c0:ef:
7b:b6:11:21:ce:96:35:e2:95:8b:d4:37:8f:07:d4:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:E3:74:09:EE:D0:9B:48:F9:65:28:65:14:2C:30:AB:B7:D2:38
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9f:61:0b:45:aa:79:36:34:c3:fe:be:ca:3a:ad:2a:49:3a:
56:34:3a:47:47:5b:4d:fb:3d:8c:68:bc:69:ea:15:bd:48:54:
b1:4c:7e:d2:81:a4:48:19:9a:2c:87:ca:1d:3f:af:58:30:4b:
7a:2e:8d:1f:90:d9:f4:d4:a7:cd:32:a4:62:a3:c2:13:b1:08:
61:40:e1:42:a3:a1:e6:9f:a4:76:de:0e:7f:e0:31:0f:aa:26:
63:8c:53:54:91:21:aa:6a:be:cd:33:75:c1:ea:6a:28:f7:fd:
60:80:7a:e4:5e:c9:01:69:17:93:51:1c:a0:46:95:d5:00:65:
53:bb:0a:56:71:6c:0b:59:64:ac:6d:a1:db:71:0a:ca:b8:c6:
36:4f:ab:68:88:4f:1c:8e:5e:a5:78:2c:07:a5:08:ba:2f:d7:
ae:74:5d:6a:ea:d4:4a:69:24:df:a2:c4:a9:08:95:67:42:69:
cd:e0:ae:bb:20:60:9f:e6:c4:96:c3:e4:e4:a8:6d:24:49:a3:
bb:e2:b6:ee:69:fc:d7:6b:92:93:75:bd:12:e0:ef:23:17:cd:
6a:71:a1:1f:6f:c2:95:56:02:58:9d:69:c2:e7:63:99:f8:12:
aa:85:dc:19:a4:97:78:09:41:42:d1:07:47:f1:06:07:8a:6a:
de:ed:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:55 2025 by rpki-client