Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier: cxvtJ0McYSSZUZ0I8b33Un7g+DCwwJYQAV1QVo5WwNU=
Subject key identifier: 70:CC:50:52:17:74:FF:24:39:A8:D5:31:13:AD:FF:D4:85:79:1A:E7
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 019923318BF894C798A8761D3AF17E4613EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number: 167A
Signing time: Sun 07 Sep 2025 08:01:13 +0000
Manifest this update: Sun 07 Sep 2025 08:01:13 +0000
Manifest next update: Mon 08 Sep 2025 08:01:13 +0000
Files and hashes: 1: ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa (hash: kH4jiDgmQVBszMKQiiqGuVOByozNrdgPlqnsPcoBxDY=)
2: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: XWvrhbwon9JSWSFlBDl+8BlsyXu+6MDO93qikS/36yI=)
3: uklhr2EyG0t3uT3k6llXTSBL2L8.roa (hash: g5RYlitmLR15fm6PqKoImrqzTC0R3yuzCJ3CcwejS1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:8b:f8:94:c7:98:a8:76:1d:3a:f1:7e:46:13:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Sep 7 08:01:13 2025 GMT
Not After : Sep 8 08:01:13 2025 GMT
Subject: CN=70cc50521774ff2439a8d53113adffd485791ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:1f:31:98:82:d1:38:29:b5:2a:fe:d2:db:
a1:45:84:e8:dc:91:49:f9:46:29:60:d2:01:ba:c1:
26:ba:97:23:23:2c:53:6c:23:a1:fb:4e:54:c4:5a:
fc:42:51:ec:25:f5:be:4e:c6:75:1c:88:c1:33:2b:
01:4e:38:f0:34:52:1b:62:b1:71:c3:c7:59:d9:b0:
95:82:c7:32:cb:9e:aa:bf:7e:8a:f7:df:16:42:ce:
8d:05:f4:8d:46:55:7b:a5:ce:30:d4:62:12:d1:7d:
21:b3:fc:73:72:92:fe:e2:86:58:b6:b8:5e:c9:68:
53:2d:40:7e:61:70:3d:27:58:cd:2c:0a:0f:bd:cc:
ca:c8:e3:1a:6a:5f:8e:1f:5a:26:80:87:2f:37:72:
6b:4a:16:81:97:94:77:17:78:e0:5c:23:75:dc:f0:
1a:02:20:79:05:b7:fd:6b:b2:e3:87:0b:16:22:3c:
72:25:ae:25:cf:eb:93:14:41:5e:de:3c:03:11:ca:
d3:4f:49:7d:c9:b5:c7:83:8f:8b:6a:a7:b3:5e:92:
8c:14:d9:22:cc:45:de:08:90:9d:31:d8:e6:8c:c7:
1c:62:9c:dd:62:ae:0a:0b:74:e7:26:b4:72:9e:60:
ec:93:88:71:47:b0:44:64:0e:9b:bc:52:b7:0b:7f:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:50:52:17:74:FF:24:39:A8:D5:31:13:AD:FF:D4:85:79:1A:E7
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:78:d3:01:97:fc:83:d3:b7:df:94:f1:df:98:bc:cf:09:d7:
73:b2:3d:c2:56:54:17:9e:11:85:73:8c:6d:63:83:55:44:88:
b5:0a:90:36:5d:64:30:7e:66:fa:1b:7f:d8:25:04:fa:29:a7:
c9:88:61:9b:1d:d0:b2:b5:37:20:b7:44:5f:a8:8e:31:ca:ce:
ac:48:5c:6a:ff:30:a2:f5:9d:3c:b5:b2:b2:4b:22:c1:41:99:
cd:d4:f4:11:9d:8e:59:1a:c9:09:51:e0:2d:97:e2:b0:30:19:
f2:05:ce:ef:23:a3:a3:08:67:b8:95:24:51:d0:0a:27:e1:28:
19:13:0e:3f:fa:59:e2:0f:db:84:08:49:5b:93:c0:17:a2:2c:
7b:98:26:e6:d7:dc:50:4f:46:c7:86:82:2d:38:ff:03:4f:d6:
c1:0b:09:e5:3c:f8:42:6e:32:cc:9b:5c:04:da:50:f6:ea:b1:
33:de:e9:a1:56:0f:fa:0d:f2:90:39:c3:3f:09:17:3b:14:af:
0d:2c:e0:8b:c4:cf:72:24:ea:e7:29:dc:bf:a1:03:87:8c:ec:
e1:fc:68:e5:0b:ef:03:08:df:65:63:93:3b:e9:88:0d:c9:ea:
25:58:85:a9:f6:36:88:2b:6e:75:0e:ba:a5:33:57:4b:ba:ed:
23:65:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:25 2025 by rpki-client