Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: /4OYPYBV51AvighrByvjRLYmsIJMXDiTCV1TqX3sBKQ=
Subject key identifier: 57:FC:67:B1:08:26:0D:52:78:00:EF:A5:1A:42:69:45:A8:E0:16:49
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 0199307ECF8D1C1BC348DBEDE137E90AAF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 10A0
Signing time: Tue 09 Sep 2025 22:00:41 +0000
Manifest this update: Tue 09 Sep 2025 22:00:41 +0000
Manifest next update: Wed 10 Sep 2025 22:00:41 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: ErLDt4kVrkKXp4rf11OIRpBTl5lUj5dEL3Hng+HmF78=)
3: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (hash: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:cf:8d:1c:1b:c3:48:db:ed:e1:37:e9:0a:af:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Sep 9 22:00:41 2025 GMT
Not After : Sep 10 22:00:41 2025 GMT
Subject: CN=57fc67b108260d527800efa51a426945a8e01649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:dd:8a:90:8f:e6:e0:fc:23:75:42:e1:12:
86:93:45:df:7e:e2:82:30:08:1f:09:07:ea:03:4a:
2c:e9:9c:67:d2:cb:0b:5f:b6:d1:4b:7a:7c:5a:2d:
45:c2:af:db:7d:9a:ff:7a:ab:fd:aa:9d:ec:2b:36:
43:3f:9c:c3:e8:ee:17:0d:dc:f1:4f:15:45:40:99:
cd:5a:56:44:4b:e8:99:0c:06:50:07:44:f1:8d:63:
00:ff:8b:ca:54:f8:c3:34:aa:f8:62:e1:75:d6:7c:
b5:9f:aa:00:39:5a:4c:fb:e9:a5:b5:6a:e2:27:41:
96:3d:c2:2f:b7:ce:ea:b4:37:6a:e0:72:a4:d0:72:
d0:fd:cf:c0:54:94:02:aa:28:9a:25:61:29:28:f0:
ab:78:db:7a:f0:89:68:20:97:19:18:b9:17:63:45:
b8:59:5b:e0:bc:5b:8a:1b:9b:14:fb:9f:8f:f8:59:
12:ff:f0:87:33:59:15:5e:8c:54:30:8d:e9:27:9d:
8e:f0:7a:32:5d:1b:0a:0c:25:a1:5b:0d:90:2f:5c:
94:b1:13:14:ca:fa:d9:46:62:05:74:90:c3:f9:44:
bd:62:78:76:bb:22:3d:a5:ec:13:26:88:fc:c6:e9:
04:de:cf:7b:51:67:ef:71:9c:e7:7e:5c:3b:d3:85:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:67:B1:08:26:0D:52:78:00:EF:A5:1A:42:69:45:A8:E0:16:49
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7f:ee:5a:71:21:db:e2:7b:1b:93:9a:e9:69:ae:92:07:dd:
a9:a0:6b:68:04:06:5c:8d:3c:f3:eb:19:4b:85:b2:87:33:2e:
a9:03:34:29:24:09:b2:a4:f4:65:33:bb:ba:f8:08:21:ee:7d:
f2:24:eb:89:3b:2b:3a:3e:17:3c:ee:b9:b5:a5:cf:84:9f:eb:
4a:86:a8:09:1a:c3:e0:87:b8:9a:5d:48:43:5e:1d:f0:42:2c:
77:e5:2f:0e:5b:fd:2a:74:6b:bf:46:8f:87:52:5c:ce:8b:92:
c0:f9:42:52:8d:2c:85:9a:95:82:7a:5e:97:5d:a7:97:77:ad:
20:eb:6f:c6:2f:66:9e:3b:08:33:ef:75:55:27:8c:4d:26:62:
75:25:52:0c:04:e8:ce:9c:21:5a:63:0f:9f:2c:e0:43:ef:0d:
ad:47:dd:80:34:e6:17:57:6c:86:44:35:61:eb:f0:bc:a7:2a:
57:07:d4:52:0a:c3:b7:b2:21:4f:dd:53:be:50:f1:a0:65:0f:
08:d9:c3:c0:b3:a2:53:a7:fc:b6:da:11:41:81:26:23:3a:96:
59:3c:cf:ec:f2:31:20:b7:cf:61:31:7f:3e:ba:2e:0e:aa:3c:
5a:54:e0:98:53:47:0f:88:d6:14:9c:c2:22:0c:1c:ed:eb:ce:
eb:1b:01:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:41:06 2025 by rpki-client