Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier: BqxHKRp8vP0zvXq/q9hbnAmQMMwZy+/BKvtRufV5bPE=
Subject key identifier: 09:E2:64:11:24:53:96:AA:CF:7D:D6:14:25:0B:43:70:3C:5C:19:86
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019934C9223EC6F60C7FF6781E185ABF8011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number: 1684
Signing time: Wed 10 Sep 2025 18:00:20 +0000
Manifest this update: Wed 10 Sep 2025 18:00:20 +0000
Manifest next update: Thu 11 Sep 2025 18:00:20 +0000
Files and hashes: 1: 2EgNkY8LCfJBqiF5G8pJe3q0hB4.roa (hash: wdnhU8m5AMaVCnPJuJ1ikMuyahXryJ7xnwDGzqvqxIk=)
2: B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa (hash: x4fcMnOhpMuR2+7kVYptH+8Mn3pldQm1ilWOcm4WRJw=)
3: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: cpjm6+lIO0R4XFyZPRhPOPm+QWMohWYhuP2JNNkJzu8=)
4: jKTi0IFy2Gsl-io5IjP67e8YnpY.roa (hash: zmbRyxceh2NVjEHPxC/G8V+VaBl1rJ3CnIcL4cBiYPg=)
5: onHMu3bAahxq_cU4SfKfk6E_UV4.roa (hash: iPBBLCVey8nRw59EFOtKkUkXyLv07ioTCFN/ZWTNZaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:c9:22:3e:c6:f6:0c:7f:f6:78:1e:18:5a:bf:80:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Sep 10 18:00:20 2025 GMT
Not After : Sep 11 18:00:20 2025 GMT
Subject: CN=09e26411245396aacf7dd614250b43703c5c1986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:45:c3:ae:81:a2:38:f8:5b:fe:ed:a3:dc:
3d:59:df:6d:05:e2:d0:c9:88:0d:25:95:c8:31:06:
00:96:0c:f8:f4:ef:89:cb:6a:17:f7:33:ea:68:49:
27:15:df:00:f8:f0:97:32:4f:30:bd:23:67:4a:0a:
0c:0e:8b:ee:49:3f:2c:e8:7c:c9:8e:0b:83:a4:13:
82:07:38:12:b6:39:1c:84:5f:5c:91:1c:62:47:a0:
0c:9b:ee:4c:7a:22:87:61:8d:3b:f5:7c:f9:ea:b7:
ff:73:bd:e0:32:bb:ea:d3:c6:42:0f:de:64:aa:e7:
33:b8:a4:5c:18:ff:77:73:71:13:d7:58:11:b3:55:
46:a3:eb:e3:63:83:83:99:2e:f4:42:c2:09:8f:21:
a7:7d:7a:38:4d:a8:f7:8b:03:5d:05:9c:e2:7c:f5:
8f:fc:45:b7:a7:ec:43:43:d9:ac:78:04:98:d9:ac:
e1:8d:54:c4:d0:71:89:73:04:0b:ac:6e:90:67:d2:
75:d0:4d:48:69:5b:8d:bc:0c:06:16:a9:1a:b7:c1:
36:d2:04:a7:c1:58:d3:ea:f0:72:11:5d:97:a5:35:
a4:6a:d4:73:69:d4:42:5f:bd:db:f7:9d:8a:3f:af:
ab:35:83:3b:af:45:52:8a:a4:9d:f9:5d:38:4a:c7:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:64:11:24:53:96:AA:CF:7D:D6:14:25:0B:43:70:3C:5C:19:86
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:99:fe:c1:8e:b9:42:3d:4b:5b:ce:26:ce:76:0a:df:80:e5:
97:48:f6:69:2a:87:d2:63:a0:2c:a1:54:78:5b:1c:4d:f8:f4:
6d:d3:30:40:0c:e6:a1:44:36:27:45:d9:9c:50:49:f9:59:3d:
cb:7a:e1:5d:14:6e:25:19:26:95:d0:35:5c:d8:32:df:a9:75:
10:63:f4:45:57:0d:6e:26:19:11:61:00:9b:36:77:af:38:81:
6b:1e:4f:9f:fb:1c:87:7a:a0:9f:5b:7b:c2:78:42:d5:e8:af:
a9:e9:1e:e5:55:10:fb:27:8f:76:8e:5c:2f:63:9b:bf:ad:a7:
7f:31:8d:2d:ac:3a:2c:36:cf:c7:67:ea:8b:0a:66:51:5b:d9:
55:ef:94:ad:ab:9d:d5:03:64:de:eb:38:d1:6a:9a:bb:65:d9:
5c:d2:aa:c2:bf:f9:13:08:84:3f:98:7f:e5:f1:a2:5d:2e:fa:
10:f9:a8:e1:e8:23:5a:94:c2:3b:80:ae:38:b1:9f:bd:b5:84:
1c:c5:f5:60:f1:4a:ff:4a:44:f0:99:08:3b:58:7e:37:31:19:
b6:66:1a:e3:93:27:c2:a7:d1:f8:ec:06:4c:09:4b:8d:1d:47:
31:c4:27:d7:fb:1f:22:c5:b7:93:95:4f:1a:6e:f1:4d:d7:78:
25:23:a0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:19:26 2025 by rpki-client