Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: zba9DRMTkyDv+ZHmqc9tB0E60/+lwWIQvL5WQGQJqjw=
Subject key identifier: C6:B4:F2:CC:22:C6:91:B5:17:CC:B4:AC:A6:CC:24:41:F2:54:A6:47
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 0199258DAA28A3BD936866066C241E5EBF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 19:01:05 +0000
Manifest this update: Sun 07 Sep 2025 19:01:05 +0000
Manifest next update: Mon 08 Sep 2025 19:01:05 +0000
Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: tV2d8pqEDzFwwCtP/nZB+5/Vf0MXOAHjYv9gyfsBywk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:8d:aa:28:a3:bd:93:68:66:06:6c:24:1e:5e:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Sep 7 19:01:05 2025 GMT
Not After : Sep 8 19:01:05 2025 GMT
Subject: CN=c6b4f2cc22c691b517ccb4aca6cc2441f254a647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:5d:ff:3c:35:59:7f:8e:b4:e8:80:c4:56:
1f:ab:89:65:9d:c2:4e:cb:7d:e3:5b:82:b4:ae:5e:
f4:72:90:b5:62:94:6d:0a:c6:12:f8:c3:88:75:1b:
92:e4:4e:e2:71:64:45:60:b6:8f:a9:b3:e1:b1:26:
cf:0a:f7:c4:ac:57:5c:dc:49:83:ed:dd:f4:41:82:
1d:15:b7:b4:e2:a9:15:67:6a:d9:8d:11:38:f1:5e:
8a:21:85:89:0d:fc:c5:cb:05:d3:da:78:ae:52:27:
d1:18:7e:4d:54:0d:7c:fe:c1:ed:fa:ed:50:34:c9:
99:73:c1:82:d6:9c:59:fb:64:12:04:ff:8f:b2:c5:
cf:5b:f5:e9:81:f7:9c:49:a3:90:4b:d1:80:20:35:
a7:aa:46:cc:ec:12:55:7f:5e:b8:f6:0a:d4:52:98:
ec:24:91:2f:38:b6:3d:df:54:c2:01:f5:27:2d:15:
1e:36:d6:31:ff:75:87:ab:8d:f1:41:0c:d1:dd:7b:
fc:3f:f5:17:f1:b8:d0:68:be:97:12:96:21:af:d6:
f2:05:f3:06:2e:23:e8:33:7a:ad:a6:d5:a9:00:28:
d3:9c:42:96:c6:c7:be:49:b4:a1:ff:17:6a:17:b0:
1c:4b:80:15:0e:9f:a5:5e:43:d5:b8:bb:b5:84:cb:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B4:F2:CC:22:C6:91:B5:17:CC:B4:AC:A6:CC:24:41:F2:54:A6:47
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:66:1b:ca:48:00:cb:9f:1d:32:50:03:9f:f9:4c:8d:e3:46:
99:56:05:37:cc:ca:e1:a1:32:b1:14:a7:36:ea:f0:a4:76:35:
f3:69:65:b6:6a:4c:5b:14:04:58:ac:86:09:db:a0:34:ed:a4:
71:4a:9e:20:79:12:85:ce:9b:e4:c8:57:3c:c2:0e:00:5c:e1:
22:35:fc:0b:8d:8b:65:18:70:a7:63:d6:e9:8f:a0:65:4e:3a:
43:7c:1a:59:1d:41:a5:73:01:71:84:d1:3a:b3:ef:4a:e0:6b:
b9:db:a3:10:e9:e1:78:36:d3:7f:5c:65:28:6c:f2:f2:07:f4:
49:63:3f:e7:d0:05:4b:1f:52:09:5e:f6:31:ec:d6:a4:5a:cd:
30:cc:d2:8f:b4:6d:62:3e:dc:af:f6:4f:0d:f4:da:52:d0:d5:
b5:9d:41:0a:65:6f:b2:d0:62:a4:13:b7:3d:c4:5b:6f:c2:46:
79:4c:0b:bd:77:3e:87:67:9b:46:7b:96:4e:b1:7e:8a:f8:a5:
0d:62:9b:37:a1:4b:44:d0:51:0a:8e:7c:9d:77:53:58:bb:b7:
fd:d1:e4:b3:10:fc:d2:d4:3c:7f:87:c1:79:de:a3:55:eb:63:
72:6c:76:ed:dd:cd:40:c3:46:30:7e:d0:1b:d2:03:79:02:00:
80:5c:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 23:14:55 2025 by rpki-client