Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: jR2f+uyANhc7SPLYPMgFUmWb0pt2ggWVDZhUswIrWxw=
Subject key identifier: A1:4D:85:06:6D:9D:1D:68:5F:AF:87:0A:CA:FC:20:2E:47:9C:AE:A0
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 01993500ACE119FE378C79E0862A13B72799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 0258
Signing time: Wed 10 Sep 2025 19:01:00 +0000
Manifest this update: Wed 10 Sep 2025 19:01:00 +0000
Manifest next update: Thu 11 Sep 2025 19:01:00 +0000
Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: x72fKLT3uuEvY98T/oV2zkZrKilGVw1AHi3WdR4N7HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:ac:e1:19:fe:37:8c:79:e0:86:2a:13:b7:27:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Sep 10 19:01:00 2025 GMT
Not After : Sep 11 19:01:00 2025 GMT
Subject: CN=a14d85066d9d1d685faf870acafc202e479caea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:25:3a:c5:53:59:3e:c8:07:65:21:26:06:
c2:a8:89:d9:48:8d:44:9f:b3:1b:9c:c1:c2:7d:b4:
87:ad:fa:84:7e:67:1c:b1:d0:b6:f3:4c:60:e1:6a:
ee:ec:15:cb:2a:37:df:a0:1a:4c:90:5f:21:01:9d:
b3:ab:4b:5a:5e:a4:ec:e4:56:ed:4b:76:d3:4f:fb:
6f:d3:e0:2d:b0:b1:5a:36:eb:ae:26:c4:9f:bc:eb:
d8:0c:db:96:3e:5c:a0:19:fd:12:c3:4e:c8:5f:9f:
02:14:de:6e:90:d4:bd:9a:54:97:d2:35:3b:4c:3c:
cc:7b:f8:04:a1:fd:51:48:62:8c:3a:f3:1f:e5:dd:
8f:51:d1:aa:fe:e5:02:52:2e:bb:81:d6:b5:3c:b4:
6f:5c:c0:db:09:41:3c:e8:fb:e9:30:86:2a:e7:da:
d0:8d:7e:45:96:da:f3:a2:8e:08:74:63:b3:60:68:
4f:ce:b0:07:18:62:cc:a9:0d:aa:8d:3c:e4:44:75:
8c:06:9d:45:08:00:d8:b9:2d:21:28:85:80:5c:a7:
15:1d:fb:8e:38:7d:92:1f:ce:0f:58:70:d4:ce:06:
be:c2:ef:58:bc:26:26:e6:ec:b3:bf:8d:ed:39:70:
53:56:1c:e3:0f:fa:a4:40:ba:01:55:fb:77:32:a4:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:85:06:6D:9D:1D:68:5F:AF:87:0A:CA:FC:20:2E:47:9C:AE:A0
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1d:a6:77:ac:1b:5e:94:fd:65:43:8f:bb:35:85:c7:19:f0:
fc:73:bd:6d:67:74:24:04:94:3d:f3:4f:bf:4a:b9:c5:f7:57:
53:6a:3c:a8:54:ef:57:b4:a5:33:65:e2:0e:c5:42:6b:e1:6b:
29:b4:0d:87:73:2a:a1:1e:8a:35:e0:2c:fb:1c:73:1e:2b:f5:
64:e3:72:6a:81:03:8a:81:c2:12:7e:3e:57:f0:07:af:d2:9b:
43:17:fe:e1:af:74:36:fc:5b:42:78:d1:28:80:8c:b2:07:98:
85:9b:4d:c9:39:df:b4:81:52:92:53:ab:a4:1c:e7:40:86:cf:
60:45:e9:3e:0e:07:f9:07:13:6b:f6:84:5e:2c:5c:a6:d7:83:
b8:5d:ef:ed:1c:68:46:04:74:4a:95:b0:b4:c4:cf:42:b8:8e:
8a:fb:8a:89:fb:60:bc:f9:82:cc:f2:2f:97:e4:ec:1e:44:75:
68:af:c1:93:f8:dc:da:42:65:da:28:5f:08:d1:b7:d8:6f:f9:
0c:19:92:83:78:43:e1:2f:89:fa:8c:b6:55:ac:1e:9c:dc:a7:
4f:8b:af:49:75:22:59:85:98:f8:54:58:ec:ae:43:9c:3e:c8:
3a:23:3f:3c:55:77:ea:86:39:43:15:0c:b0:a3:5f:ec:80:fb:
81:30:69:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:37:49 2025 by rpki-client