Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: cVaIBN5Ipi+YTRAHIHdDKR+E9QMIyOypHw5MenTaYFY=
Subject key identifier: 65:CD:3B:19:78:FB:DF:AF:73:2D:B2:23:40:02:EF:59:7D:8C:EF:32
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 01992EC749E35FB11D85447DE701BD24647C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 1358
Signing time: Tue 09 Sep 2025 14:00:36 +0000
Manifest this update: Tue 09 Sep 2025 14:00:36 +0000
Manifest next update: Wed 10 Sep 2025 14:00:36 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: hEZ85OQkZwetlPow/ji+Yk7HsZiuaWq+TukUpUH6PcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:49:e3:5f:b1:1d:85:44:7d:e7:01:bd:24:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Sep 9 14:00:36 2025 GMT
Not After : Sep 10 14:00:36 2025 GMT
Subject: CN=65cd3b1978fbdfaf732db2234002ef597d8cef32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:c6:5e:f7:16:18:07:85:ae:20:b7:fa:5d:
42:f2:1c:ed:c1:0d:62:48:7c:b9:a2:6a:c3:bc:ae:
58:9e:f8:e9:20:e8:e9:30:5c:a5:88:4f:df:f3:6d:
05:58:07:b8:bc:5b:4d:86:74:7e:ff:44:1a:51:57:
bf:27:e8:73:01:74:c0:4a:32:c2:5d:98:d8:fa:af:
f9:0f:4c:80:48:19:41:bc:05:14:cf:6d:86:c0:2d:
06:af:74:39:84:68:5d:f4:d7:08:7f:b6:c7:9c:21:
14:74:14:0c:43:34:b6:19:46:5e:ff:9f:8d:e9:14:
1b:10:d8:9c:50:14:b5:7d:05:69:0f:0c:b1:cf:6d:
09:9e:eb:94:f9:7b:87:a1:bb:a6:cd:47:5a:52:7c:
f3:e0:68:62:49:7d:2d:c6:4a:e7:80:48:6a:2f:84:
14:57:b9:4f:3f:b9:6f:c4:c0:40:29:1d:a0:89:bc:
a1:43:27:4e:7e:54:e8:81:0e:71:22:b0:a0:80:f7:
4e:99:7d:ba:f1:ac:d7:7b:a5:ad:6b:47:70:2f:ed:
98:ae:6b:a7:33:eb:9a:f4:1f:7e:2c:8c:8f:dc:c6:
27:53:b4:e2:22:93:5d:b2:57:75:3d:35:0a:d1:d5:
c4:ff:96:03:10:18:e1:f1:5a:b7:04:45:72:dd:7d:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CD:3B:19:78:FB:DF:AF:73:2D:B2:23:40:02:EF:59:7D:8C:EF:32
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cc:c5:73:5a:85:e4:68:08:c3:3b:10:4d:d8:4f:0c:4c:99:
46:51:64:b1:f2:27:d0:24:8f:73:bb:a5:2a:56:1c:ec:46:05:
cb:bc:66:02:df:e3:3c:bc:ed:4c:20:88:98:69:05:55:b1:5b:
da:5a:33:73:71:cf:7b:4e:10:56:1e:66:22:d4:41:cf:01:34:
f6:34:d6:d4:01:2c:33:f8:90:83:64:f4:4f:ab:35:97:5d:b7:
71:11:09:80:16:45:09:19:78:65:fd:b9:c0:49:27:91:26:ca:
f7:9e:84:a3:1c:34:5e:1e:f5:88:9c:cf:0a:63:54:43:b1:2b:
2f:b2:40:b3:b8:53:8f:49:af:22:93:6a:08:1f:6b:a1:bc:20:
81:c5:ee:0e:cc:5b:2e:c7:88:e7:53:41:b0:63:55:8d:4e:98:
b7:66:55:04:ae:74:bb:c4:f8:9f:91:0e:06:e9:6f:ce:1d:ed:
d9:79:67:42:e6:71:5f:b3:30:e6:3f:51:76:ad:95:12:12:b0:
22:b4:1b:2d:27:ab:83:88:52:c7:9b:cd:9d:46:ca:9a:9e:c2:
05:4a:87:9b:cf:c6:5b:e8:33:0f:ad:1c:8e:ce:56:85:85:85:
e0:08:98:59:6c:7a:e4:72:fb:e6:04:b9:a0:b1:1f:4e:81:78:
df:c4:fb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:24:44 2025 by rpki-client