Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: 2yxdTFiH6sZM0YP5nGfsHFm+apuvW1D4b9EyMTV+UFA=
Subject key identifier: 62:11:8C:A9:CA:46:ED:62:36:8A:BA:F0:E3:F2:70:CA:56:C4:5D:B7
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 0198C67FCC1958668F10103862A5ED6EE4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 08A1
Signing time: Wed 20 Aug 2025 08:02:00 +0000
Manifest this update: Wed 20 Aug 2025 08:02:00 +0000
Manifest next update: Thu 21 Aug 2025 08:02:00 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: prZl6i2BhhHkL3P7z4QCLDYcEWQV2pFRQnLCvhn0Mfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:cc:19:58:66:8f:10:10:38:62:a5:ed:6e:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Aug 20 08:02:00 2025 GMT
Not After : Aug 21 08:02:00 2025 GMT
Subject: CN=62118ca9ca46ed62368abaf0e3f270ca56c45db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:cb:0e:83:97:72:7f:18:48:55:2e:c0:1a:
08:14:f0:af:57:5f:95:16:f8:25:5a:61:ae:44:7e:
8f:a3:7d:eb:d0:40:ef:d9:d3:36:a1:21:1d:27:41:
ec:7e:4d:e2:4e:02:b3:32:78:94:88:6b:62:4b:56:
c3:0e:db:0d:69:b8:6f:0a:4f:33:9d:b9:ff:75:30:
35:ce:f3:e3:18:72:59:6f:1e:f7:48:4c:9c:d3:0f:
03:cf:8a:d3:41:27:2e:96:84:34:db:30:28:41:e1:
c3:e2:c5:c1:ef:a0:34:a3:51:60:b4:23:53:ef:b1:
3b:93:ed:d8:e4:bd:4c:75:34:c8:42:a2:d1:ae:26:
ed:ec:32:c9:5d:04:63:07:96:7d:4d:e3:98:85:c9:
b1:c8:ca:9d:57:fe:c7:2e:a6:71:d0:f7:73:b8:9f:
90:23:29:de:84:38:49:e4:34:97:46:f8:94:d8:02:
1a:62:b4:fc:7b:3b:26:70:47:1f:f5:d5:14:5c:76:
15:6e:62:13:7f:ed:c0:96:f9:80:5a:93:52:a6:0e:
43:d1:6a:ab:d0:23:7a:63:88:b6:7d:b2:54:8b:de:
b1:0b:08:3a:87:c9:86:ce:d2:f8:07:6a:39:ed:fe:
fc:b6:58:be:73:98:83:97:4a:a2:07:0e:49:1f:3d:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:11:8C:A9:CA:46:ED:62:36:8A:BA:F0:E3:F2:70:CA:56:C4:5D:B7
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:29:b6:1c:ee:a1:20:32:4b:86:6c:98:2c:39:fb:02:c2:18:
a7:eb:7d:be:38:78:84:1e:84:0f:4d:af:08:25:08:dc:c9:c5:
ce:8f:2e:94:1d:3e:a1:5c:49:61:21:c7:f1:7f:8a:4d:23:42:
ad:97:0e:23:e3:8a:68:43:8c:00:a2:60:2f:80:d7:7e:20:4f:
d3:57:ee:65:9e:ee:49:b3:45:e0:4b:57:b5:da:bb:53:c9:8d:
d2:e9:6e:36:1d:c3:e3:7e:03:93:c3:7f:db:aa:0c:ff:50:4f:
42:ff:13:87:c9:ba:79:08:21:52:07:52:4a:c3:6f:8f:c4:72:
04:5d:04:46:3d:0e:51:1f:b6:85:f8:45:20:05:d2:ba:0c:7c:
23:dc:50:a7:c2:0f:06:e9:38:0b:fc:ff:48:61:bc:3a:7e:79:
3d:a7:a8:45:ee:68:ee:5b:a3:41:e7:33:c2:53:01:4f:21:19:
27:da:99:2c:20:19:ab:24:a9:78:9a:67:d6:99:3d:d2:67:10:
dc:6c:65:95:8e:e6:6b:24:4b:3d:a6:0b:05:85:58:f1:42:a3:
8f:26:69:5d:07:16:d2:7b:8a:28:a3:c9:7b:9c:b2:43:6e:34:
1b:62:f4:72:10:4c:53:50:94:8b:f0:b2:ba:39:21:15:f9:d3:
80:d7:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:52:30 2025 by rpki-client