Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File: fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier: BSLIN4DAvEsqgOr84bqeDcCAeKZk5mlTf/eyjYQdJOE=
Subject key identifier: 3D:17:63:90:21:54:60:BF:4E:01:18:E4:80:F0:84:06:83:20:D3:91
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer: /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial: 01992BFDD621463EF402BD255321B9C39E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number: 0669
Signing time: Tue 09 Sep 2025 01:01:19 +0000
Manifest this update: Tue 09 Sep 2025 01:01:19 +0000
Manifest next update: Wed 10 Sep 2025 01:01:19 +0000
Files and hashes: 1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: m2ofeNOI8IF6/s2i+XURO0sQyMAGAMeDf94G8+hxuys=)
2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:d6:21:46:3e:f4:02:bd:25:53:21:b9:c3:9e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Validity
Not Before: Sep 9 01:01:19 2025 GMT
Not After : Sep 10 01:01:19 2025 GMT
Subject: CN=3d176390215460bf4e0118e480f084068320d391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e8:7c:b0:5c:34:1b:89:c5:d7:61:a7:78:3d:
29:8a:89:da:1a:77:17:d6:db:21:cd:bb:50:bd:1e:
bf:96:34:5d:91:61:2b:99:cf:96:f6:e9:92:97:18:
68:88:c8:b8:b7:bc:e2:40:ab:4b:65:e0:06:a8:12:
3e:b6:f6:4c:00:07:ed:81:30:74:a5:0a:05:3c:9c:
5d:8f:2c:45:54:79:b5:95:73:e5:b7:36:8e:6a:ed:
91:41:b5:7d:d8:83:1f:27:b1:4b:72:b7:e6:1b:f6:
3e:61:a3:96:15:4a:0d:6d:6a:54:82:09:f8:9b:0b:
da:24:51:50:3a:79:62:fb:17:e1:02:5b:e0:39:c2:
60:54:70:d1:05:3e:b7:1c:bf:6a:11:65:4b:ee:c0:
96:c2:7d:4d:88:fe:96:ef:67:ac:67:6e:ca:bf:87:
74:80:49:0c:16:30:2d:ce:8f:fd:fe:65:34:18:e9:
77:c6:e6:80:d0:9a:e2:91:44:28:c9:4f:da:f1:05:
2c:5d:e2:62:8e:a9:b2:4a:d8:d3:76:bd:6b:6b:02:
4b:24:30:7f:bc:b6:38:b9:12:60:a3:f6:9c:97:31:
8e:aa:0d:f5:68:48:5e:56:b7:c4:f1:07:c6:fb:a5:
87:ff:7f:5c:80:a8:82:bf:b9:02:11:f0:63:1c:ac:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:17:63:90:21:54:60:BF:4E:01:18:E4:80:F0:84:06:83:20:D3:91
X509v3 Authority Key Identifier:
keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:67:9f:07:b1:bd:f6:b3:7d:e2:44:54:ea:46:c1:52:8e:b6:
85:9c:b5:56:27:c0:5d:b7:da:4f:6b:65:69:ee:f9:ee:44:c2:
1c:f3:b0:6e:48:23:92:a2:b7:e3:ba:09:65:26:d0:ea:2d:fb:
d4:3b:08:5f:18:48:db:cb:ac:82:da:b7:30:29:95:b5:32:eb:
28:69:6d:31:21:88:6e:b5:55:4b:7d:e6:b5:f1:e8:05:84:5f:
41:dc:6c:cd:0b:07:8b:d1:71:54:26:a5:a2:cd:f3:b2:70:0f:
15:eb:38:ed:a7:83:0c:25:29:5a:16:ac:d5:4c:ac:0e:cc:fa:
e6:7e:6d:5a:3d:c9:4d:85:74:e7:76:6a:f8:a6:b2:73:81:e4:
21:84:bd:c0:6a:7a:c6:25:a9:18:b6:78:1e:cc:cf:39:d8:a6:
26:14:53:b7:66:d1:28:5f:3a:6f:e5:2f:c2:a2:c0:02:63:fd:
6a:86:25:80:10:bc:09:5a:2b:b1:d0:be:17:df:48:78:44:50:
58:af:85:2f:0f:15:23:d8:17:ed:6d:ff:87:ec:c0:ef:51:b6:
2c:47:7a:c0:2a:5c:14:e2:e4:0a:62:3e:f2:35:9d:fb:c6:c9:
b6:d3:fe:91:dd:d3:b5:06:18:11:57:aa:1a:b9:4a:65:70:e7:
62:6f:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:54:15 2025 by rpki-client