Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
File: fHcuHibmwj9ArWZoyF_pUNoQY_w.mft (raw, json)
Hash identifier: +7BNkhu5B0fEZqAEB/iWk/SX316OSjF+V0ijLE1vuHg=
Subject key identifier: 97:05:8F:21:B5:92:B4:2D:58:34:F4:0A:06:20:A2:BC:C8:22:A2:BE
Authority key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Certificate issuer: /CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Certificate serial: 0199233134A2FE096AD06833C31F5229ADFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
Manifest number: 0AF3
Signing time: Sun 07 Sep 2025 08:00:51 +0000
Manifest this update: Sun 07 Sep 2025 08:00:51 +0000
Manifest next update: Mon 08 Sep 2025 08:00:51 +0000
Files and hashes: 1: WuFy1APBIwy6JKAVQJctFZaszaA.roa (hash: O9UzF8bkJnuYItljusBcrOHzHYIIrCdeMJv6mHxJFNI=)
2: fHcuHibmwj9ArWZoyF_pUNoQY_w.crl (hash: +TlPlNkutAvDKa2uL8h4VzSI03Usnwui7dYMNv6kM8w=)
3: hAeo3-fsoXXxktFSXGJREiwOKiQ.roa (hash: yM5JEjdbG/f4XH2hveChqybWEFcsYH1LdaHT9UmPcb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:34:a2:fe:09:6a:d0:68:33:c3:1f:52:29:ad:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Validity
Not Before: Sep 7 08:00:51 2025 GMT
Not After : Sep 8 08:00:51 2025 GMT
Subject: CN=97058f21b592b42d5834f40a0620a2bcc822a2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:41:da:58:4b:a0:4d:fc:ef:52:61:a1:eb:
34:f8:29:ad:c4:f1:25:ee:33:3a:17:8a:08:bf:7b:
53:96:3c:2a:bb:11:65:80:cf:c9:c3:9c:88:cf:01:
cf:9b:0c:8e:70:f7:9f:79:7d:67:b4:d4:35:86:2c:
93:49:22:bb:99:a7:eb:2d:3c:00:dd:06:72:95:8e:
12:96:6d:e7:24:21:75:ce:9d:5a:18:8e:2f:94:1e:
09:5a:85:17:55:45:e1:4e:66:1c:84:9d:5a:cd:05:
a2:5c:78:af:0e:0b:5e:58:23:30:22:c1:d5:93:5d:
f7:4f:68:8e:92:01:70:1f:16:1d:06:da:7a:8e:e0:
77:96:04:3b:d3:7d:f3:92:b1:af:7e:11:ea:83:7d:
e9:b8:6f:f8:da:60:ff:4a:31:09:b9:c1:05:71:84:
5c:94:c4:8d:9c:e6:a8:78:58:72:27:63:0d:78:c0:
f0:cf:b3:f8:80:08:ce:2e:63:f9:8e:13:ca:7a:f1:
c4:2c:a9:0c:78:80:fe:4a:a1:2c:7e:31:ed:c3:20:
c1:d0:55:08:06:6d:cf:9f:ff:42:d3:23:19:88:77:
f8:e5:96:b6:57:b2:e2:c6:6d:67:50:7a:0b:a9:b6:
e1:72:f9:0f:57:c5:6b:67:bd:ae:3c:91:96:bd:79:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:8F:21:B5:92:B4:2D:58:34:F4:0A:06:20:A2:BC:C8:22:A2:BE
X509v3 Authority Key Identifier:
keyid:7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c2:7b:6d:f7:97:37:a3:ac:86:8a:37:41:15:27:e0:a3:75:
5a:3a:a1:0e:1e:ec:bd:80:66:0c:45:f9:4d:6f:dc:61:dc:b5:
80:c4:28:1d:1e:ba:e6:87:a1:28:ba:e3:32:3c:07:8e:0b:bc:
ba:29:e6:25:e7:c5:c2:67:ab:92:b5:b0:dd:13:71:09:d5:d1:
16:23:ba:b6:f6:75:d4:07:87:a2:f4:e8:5c:04:af:9f:ac:90:
69:05:03:a8:a5:eb:42:02:da:ef:16:ea:62:62:a2:b5:fa:c2:
b0:70:3f:fa:c5:74:ec:a7:59:e1:b2:48:39:ce:3e:54:48:4f:
de:c4:e5:ee:b6:81:00:93:aa:2e:c2:6d:8f:49:0d:41:b5:56:
35:7e:5f:a7:fa:5d:a0:82:b7:89:64:fb:18:c7:7d:94:52:0f:
17:7a:09:39:cb:2f:b0:08:8f:17:01:90:16:16:61:1b:12:1d:
29:92:5b:41:e7:61:a0:f7:e3:d6:66:19:67:eb:7a:26:db:45:
0d:fe:f7:9b:dd:f1:2c:d2:f3:55:f7:08:c6:6e:10:d3:69:3c:
c2:4d:ce:24:eb:de:b3:5b:d7:08:f5:bf:9d:8c:dc:71:f3:aa:
fe:a6:90:56:13:c0:00:01:cc:0f:fe:19:cd:3c:c6:40:5f:c3:
91:ed:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:42 2025 by rpki-client