Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier: 3Rjcs5lFd3oZq4VnO1aiEt93R0jU7qEFsAmiVlHnbWA=
Subject key identifier: B2:66:58:91:33:7B:9A:F9:00:0C:79:ED:26:D3:5D:A8:6A:A3:36:63
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 019922C3109A71BA86A232E86994ABB71EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:00:33 +0000
Manifest this update: Sun 07 Sep 2025 06:00:33 +0000
Manifest next update: Mon 08 Sep 2025 06:00:33 +0000
Files and hashes: 1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: 2+3SypYqyeJ5wKLRu+LdnuDuExnKnMVUSkEmdaAgSwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:10:9a:71:ba:86:a2:32:e8:69:94:ab:b7:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Sep 7 06:00:33 2025 GMT
Not After : Sep 8 06:00:33 2025 GMT
Subject: CN=b2665891337b9af9000c79ed26d35da86aa33663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:89:4d:72:e5:c6:7f:7e:e2:37:98:ff:31:
30:a2:7b:a3:3d:c8:b7:5e:29:23:29:a9:19:26:89:
32:9f:60:63:a9:b6:d3:d2:df:19:a9:5f:23:0f:2c:
64:73:54:d7:a6:7e:6c:39:0c:51:85:32:e1:8d:68:
5e:85:5c:f9:96:81:5b:81:85:e2:57:58:ed:ad:ac:
9c:47:95:d4:d2:51:79:92:fe:e9:e3:d0:3d:df:7a:
2b:56:c2:d4:62:0e:c4:40:cb:4e:31:2d:3b:59:fa:
35:c4:d4:62:35:ba:9c:b9:f2:a5:5d:80:ee:e1:aa:
00:df:16:e5:60:3e:fc:99:60:d7:9f:19:c3:4b:89:
c0:16:40:9e:7f:39:c8:45:8f:3c:6f:aa:db:05:41:
f5:bf:19:83:93:03:b7:21:7b:bc:95:51:32:d7:13:
a9:80:f8:da:ad:55:37:02:7f:ba:58:0f:2a:14:5c:
bf:14:1c:77:f9:f9:86:01:54:a3:a3:7c:bf:df:82:
8a:a5:3b:06:bc:12:30:38:9f:56:90:1d:4b:b6:52:
cb:a8:64:aa:f6:04:ff:62:ff:80:01:da:f9:4d:ec:
8f:14:05:44:f3:54:b0:cf:0d:72:51:e8:2c:58:fb:
3e:39:cd:4d:98:bf:2c:6e:be:33:3e:6b:18:7c:d1:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:66:58:91:33:7B:9A:F9:00:0C:79:ED:26:D3:5D:A8:6A:A3:36:63
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:77:b5:32:42:35:b6:e6:41:7a:35:c4:85:4b:64:a0:06:02:
ae:e9:e8:27:81:f9:1e:d2:23:35:e7:01:6e:8e:97:75:38:9d:
60:81:51:55:9a:6e:80:ff:71:91:99:cc:2d:f9:7c:65:bf:17:
7d:3d:34:52:b4:76:87:dc:0d:35:c1:26:24:72:8d:d8:a0:e0:
b4:6a:da:c7:b1:8e:33:9a:0e:89:3a:36:e8:7b:13:d0:8f:41:
8b:5e:60:8e:14:db:b2:61:e9:20:25:66:33:ee:a1:09:55:dd:
66:8a:8f:22:2a:0a:e2:16:2e:1e:99:18:a0:52:1d:89:cb:53:
29:8e:5e:22:02:b0:68:4c:5d:79:ec:7e:74:95:1e:b0:95:d9:
af:ad:dd:96:cc:93:b9:fb:b4:99:8c:ca:4b:21:fe:52:7b:d1:
0e:f6:9d:48:b3:be:6b:2c:53:71:69:61:db:5d:8d:3a:0a:c2:
06:9d:e6:c2:7c:5c:58:a1:f3:eb:47:b6:56:13:e4:8f:c9:ea:
34:22:dd:4b:96:dd:b5:12:33:42:76:ce:aa:85:9f:3e:1c:eb:
ac:9d:de:d9:cf:f1:f3:77:d1:7a:40:58:dc:ca:e6:77:aa:78:
de:9f:8c:81:54:c5:79:ce:07:d5:cb:71:9b:a1:ad:20:03:6f:
1d:55:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:50 2025 by rpki-client