Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: nEkoLH6t3n8bH29EJC2nD9fdVEJIgcCtCuk9nlSOSdI=
Subject key identifier: 0E:92:21:4D:42:4B:F3:21:F6:0E:92:58:C8:60:AE:1C:5A:DA:70:40
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 019921E7B1C5513945D849CF869720B80796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 0229
Signing time: Sun 07 Sep 2025 02:00:56 +0000
Manifest this update: Sun 07 Sep 2025 02:00:56 +0000
Manifest next update: Mon 08 Sep 2025 02:00:56 +0000
Files and hashes: 1: NwE-Q3U5NROLLw8YZo5SdVq6prU.roa (hash: 4nK8pCzkjFWGecL8LPoOkleHLxc20BBIlahc8LVNGkQ=)
2: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: 3uhYjxG7PCrJbcyCg+8peeVCogGIMvgFHAP/YxBlKDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:b1:c5:51:39:45:d8:49:cf:86:97:20:b8:07:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Sep 7 02:00:56 2025 GMT
Not After : Sep 8 02:00:56 2025 GMT
Subject: CN=0e92214d424bf321f60e9258c860ae1c5ada7040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:59:ee:b5:67:1b:14:b5:7e:aa:00:87:1c:
ff:f2:7b:14:6a:5b:83:69:b5:6a:f4:c8:b3:fe:93:
3c:0b:e2:33:4a:71:4f:44:73:2c:39:16:7e:fe:4b:
99:99:88:a9:ed:56:e4:73:af:7f:0e:e7:5e:4f:0e:
9c:c7:b4:84:ec:32:71:57:aa:8c:a0:71:43:78:77:
70:75:99:b5:67:5c:f8:a1:15:1f:1c:c3:2d:25:b4:
20:b1:e0:90:f8:e7:bd:23:ae:b1:e1:de:32:41:ee:
c5:18:12:c8:15:f5:c6:c5:2e:14:1c:70:9e:eb:dc:
52:4c:77:0f:0f:24:c5:81:3c:ce:bb:4c:11:b5:93:
fc:f0:19:f0:ee:76:82:d9:bc:c9:70:40:e4:7f:89:
19:7f:60:80:77:e9:dd:17:11:89:47:dd:16:13:52:
ce:da:77:b7:5f:d9:8c:97:ba:8b:ca:6d:15:f4:7f:
56:b9:9a:1d:47:61:d3:e8:33:9b:e0:f4:dc:6f:ce:
0c:63:f3:df:17:fd:e0:7d:df:59:51:b7:ef:27:ec:
ee:2f:68:bb:66:39:76:a6:fe:4c:7a:8a:70:a3:67:
73:56:f4:52:e7:2c:bc:2b:c5:51:a2:9b:32:f2:a0:
be:59:3a:42:01:73:ff:46:3e:bc:4c:2a:03:0c:f6:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:92:21:4D:42:4B:F3:21:F6:0E:92:58:C8:60:AE:1C:5A:DA:70:40
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b4:6c:a6:b6:e9:c7:f8:2d:3f:78:bf:df:d6:3e:c5:96:b9:
2b:ad:7f:8f:7e:82:d8:61:05:27:3a:62:2f:59:77:e0:6e:ef:
a8:64:35:9f:80:46:01:03:18:25:91:ad:64:c7:a1:18:fe:ea:
c7:33:e2:6b:9b:e6:8d:87:99:12:28:ff:1d:e9:c5:c3:a5:23:
a8:91:d4:33:06:d9:4f:b7:f8:6f:54:38:0b:2c:e6:52:d9:5b:
81:9e:5a:ab:38:93:da:d6:0a:e2:4e:62:de:1c:c6:dc:4b:4f:
ac:6b:f0:86:0f:01:0e:44:a8:49:7e:43:f6:a7:53:a2:cc:6a:
91:56:4e:cb:53:53:8d:0e:bf:78:9a:56:ff:ec:ca:5b:6c:aa:
a8:1d:6e:3a:50:1b:ae:8c:a3:02:0f:36:a0:58:cd:31:a1:ae:
92:db:7c:2e:43:2b:7a:92:11:3d:5e:dc:2f:05:48:52:ea:69:
68:05:19:fe:33:5e:e9:d2:63:3f:6c:91:af:4d:7b:d7:e0:a9:
34:6b:66:4b:fe:4f:51:8e:ce:b5:e2:7c:78:db:2e:3e:59:8e:
b0:6a:41:86:77:51:47:cb:e8:4a:05:5f:33:b7:7f:aa:5e:50:
aa:6c:76:b3:6c:8d:50:4a:9c:88:24:94:c7:97:59:20:2e:b0:
c2:c4:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:52 2025 by rpki-client