Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json)
Hash identifier: 256pHbuKTP2U2BWwJtca45b6Ao57lo6/tdSQnwlS/gI=
Subject key identifier: 02:28:D1:6D:88:BE:04:F7:3D:00:F2:DB:2D:1C:72:C2:38:AD:E7:55
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 019921E7AB34E9D0B5E3D745EF50057DEA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
Manifest number: 0C60
Signing time: Sun 07 Sep 2025 02:00:54 +0000
Manifest this update: Sun 07 Sep 2025 02:00:54 +0000
Manifest next update: Mon 08 Sep 2025 02:00:54 +0000
Files and hashes: 1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=)
2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: M2Kvkdj8+rXzReRo6xWIlbl2p3sRyZRn7zdp7BEowHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ab:34:e9:d0:b5:e3:d7:45:ef:50:05:7d:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: Sep 7 02:00:54 2025 GMT
Not After : Sep 8 02:00:54 2025 GMT
Subject: CN=0228d16d88be04f73d00f2db2d1c72c238ade755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:28:c7:8e:33:8a:82:6b:fc:37:7d:6d:c4:38:
8c:b0:bf:bf:63:78:63:7d:f6:d0:1e:00:38:d3:57:
2b:f8:98:75:4d:e6:fa:9a:b6:ad:b6:b4:d1:ee:ee:
d3:8b:99:8e:2d:9e:76:1f:27:66:97:4c:d3:30:bb:
2d:b3:7e:71:29:20:eb:c4:23:59:3b:b7:da:a9:a2:
35:ca:31:e9:fe:60:4e:4e:13:6b:80:ef:c0:eb:81:
f8:b1:e5:22:45:3d:6e:76:a9:a1:ef:97:2a:f5:85:
31:9e:27:49:98:42:7f:65:2f:2b:7f:e4:f8:47:da:
7e:b5:06:9b:de:c9:22:7a:16:75:dd:25:49:9f:d4:
6c:60:52:db:3c:85:99:9e:e0:0c:9f:6b:52:c9:1a:
ee:c0:a8:e1:fa:06:54:eb:60:1c:3b:27:64:8f:65:
17:6e:92:74:7f:87:55:bd:c6:c3:ff:5d:27:a0:74:
9a:ff:98:28:bc:2a:38:06:35:23:76:98:63:3d:62:
88:ec:18:c0:56:d3:bd:ac:5c:dc:a7:4b:aa:cf:ad:
89:e9:cb:0c:51:9e:7a:d0:89:00:cf:91:0d:18:be:
60:25:01:9d:3a:35:d0:2c:52:6a:99:02:7d:e8:9a:
b4:67:6f:15:7b:9b:f5:40:46:af:cc:56:8c:bf:5f:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:28:D1:6D:88:BE:04:F7:3D:00:F2:DB:2D:1C:72:C2:38:AD:E7:55
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:30:bb:12:4c:16:28:11:a8:0e:0d:c8:9b:fc:b6:f7:f5:29:
2b:7f:33:f1:b1:9a:69:47:83:d5:1c:7b:51:52:3f:84:b1:dd:
7d:e8:bb:66:af:68:4e:00:2d:45:fc:41:d6:3c:78:2c:a8:4d:
cb:8d:84:b2:ef:43:4c:6a:25:f6:ba:dc:95:5e:a2:af:0d:c9:
28:b6:9c:7c:11:d9:10:c0:5d:28:13:7d:83:52:44:66:ef:e2:
fd:a9:16:33:27:99:e6:14:bc:3a:10:9a:24:2a:67:e1:f5:41:
0b:13:75:26:79:08:35:9a:71:3b:78:74:18:ed:f1:c1:ba:46:
77:23:ae:05:a2:94:26:f7:db:90:d8:3a:ec:0d:33:26:a3:b1:
1d:5d:70:b3:a5:8f:58:77:35:bc:7a:06:72:27:8d:06:86:32:
5b:af:ee:c3:55:74:35:55:18:ca:43:69:f5:f9:0c:ee:d3:02:
24:40:2c:be:36:e2:c7:69:e1:85:78:d7:1a:f1:aa:7b:d2:77:
27:1e:e2:c1:f7:65:1b:25:02:fd:fa:b4:35:85:b1:b7:5f:e8:
a3:37:02:b8:cd:e5:ac:94:20:d4:43:0e:9c:6d:50:e2:61:7f:
0b:0c:4e:f6:26:da:c5:5b:37:12:8c:7d:02:e8:b3:1f:15:b4:
8a:80:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:26 2025 by rpki-client