Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier: X1LNxXqWfDRpVbov1G7JVBaOFEM90ZvS18k3ZHLGCLg=
Subject key identifier: B3:C4:75:79:89:11:21:96:FD:FD:10:32:25:37:1F:C5:AF:42:74:08
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 019927B2936F2CAF33DA851799041AEA8AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number: 0105
Signing time: Mon 08 Sep 2025 05:00:38 +0000
Manifest this update: Mon 08 Sep 2025 05:00:38 +0000
Manifest next update: Tue 09 Sep 2025 05:00:38 +0000
Files and hashes: 1: B0G3sXZP-lhExtNpCnBC4YPOMgM.roa (hash: gLC/9yZUh8hacXl47LTUe+LM65gMVKVuxWQdb+HkSvE=)
2: btENirTzGa5hCRjGIIwG3_NDN14.roa (hash: Qc+DpFa+WQ/w1YZM6JMB5sciL2uYCIYPxJnwDj9/83A=)
3: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: jdxDUr6O8wNgR0YDNOQU9gi2s7kh6T7dxZap9XYZ5BM=)
4: k6PVLlZxAI3X_AkJNP_B54WXdz0.roa (hash: NcuIcur7U+66dD6xSrLkgdloxOkqGgs1VvRkZcvsiE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:93:6f:2c:af:33:da:85:17:99:04:1a:ea:8a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Sep 8 05:00:38 2025 GMT
Not After : Sep 9 05:00:38 2025 GMT
Subject: CN=b3c4757989112196fdfd103225371fc5af427408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:ee:2c:33:8e:fc:80:02:01:09:ed:0a:0f:
5b:7b:51:81:7f:4b:c3:35:70:ac:0c:03:9a:57:ec:
4c:4e:21:be:72:09:ea:39:ae:b3:97:be:1f:61:c5:
2a:87:b2:64:4f:a9:b7:1d:64:f1:b4:da:67:c1:fc:
ba:64:df:f9:23:74:6e:54:c7:7b:35:00:4b:e7:a1:
a9:02:63:ef:f5:78:0c:05:1e:a2:dd:b5:88:c2:57:
1c:b6:24:41:b5:23:37:55:b3:60:48:9b:8b:6e:73:
94:bc:c7:87:3c:81:bc:6a:ca:ea:b2:1e:98:ce:2b:
00:7c:68:2f:fd:e6:37:61:1c:d1:56:a7:46:f2:ff:
93:67:e8:1d:b4:bf:48:a6:af:e2:2f:1e:c4:f0:cc:
c5:98:3a:b4:42:45:9c:86:be:09:45:a6:e5:e5:0f:
52:15:f6:d1:f4:09:37:57:38:c1:eb:f7:cb:7e:68:
a1:a8:07:0a:36:f5:aa:e4:b4:4a:6b:f9:e4:11:86:
74:a7:d6:61:de:0e:d1:ca:1b:67:a2:3a:ef:04:f8:
62:75:25:a5:b8:3b:01:cb:43:0f:15:52:42:be:dc:
7f:ed:92:59:b4:f5:b4:44:27:18:64:f8:2f:4b:e6:
39:94:03:50:29:cd:bc:d8:19:3c:8b:50:f2:76:22:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:75:79:89:11:21:96:FD:FD:10:32:25:37:1F:C5:AF:42:74:08
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ee:b1:76:3e:db:94:85:6d:e3:be:3c:d4:46:9d:b0:84:fd:
20:22:93:54:4a:78:e0:66:08:89:29:34:0e:96:8d:cb:c6:a6:
8b:1d:8e:0c:b5:37:8a:81:46:1b:ca:c1:ea:c0:ec:7b:e1:78:
88:ee:42:64:5e:7f:e0:8e:5f:cd:5d:82:e7:a8:72:4d:68:d1:
93:fe:b6:5b:54:2a:17:bc:1c:97:3b:39:b5:42:82:78:bb:ff:
e8:5a:a2:f7:c5:3d:a9:79:68:37:de:09:f8:50:21:e3:c7:e7:
69:fd:89:27:33:61:0b:33:68:53:a4:c0:d6:dc:68:5f:f2:34:
45:ba:cb:7d:d8:fe:67:bc:37:7c:9c:23:ea:a8:1e:fd:ca:97:
39:0b:ca:53:6a:79:db:bd:3e:a4:6b:39:13:00:35:67:39:9b:
3c:18:58:f2:ee:e1:24:50:3c:7b:a7:b9:b1:5a:1d:a7:b2:3e:
dd:84:66:96:6d:1d:11:1c:49:73:9a:5c:3d:80:e3:34:a8:36:
40:a0:8a:9b:ca:96:15:08:50:7c:ef:bc:70:6b:5a:c3:aa:c7:
bd:e6:c0:b2:f1:39:d9:2a:ad:65:19:de:07:7f:bf:c5:01:8b:
59:56:c5:7c:7e:51:87:4b:89:e1:c6:44:1b:ac:f3:c0:96:2b:
ec:5b:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:53:34 2025 by rpki-client