Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: /RarbvnVReyjNmKhlhr654gPujYB22eYp3p7TVdiFMc=
Subject key identifier: 66:CC:37:A0:D2:A4:AD:0E:0F:A3:4A:D9:D5:A1:A3:BA:1D:1A:9B:B7
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 0198C8DC4A5382F92F4CE559EE44EEF7CE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 12EE
Signing time: Wed 20 Aug 2025 19:02:16 +0000
Manifest this update: Wed 20 Aug 2025 19:02:16 +0000
Manifest next update: Thu 21 Aug 2025 19:02:16 +0000
Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: 6b5ZOXJNpHEtlt/iC1GZYDiwcDAjlfY0JSaSmTLpSKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 19:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:dc:4a:53:82:f9:2f:4c:e5:59:ee:44:ee:f7:ce:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Aug 20 19:02:16 2025 GMT
Not After : Aug 21 19:02:16 2025 GMT
Subject: CN=66cc37a0d2a4ad0e0fa34ad9d5a1a3ba1d1a9bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:2c:6e:39:81:7d:65:68:04:b2:31:f2:aa:
50:5e:a5:74:f7:48:5f:e3:2a:a8:ca:c2:dd:1e:99:
86:37:02:cc:70:6d:b0:b3:26:8c:c4:69:46:ee:c7:
a2:75:f7:a3:b6:63:e8:bd:fd:5c:f9:5d:ba:80:f1:
46:55:03:61:6d:a2:83:6d:c8:57:a5:70:47:4b:cb:
67:9d:28:25:ef:f3:ce:f1:03:97:c5:87:c2:16:6b:
71:cc:fe:87:17:fc:13:31:aa:98:db:d0:46:cc:ab:
0a:a9:fa:d2:54:00:f0:9e:c3:5c:f4:aa:7d:60:b5:
d0:58:23:cd:2e:64:ac:9c:e7:8e:1e:30:d6:e7:a0:
40:58:08:30:4a:e4:ae:28:be:82:a1:db:03:22:39:
a2:f0:a5:9d:a5:2b:e3:44:a2:b7:94:cc:69:8b:7c:
68:dd:2f:14:5d:99:21:a7:bb:10:0a:bd:a0:85:40:
ba:5f:bb:fd:80:cf:f2:5d:88:9f:79:73:1b:5f:eb:
ae:3a:98:8a:e9:e9:a6:02:07:dd:1b:ab:5d:3c:fb:
35:86:62:1a:17:06:0c:55:59:2e:60:25:7d:d6:f6:
b5:b7:f9:5e:ab:33:46:66:70:83:ed:3a:30:35:55:
1b:e2:00:4e:0b:63:d3:73:c3:7b:d2:55:2b:e9:8f:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:37:A0:D2:A4:AD:0E:0F:A3:4A:D9:D5:A1:A3:BA:1D:1A:9B:B7
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9a:56:7e:b7:80:da:de:99:d7:15:8a:e6:38:f7:80:24:d4:
aa:68:3d:89:81:9f:76:2f:f1:c5:e3:47:f4:36:10:53:46:41:
8c:4a:ea:b5:a7:20:01:da:5b:8d:46:c6:67:58:dd:94:17:2c:
91:aa:89:26:c1:41:c0:da:c6:2d:6a:54:17:52:fe:43:8d:db:
0d:30:d6:ba:f7:b7:b4:aa:99:e7:1d:4f:d0:e4:a7:88:f1:57:
28:db:44:2c:4a:64:3f:92:42:3d:b2:af:57:95:a6:be:a4:84:
9a:e1:f1:4d:b7:3d:6c:16:3d:45:96:ab:0f:15:66:e6:d9:f8:
c0:06:63:62:64:39:af:8a:8a:35:b0:36:a5:61:7b:ab:a2:12:
c5:0e:92:52:51:ca:1a:f5:29:3f:72:42:52:89:d5:70:47:3d:
5d:a0:06:02:be:b3:89:29:e3:cb:1c:cc:18:9e:4d:d8:cb:08:
2f:58:75:db:0b:11:d7:98:c1:e1:1b:87:2b:55:25:b6:82:c6:
1c:ef:0e:1e:f6:a2:d9:59:2b:36:13:df:54:ad:73:28:7a:88:
42:c5:43:83:47:48:40:8f:d4:78:c9:5e:aa:29:33:f5:69:cd:
7b:eb:5c:9d:d0:71:c9:61:2f:19:19:71:83:cb:ee:25:3e:54:
a3:f0:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:51:32 2025 by rpki-client