Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: z7qAdo3ZwaVf/L6qMIXLKVa+ApFgafxoyUVCp8j+G1g=
Subject key identifier: FD:12:BA:19:2A:29:F0:4C:D8:19:8B:B6:3C:53:19:36:15:77:82:9C
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 01983D2A935559716B8331E3DCFFD4A06322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 15CE
Signing time: Thu 24 Jul 2025 16:00:57 +0000
Manifest this update: Thu 24 Jul 2025 16:00:57 +0000
Manifest next update: Fri 25 Jul 2025 16:00:57 +0000
Files and hashes: 1: 44aHSTc_N_J7ymJFhCAeUzS4V0M.roa (hash: k12ZQud9YaZ6rTtvVFGbQETqfgsqw1EgkhzhgzETi5U=)
2: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: 9eSMg92QWeE6k7Uk60jtcuSIVG07FK2DYv8NpxERq8M=)
3: t1rSqZMHwUULq3wM5aR5KwjFWZs.roa (hash: 6VKs9nWx8WcxkqsK971nWLpcVPvBhOxvWj0zA50lsSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:2a:93:55:59:71:6b:83:31:e3:dc:ff:d4:a0:63:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Jul 24 16:00:57 2025 GMT
Not After : Jul 25 16:00:57 2025 GMT
Subject: CN=fd12ba192a29f04cd8198bb63c5319361577829c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:ac:fc:76:92:64:08:0e:db:42:53:20:f8:
04:ed:7a:6d:4a:3e:ee:fe:b0:ae:c7:2a:b8:83:89:
58:4c:b9:ad:4f:6f:71:2d:64:34:79:5a:b0:06:d8:
af:9c:69:a4:dc:6c:36:52:ef:25:43:ba:59:fc:1c:
15:f4:8c:1f:88:68:71:a6:96:eb:e0:4c:94:88:58:
09:0f:c5:b1:20:6b:65:35:06:d7:00:12:a1:ca:f9:
68:9f:6a:d4:86:92:1e:dc:41:95:28:22:da:89:5e:
06:31:9d:40:56:e9:4c:ce:1d:92:f0:2b:ca:a5:95:
b5:52:ec:d0:13:62:5d:91:65:69:04:1b:1b:ed:6e:
d4:da:75:69:4e:57:1c:c0:d0:30:64:54:b0:33:e3:
11:7a:c2:d7:a8:7c:3a:66:49:50:3e:80:47:09:c9:
0f:5f:d8:3e:2d:49:b6:e4:8c:ad:ad:a1:c2:9e:d6:
2d:8b:b3:30:6f:97:b3:13:15:a3:85:e3:da:9c:5e:
1b:5a:88:68:96:29:8a:62:16:9d:75:5d:1f:10:ee:
1a:4a:9d:63:da:35:09:ad:7d:ab:31:c0:fc:4e:ac:
d3:03:aa:59:71:5a:c7:00:6e:5d:2d:4c:8b:ea:be:
72:e9:f9:c0:6d:16:56:51:a6:0d:70:b3:9f:20:44:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:BA:19:2A:29:F0:4C:D8:19:8B:B6:3C:53:19:36:15:77:82:9C
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:35:6b:a2:1f:e4:26:a1:f1:e1:c2:14:6b:28:69:f4:a1:
f7:28:6b:97:c4:0c:ed:4b:63:9b:00:e8:c8:25:c7:b1:5a:9a:
30:16:ad:9f:31:19:c9:04:be:cf:13:ef:5a:b2:dc:3f:23:24:
9b:98:42:22:9b:61:9c:58:d5:1a:11:48:7e:0d:81:6e:2e:4b:
fb:f4:ad:79:eb:0e:a8:9e:1b:13:26:95:99:e1:60:66:62:f5:
e4:d4:a1:ad:b8:fb:3a:ff:6d:7a:a3:74:c3:ed:e5:23:89:39:
f6:f4:83:b9:25:d1:62:d1:be:58:9b:6f:79:c0:dd:f0:95:94:
34:c6:de:b5:2f:36:67:fd:c4:4f:d6:89:4c:dc:b0:d4:09:3f:
5b:df:de:52:e0:c6:04:e4:a2:51:5a:38:fa:5e:1b:9d:cf:0f:
aa:ee:85:17:f1:21:f7:ec:d7:c6:74:c5:5d:a3:d0:ba:38:0f:
1a:79:29:8e:f4:cc:58:85:27:a3:9b:17:5f:7f:42:94:8d:71:
d3:6c:15:89:b1:5a:49:7d:ad:74:0b:d6:8b:51:5c:ed:5b:40:
a0:1a:ef:61:8d:0f:c4:1b:0b:28:df:7f:96:cc:dc:8b:6f:b7:
45:10:c2:46:8d:c8:99:9e:e9:01:fa:62:16:9b:bb:22:08:04:
80:10:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:07:04 2025 by rpki-client