Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: rqwOR/jHhuF5URhE50MsgYKtNje5/EIAjFQJU6Xmcd4=
Subject key identifier: E5:C7:8A:B2:81:FB:1D:AD:DB:44:12:0A:DA:09:5A:1B:4E:44:18:4F
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 0199244412258CCE6085089C6C2467725628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 1575
Signing time: Sun 07 Sep 2025 13:01:04 +0000
Manifest this update: Sun 07 Sep 2025 13:01:04 +0000
Manifest next update: Mon 08 Sep 2025 13:01:04 +0000
Files and hashes: 1: NicO7X1eeOmGxSSK_nbDJZV9Pdo.roa (hash: brCTvgHrTley7WUwp/kIypsM1wDTrMGgNla9liJHlp4=)
2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: gFWM6ipfptj2vfiUo4h15XnKrzYD6gwdYtW6gJZFoys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:12:25:8c:ce:60:85:08:9c:6c:24:67:72:56:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Sep 7 13:01:04 2025 GMT
Not After : Sep 8 13:01:04 2025 GMT
Subject: CN=e5c78ab281fb1daddb44120ada095a1b4e44184f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:fd:ad:7f:33:21:9b:91:13:f9:aa:c4:62:
e2:be:ae:3a:e4:df:18:db:7f:a6:fa:e6:5c:51:83:
3e:22:d8:fb:b0:74:2d:5e:0a:ec:79:3f:2c:0a:7a:
1a:55:bc:f4:e5:eb:c6:4e:04:dd:e3:95:4b:76:ff:
99:7f:b0:d3:6a:ff:6c:e0:68:fe:74:36:09:b9:39:
4f:0e:5f:a5:e4:cd:61:86:14:96:0e:af:6b:03:2b:
c4:3c:3f:38:fe:6b:81:73:86:63:a5:19:d4:bc:36:
3e:05:73:5b:82:b9:ca:a9:f6:f9:cc:41:95:b3:8c:
50:79:c1:db:ad:c1:c3:aa:cf:9f:59:c1:d0:ea:74:
09:77:c3:d3:f4:6b:70:30:54:7f:fa:3c:dc:fc:9c:
e2:8f:c9:83:c9:ae:5d:77:ec:67:fe:ce:2d:35:50:
48:da:7e:11:ea:cc:da:db:e8:05:a4:16:59:76:e5:
3c:a1:f7:6b:9a:69:ac:87:ed:77:93:f5:eb:c0:b2:
25:cd:34:62:af:14:2e:4e:df:b6:7a:75:92:c9:61:
08:87:08:bf:69:dd:82:0a:81:f5:84:39:c0:ae:b2:
c2:34:02:85:2d:0f:dd:c7:ca:f2:e0:bb:7f:ec:05:
e6:59:4a:51:f3:48:24:38:17:8b:e0:ed:fe:4d:43:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C7:8A:B2:81:FB:1D:AD:DB:44:12:0A:DA:09:5A:1B:4E:44:18:4F
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8c:fe:d8:2b:61:d8:c4:70:5a:66:64:9d:f6:c2:9d:03:24:
4a:86:89:94:c5:c5:a3:6a:c2:64:ca:d4:36:96:4f:1a:f9:65:
a5:0d:c5:59:42:d5:5c:5b:8d:e9:48:db:63:65:e0:f2:97:94:
f1:d7:3a:0c:84:07:b4:ac:fe:35:28:2e:03:d8:d0:e2:79:7b:
51:ff:c3:a6:af:93:23:62:da:33:89:c3:ef:09:75:23:1a:d5:
91:21:b3:89:42:92:1c:bc:88:32:af:09:bc:ce:29:b8:25:23:
56:80:65:83:8a:23:eb:83:a8:8b:3d:b1:37:3b:b5:2d:c6:1d:
7b:a8:8e:e9:fb:c5:75:0b:39:77:f3:28:fc:6c:41:92:91:76:
25:2c:c3:1f:18:e0:0a:e7:a4:a0:9f:be:38:c1:21:1d:95:1e:
d3:1e:f7:5b:5d:6a:4d:56:c6:52:be:3c:78:21:a2:e9:4b:09:
f3:6e:aa:40:8d:d3:93:88:7e:17:7d:af:3c:d9:74:97:16:08:
47:cc:7e:83:34:8f:ff:9a:96:79:cd:ab:f8:f2:3d:1f:0d:2d:
90:a1:0f:ee:f5:6e:79:f6:5b:90:c2:73:03:f4:1b:d1:34:b5:
07:2c:8b:ae:24:ff:28:e5:db:2a:4f:ad:df:f1:93:a6:3c:ed:
3a:a0:12:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:53 2025 by rpki-client