Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: xbI0mxnxMCYFViKi96Bc0ogh3SJ7W+iGR5k1uN3GLWM=
Subject key identifier: 23:2D:99:B7:54:3C:38:EB:31:13:A0:86:14:00:F4:EF:03:A7:55:CA
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 019933EE707E9047E6CDA0376D421F087178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 14:01:28 +0000
Manifest this update: Wed 10 Sep 2025 14:01:28 +0000
Manifest next update: Thu 11 Sep 2025 14:01:28 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: Rtn1ohA+ugAT4gu80miyjtQesAOSTeeGf9N3fYgGY0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:70:7e:90:47:e6:cd:a0:37:6d:42:1f:08:71:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Sep 10 14:01:28 2025 GMT
Not After : Sep 11 14:01:28 2025 GMT
Subject: CN=232d99b7543c38eb3113a0861400f4ef03a755ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:1e:ab:29:84:1f:6b:4c:29:48:80:2d:33:
5b:81:ff:3f:e7:f1:23:ab:74:9e:5d:30:af:3c:55:
64:30:e7:eb:2c:cc:a3:9b:c4:18:35:5a:26:4f:1a:
e7:61:b8:72:b8:e9:f0:fb:bc:4f:0d:fd:7b:a3:c8:
84:4b:a9:ff:11:e1:29:2e:43:c7:7b:65:5d:2f:8b:
57:92:37:e2:e6:78:18:73:50:0e:9f:cc:9b:7f:96:
ed:cf:8e:94:f0:85:7a:d9:04:d1:6a:cd:27:cb:a1:
a6:05:91:3f:fe:1d:cf:26:41:f0:5e:0a:13:28:7f:
fc:7a:c5:71:6b:85:fa:59:76:66:1b:92:ee:ed:aa:
db:a5:da:d8:29:bd:12:ca:14:0f:f5:92:04:c5:af:
41:f2:76:3a:87:52:0b:63:33:5d:cc:5f:b7:d4:70:
43:fb:50:1a:29:01:9b:64:ea:5d:78:12:61:2e:be:
ee:69:f3:14:38:07:d1:4d:a5:eb:e1:56:7a:f7:ea:
c1:95:36:73:e0:c8:ab:88:cb:7a:54:b5:cb:25:11:
8e:eb:e8:6f:7a:c2:e7:10:15:8a:a7:ea:7a:9a:5d:
68:3b:ed:43:21:a3:a0:0d:7d:e7:c4:4e:ac:43:a7:
d8:75:58:d6:04:1f:42:7c:9e:b3:48:7c:d9:4a:3d:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2D:99:B7:54:3C:38:EB:31:13:A0:86:14:00:F4:EF:03:A7:55:CA
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:12:c4:8a:ab:df:61:0b:36:44:61:11:e5:75:cb:ae:f4:
be:2d:b9:aa:69:be:ee:43:a7:33:dd:f7:09:67:88:01:31:c3:
05:b1:dd:31:4f:cc:51:e7:8c:d0:03:ed:bb:61:ec:93:08:c8:
e7:87:26:57:be:c2:6a:a6:05:e7:1c:92:80:16:dd:0e:a1:93:
50:ce:88:2f:0a:18:21:b5:9b:eb:1f:aa:e2:3a:2f:cd:0c:99:
24:3d:34:1f:d8:fc:6c:2b:ec:3e:9a:c0:46:8c:84:78:a5:b6:
e3:2e:15:c0:be:84:9c:15:c1:e9:7b:84:e2:37:68:e9:1b:34:
24:1b:66:3c:57:df:b4:5b:0a:df:0e:74:77:3a:be:58:6c:99:
5f:7b:4c:65:e4:b0:83:0a:c2:7b:40:4e:c9:30:b9:9b:69:d8:
9c:01:43:55:c2:48:33:01:a3:4e:9a:86:a2:47:74:7a:09:ea:
83:af:dd:ae:49:d5:ca:d7:9f:61:de:7b:7c:59:55:53:aa:2e:
8c:f3:5e:b9:2e:17:c6:07:65:f7:a5:15:51:ab:cd:25:a2:19:
90:4e:52:8c:03:da:2f:28:0c:29:7d:29:ce:be:b9:87:31:2a:
29:17:ea:e9:da:a6:dd:bb:64:27:38:13:6d:3b:86:66:29:ff:
00:ca:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:49:53 2025 by rpki-client