Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier: 3A5+ntjrVg66rVSTtZ/+o9VyDcLhBxOVFBeUYv8krqM=
Subject key identifier: E1:74:6E:92:DD:E8:CF:33:EF:DF:97:0B:94:E7:8B:31:BE:EF:56:1E
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 0199228C2E8737EB5BC7C5E2BF0FC0FCF910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number: 1447
Signing time: Sun 07 Sep 2025 05:00:36 +0000
Manifest this update: Sun 07 Sep 2025 05:00:36 +0000
Manifest next update: Mon 08 Sep 2025 05:00:36 +0000
Files and hashes: 1: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (hash: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=)
2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: NlaBttqGX3N5OSAlFkCq/e/SHcqtVJ2kSF3i7j/lyj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2e:87:37:eb:5b:c7:c5:e2:bf:0f:c0:fc:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: Sep 7 05:00:36 2025 GMT
Not After : Sep 8 05:00:36 2025 GMT
Subject: CN=e1746e92dde8cf33efdf970b94e78b31beef561e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:83:d8:c4:66:6e:3e:e4:c8:3c:30:06:d4:
94:fa:5b:c0:91:15:2f:a6:06:4e:69:aa:d9:07:ad:
6c:94:53:8d:37:73:35:e1:e8:88:9e:94:cb:5b:44:
d8:46:d1:60:47:33:7e:1e:32:3e:80:9d:ef:4b:7d:
d8:f3:20:d3:8e:d9:e8:35:3e:9a:37:02:86:88:01:
14:4f:9e:57:6c:47:a7:fd:3b:9f:3f:56:55:cd:af:
77:3e:20:ff:d2:33:6e:01:23:67:5f:f1:64:e4:af:
29:50:34:4a:d3:37:85:71:8e:17:74:fe:53:e3:63:
2c:c9:6c:c1:11:2c:a4:d4:69:30:dd:50:61:99:2d:
6e:e6:e0:69:93:97:9b:b5:6f:79:72:31:c3:19:fa:
49:b2:77:c0:ff:f8:d6:e3:9d:a5:f7:8d:77:ca:e4:
b0:85:78:cd:7b:cc:b5:ca:7a:9d:6e:83:bb:4b:ab:
32:c3:a6:2f:3f:18:f8:d0:12:cc:1c:a5:5c:c4:93:
77:5f:43:76:50:06:7b:07:23:f6:cb:80:02:c4:a3:
12:bc:c2:ef:8d:5c:1e:1e:78:8d:66:28:90:30:1a:
4c:4f:c2:5a:a7:ce:86:5a:23:10:82:f4:33:89:b1:
ef:b4:22:9c:96:c2:fb:27:55:b5:8f:a7:0c:4d:35:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:6E:92:DD:E8:CF:33:EF:DF:97:0B:94:E7:8B:31:BE:EF:56:1E
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3a:bf:3e:64:ff:9d:7b:e5:a3:14:ba:e9:a6:8c:4d:39:e4:
cf:1e:cf:d5:c4:4d:43:b4:e6:51:14:96:8d:22:62:8a:6d:c4:
86:8d:99:2a:95:db:f8:0c:89:e9:ae:e6:59:31:1d:16:6d:c7:
58:8d:ed:d1:dd:7a:2e:60:9c:62:8f:9e:0c:59:8f:3f:18:08:
a3:c0:ad:61:8f:6a:37:f0:16:36:c0:b6:0c:fa:a8:e2:3a:5f:
0e:0c:9a:f2:bc:20:39:94:35:f1:ed:0d:f2:01:7a:84:95:37:
1c:fa:a7:41:f3:e6:13:78:11:ed:7b:3c:dc:c2:2b:0e:04:1b:
f1:72:dd:44:98:53:d7:09:bc:a2:72:d6:68:28:80:f5:25:62:
20:48:94:70:63:37:f9:87:73:df:3e:07:7b:ec:1b:ea:a1:f9:
37:b0:85:50:90:09:5f:10:56:fa:1a:3c:9e:84:36:f1:4f:07:
5e:cc:e4:0c:8c:db:58:03:09:c8:b1:87:7e:eb:5a:36:6e:f4:
57:6f:c0:5e:53:49:a8:0d:81:6f:59:dd:9a:94:00:ac:d7:7f:
7f:3f:d7:09:c8:40:d8:22:5a:ee:97:5c:16:0d:94:b2:5b:60:
55:62:6f:10:c1:bf:15:62:85:2e:bd:64:1f:47:52:60:ae:21:
44:79:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:40 2025 by rpki-client