Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: C4OH/I/jjfNRYqrtpUQDf3zRTXycKegQvkwTc0A4W+o=
Subject key identifier: BF:2F:2D:A8:AE:32:9A:A0:73:41:62:94:5E:F8:98:8D:67:41:DD:C0
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 01987BD2A6E9360553FA2E472220CC950A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0A41
Signing time: Tue 05 Aug 2025 20:00:59 +0000
Manifest this update: Tue 05 Aug 2025 20:00:59 +0000
Manifest next update: Wed 06 Aug 2025 20:00:59 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: rmkvtar2YhouecR3eiSRTSaJnU3fhS0Q0TQlHiCuMlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:a6:e9:36:05:53:fa:2e:47:22:20:cc:95:0a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Aug 5 20:00:59 2025 GMT
Not After : Aug 6 20:00:59 2025 GMT
Subject: CN=bf2f2da8ae329aa0734162945ef8988d6741ddc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:72:e0:42:73:33:fe:80:73:b6:38:d2:e0:
80:fb:90:2d:95:db:5f:b1:78:8f:6d:cc:9a:0b:00:
cc:e8:2d:1d:13:8a:60:a2:c9:5f:b9:64:e9:6c:e7:
2e:83:27:b4:50:93:8c:4d:42:ca:88:14:b3:b7:01:
87:7a:94:6c:b4:f2:ca:9b:a4:40:4f:d0:59:8b:b5:
15:60:a7:a0:fe:1a:c2:10:1b:9f:7f:a3:f1:d7:3a:
2d:65:3a:bf:3b:45:76:0b:06:5e:a0:e6:4d:bd:be:
22:9b:0d:b7:0e:22:6b:35:49:d9:b8:f2:f7:8b:7d:
ff:d4:d4:c5:f9:6b:27:8c:03:75:29:c3:37:1a:94:
41:59:bf:92:87:01:b9:5f:b5:01:7e:e9:c7:50:3c:
44:7f:40:d7:06:25:cc:23:89:8f:d3:84:5a:2f:16:
0f:41:82:3e:7c:27:ff:bd:7b:f2:cd:79:7b:80:8b:
a2:2b:66:86:d6:f4:46:64:19:fa:2e:ab:81:87:cf:
cb:ff:44:5a:97:ea:5b:fa:95:85:3d:77:db:0b:ef:
13:5c:07:7b:db:ae:61:33:38:09:8e:57:42:c9:b8:
e1:b8:4f:1e:4c:ac:13:25:40:e8:d8:06:32:06:68:
3e:f6:2e:75:e9:d1:26:93:49:c6:09:52:d9:c8:f6:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:2D:A8:AE:32:9A:A0:73:41:62:94:5E:F8:98:8D:67:41:DD:C0
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:83:da:08:6b:b1:e1:99:90:08:26:08:80:51:7d:e8:e0:73:
9d:74:18:f1:55:04:e8:0d:bd:05:36:ec:0b:d1:30:86:51:10:
32:ce:b6:ff:91:26:31:8e:9a:97:af:ca:cb:00:28:42:97:ff:
bc:4c:92:65:7c:fb:7b:07:54:a4:d6:34:02:8f:f0:42:8a:a0:
3e:45:32:38:db:a3:c2:cc:2a:0a:df:36:1b:29:a4:30:4c:69:
b7:b2:b0:ad:ac:61:fc:5a:9d:5f:de:79:47:9e:70:2a:5c:77:
9a:0e:3e:79:78:a6:de:8f:78:54:42:87:49:09:7d:dd:66:1a:
63:56:fd:85:64:68:29:03:f8:e1:a2:6b:62:18:45:a7:f1:54:
60:9f:bc:87:b7:f8:ea:12:18:78:c6:3d:37:38:1b:07:93:ad:
14:95:3f:08:cd:78:50:de:23:bc:27:c7:14:0a:d1:5c:4f:7b:
40:43:7b:cf:d2:ed:c0:16:97:03:93:ab:32:af:bc:42:2f:55:
76:0e:16:11:fa:40:c9:28:16:00:df:b2:ac:10:0e:18:31:c3:
a3:a3:98:79:16:cf:ca:4d:9b:79:1e:6b:81:52:da:f9:7f:03:
f0:c4:7d:c1:08:bc:9f:68:69:c4:3c:c9:26:fd:5b:d1:ad:09:
45:3f:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:44 2025 by rpki-client