Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: IwY/O+1GHs6FfAWgjMPcLv27UT0stsUwLWk0r0tNiwc=
Subject key identifier: 33:E6:C2:BE:ED:D8:19:CF:E2:D7:24:00:A7:06:F3:71:FF:E1:13:46
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 0198808B8C0548BA0310B631069267B7D2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 01AE
Signing time: Wed 06 Aug 2025 18:01:25 +0000
Manifest this update: Wed 06 Aug 2025 18:01:25 +0000
Manifest next update: Thu 07 Aug 2025 18:01:25 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: 7yNrcdNC+g1sW+xLbvmMHvnknB28rQg2DDQ8xgY7uaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:8c:05:48:ba:03:10:b6:31:06:92:67:b7:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Aug 6 18:01:25 2025 GMT
Not After : Aug 7 18:01:25 2025 GMT
Subject: CN=33e6c2beedd819cfe2d72400a706f371ffe11346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8c:1e:f1:fb:87:34:52:51:39:ec:60:c7:62:
83:f9:aa:13:ad:a4:74:7b:81:bf:5b:86:89:14:6b:
dd:03:9c:76:fa:b8:33:dc:49:13:d6:76:f0:f5:a3:
7c:1a:42:20:f1:6b:bf:c0:c5:93:57:f2:c1:e6:ea:
91:d7:bf:97:7f:b9:cc:b0:70:64:6c:1b:a3:33:e3:
4e:87:fd:4a:37:a1:a8:36:33:59:15:f7:e8:78:87:
3f:be:b1:09:9b:9e:9d:7c:f3:af:2e:d4:b8:6d:55:
69:36:f7:4e:e3:13:0d:0e:63:ee:5a:f4:e2:71:f4:
28:5c:5a:51:7e:98:c4:24:68:9f:7e:17:2f:c6:e3:
ed:b7:60:0e:b1:ec:e9:15:96:06:6a:8a:a6:61:b5:
fa:db:69:4b:06:5c:ee:ac:eb:c5:17:f2:67:7b:f4:
dd:3a:99:7f:fe:6f:0d:38:82:8a:1f:09:91:1a:ca:
2c:b8:d0:4c:8c:22:3a:c4:e7:cc:06:1a:5b:34:e3:
bb:be:13:b6:ee:23:8e:64:54:42:be:bf:c0:f8:43:
12:c1:34:dd:e0:f6:cd:31:6b:3a:60:32:d5:8e:42:
32:50:d5:0f:57:36:ed:c9:40:84:0c:b5:92:7d:6c:
b4:3f:69:15:bb:4c:ac:c2:d8:b2:ff:52:c9:f5:48:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:C2:BE:ED:D8:19:CF:E2:D7:24:00:A7:06:F3:71:FF:E1:13:46
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a7:c5:73:49:bb:2b:ce:30:fb:3c:8d:b6:eb:9a:08:63:e5:
b8:a9:5f:da:a2:b1:2b:11:e7:be:7f:29:35:77:41:51:61:47:
07:01:e4:21:44:2d:8a:3e:f4:70:06:83:7e:f6:14:73:a8:d8:
12:1d:6e:a8:c9:9f:18:11:19:46:e0:09:00:13:6d:58:97:7b:
59:91:8b:87:a5:c5:07:2b:d3:c2:38:b4:8c:59:11:89:4f:d2:
e4:23:79:ab:8c:d9:8f:34:75:4e:7c:58:30:ca:d3:da:ef:b7:
4b:0f:7c:6d:55:83:5a:a9:64:82:1e:c3:83:fd:51:21:ca:95:
90:16:08:25:21:da:d6:05:11:86:6e:c3:ea:77:a2:e2:c0:bf:
c7:62:fd:16:14:12:58:29:f5:0f:1a:9f:5c:5a:4f:8a:14:36:
fd:5e:15:58:c6:63:a1:54:f6:d4:26:67:a2:3c:ee:f6:6d:79:
62:ed:b5:f6:dc:0c:fe:61:c3:91:73:96:64:15:df:cd:cf:a2:
ee:e1:71:29:48:15:fd:88:81:d7:81:ca:22:ba:f8:5a:87:00:
b0:3e:67:2b:ba:47:52:d8:23:7e:a8:9e:44:db:70:74:ca:f4:
da:58:9c:45:59:17:6d:fd:9b:11:4b:5e:ef:3a:1d:59:fd:61:
11:8c:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:38:53 2025 by rpki-client