Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: 3JiHQW/bAVcMIFQK5jd9DZpuY0FKdSJWtwpCz3NlRWw=
Subject key identifier: 74:8E:D8:2C:21:BC:1B:07:C6:1D:FA:BE:A8:F5:D3:C4:3F:D7:E2:9B
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 019895C90B168DC2D71920513D2B74538E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 1071
Signing time: Sun 10 Aug 2025 21:00:37 +0000
Manifest this update: Sun 10 Aug 2025 21:00:37 +0000
Manifest next update: Mon 11 Aug 2025 21:00:37 +0000
Files and hashes: 1: _J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa (hash: ieQbUeSA/ZnjcXq9UchtsLIMyHxTCALoQIa6C87a8+U=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: CV8xKGMFfAAU5hEOVfM8bR9QCrHmT7F3B1EQnsG+ZFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:0b:16:8d:c2:d7:19:20:51:3d:2b:74:53:8e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Aug 10 21:00:37 2025 GMT
Not After : Aug 11 21:00:37 2025 GMT
Subject: CN=748ed82c21bc1b07c61dfabea8f5d3c43fd7e29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:d0:8a:a3:51:2c:46:d4:f1:d8:c2:c2:80:
af:63:ab:02:f2:ad:11:bc:d6:3b:4e:1b:12:ca:af:
da:85:70:b9:e3:c0:35:50:f1:15:2a:6e:72:66:a2:
26:fe:de:90:4f:ab:49:3b:2c:2a:cf:8f:d6:7f:65:
43:29:93:6b:25:e7:d3:8b:27:cd:98:75:02:90:ee:
e9:9f:c6:17:08:d6:a4:f8:ff:d8:fc:85:f4:25:10:
cc:2d:83:47:11:6c:bb:a4:57:a3:26:c8:e1:0d:86:
ae:ff:4d:5a:3e:20:77:9e:2f:8c:54:53:85:ce:18:
5f:74:16:9c:0f:67:d9:69:43:f7:af:53:57:76:c7:
70:db:45:94:be:4a:8f:fe:f2:18:10:7f:4d:5e:3f:
d7:12:22:0c:39:86:e8:8f:1e:56:a7:82:cb:58:5b:
10:e8:aa:a7:9b:b1:b7:3b:b9:9c:85:2d:a2:d3:b6:
23:10:33:e7:4e:89:c8:27:a8:d6:89:a5:41:f1:93:
bf:0b:70:86:8e:35:b1:fa:18:40:0f:e9:f0:25:52:
f4:a8:77:b1:b4:bd:76:e5:49:db:a3:f7:f4:b3:d9:
61:f7:b8:f5:b4:18:c1:b4:75:7a:23:19:2a:5a:74:
1f:7f:06:b4:20:da:20:35:a4:57:93:65:d2:ae:42:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:D8:2C:21:BC:1B:07:C6:1D:FA:BE:A8:F5:D3:C4:3F:D7:E2:9B
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:40:ce:3e:4d:7f:33:82:10:06:4a:a4:af:db:93:c0:c5:ce:
26:3d:f6:e8:2c:ba:37:05:db:69:2c:51:91:6e:59:90:78:f3:
b7:41:8d:80:2b:7c:93:be:6c:7b:93:ea:0f:38:db:00:75:c2:
58:dd:fd:45:80:02:29:0d:60:e4:f1:e2:ab:0c:ad:3d:af:85:
e4:8f:f2:86:4b:04:62:9e:90:3c:29:34:0e:94:15:af:18:83:
1e:66:c6:e5:eb:4b:b8:3b:5d:79:57:99:c3:0a:89:0d:0b:9d:
6e:74:50:a1:c6:32:3a:32:3b:b0:b8:b1:a5:f1:1a:33:34:59:
8b:f0:4c:dd:4f:1e:b3:79:10:e3:c7:3c:7f:6e:40:e2:43:0a:
29:aa:c6:f7:ee:38:41:bb:38:79:ac:3d:dd:05:a8:1a:ec:f5:
d2:ac:78:03:99:ed:52:0a:60:55:c1:ba:b6:80:c5:b1:21:11:
37:2d:f3:e6:f6:01:56:b0:7b:cc:83:fe:3b:c7:7a:f1:55:e3:
a1:8c:27:b0:30:bc:94:5c:71:2e:e9:35:fa:ec:fd:f1:ab:da:
90:2e:30:06:ae:04:74:55:7d:5d:55:83:3c:11:05:09:7c:02:
67:be:46:53:fb:85:10:be:9d:dd:1b:c4:ef:36:4f:dd:e6:98:
31:77:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:43 2025 by rpki-client