Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: OEa3AK0wWepFX/3mFQeIJiaP4rqfLmQFT7wLK+xYg5Q=
Subject key identifier: C2:E8:0D:E2:CA:CF:60:42:8C:BA:2D:9B:5A:3B:ED:11:D5:85:B6:8B
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 01987E9CCF1D27C8B102FE485C00BDD8511D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0D2A
Signing time: Wed 06 Aug 2025 09:01:02 +0000
Manifest this update: Wed 06 Aug 2025 09:01:02 +0000
Manifest next update: Thu 07 Aug 2025 09:01:02 +0000
Files and hashes: 1: BRx8YXqDNB1GFUFqyh6QeZ00QCQ.roa (hash: o3eKIyn+wElbYPzG51u2wAS6yMUVN8sHDDwj5Rm2E/Q=)
2: TDNldyoVb4xBkRrsANEwRdX0Uqs.roa (hash: wQFfix2hzJo3LB++Adj8kc2QXPUVVh12Ff6IX0c9r8w=)
3: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: 54XVlvhC87SSDrAQnk5D/ETDYJFRpQBLV/SxBsDKwuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:cf:1d:27:c8:b1:02:fe:48:5c:00:bd:d8:51:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Aug 6 09:01:02 2025 GMT
Not After : Aug 7 09:01:02 2025 GMT
Subject: CN=c2e80de2cacf60428cba2d9b5a3bed11d585b68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:86:d9:d2:7e:85:0c:88:f8:90:0e:de:ef:
71:18:05:37:9c:fb:6d:03:6b:42:b5:f4:75:a2:35:
fa:0a:d7:93:80:43:24:37:a1:1f:79:d2:c6:9c:ca:
aa:0a:ed:97:3b:fd:ad:1a:49:a5:eb:f2:19:34:5a:
3f:bf:d5:7b:ac:8b:c2:ee:f3:ab:04:c7:84:d9:34:
97:5b:97:60:6d:d5:ed:d1:62:fd:22:b6:17:ce:1e:
e1:62:b2:62:e6:54:97:ae:74:84:e1:22:d0:9c:80:
f1:43:a9:38:00:3d:d9:78:30:d3:4c:a8:81:ab:08:
ec:62:ad:9d:2f:5d:5e:8c:85:20:56:79:ce:97:9b:
7e:ba:84:51:c5:dc:8e:7a:4d:18:34:d2:32:40:3c:
3f:d8:92:96:7d:c9:82:09:28:cc:ab:ff:02:78:4d:
2c:af:5a:d5:4e:bb:0e:81:3a:75:7b:d9:3b:f3:35:
6a:55:10:bd:68:1c:51:1f:42:39:34:30:78:df:5d:
1d:81:8a:dc:2d:e1:d2:04:5f:8f:48:c1:61:5d:98:
76:19:48:cc:81:65:b9:bc:44:49:37:98:a3:01:7e:
02:a9:dc:a5:85:85:3e:80:a2:33:62:df:09:45:71:
df:57:11:71:21:73:f1:8b:a7:d0:62:7d:32:4a:b4:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E8:0D:E2:CA:CF:60:42:8C:BA:2D:9B:5A:3B:ED:11:D5:85:B6:8B
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:11:71:73:28:35:7c:eb:ad:6d:99:d0:e3:5c:b6:37:2f:b6:
ed:8b:37:b1:a5:b9:2e:e8:9b:54:1b:fd:55:8b:4d:a8:ca:94:
1b:81:a8:c3:5d:f3:05:b4:b1:e6:b2:13:dc:0c:58:16:1d:04:
69:3f:47:9c:15:68:e8:4a:e1:7f:6e:a7:36:e4:ad:a0:9e:26:
37:a6:22:7c:da:4a:17:1f:04:e9:05:ac:ea:6f:ec:e0:89:83:
ae:c5:16:55:17:7a:58:f6:a6:8c:2e:63:12:63:66:3f:4b:83:
f9:f2:0f:1d:fa:1d:35:d1:32:58:a9:39:bc:af:c5:07:47:99:
df:d2:3c:a1:4b:b9:6a:72:f7:29:b3:be:2d:2e:ef:99:b9:15:
e6:ec:72:8f:bf:c5:89:18:1a:26:e7:4d:aa:6a:28:76:8a:8d:
38:96:ac:eb:cd:0d:2f:74:f8:52:59:91:3f:7f:50:99:95:15:
ed:1d:9e:fd:85:84:9a:6c:ba:ca:3e:94:f2:92:4f:36:ad:5e:
82:03:cb:f0:26:44:e1:33:5e:92:7b:30:ea:09:7e:09:4a:a2:
22:c9:c9:01:0d:52:8b:60:2a:6e:a9:66:b6:2e:7b:b8:6a:ee:
fc:15:78:9e:75:a1:c9:65:e6:22:41:85:a6:74:65:8d:c8:8f:
e8:35:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:28 2025 by rpki-client