
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json)
Hash identifier: MdYMWGEsGwuRFvSKkMMsNikPUFG//5+CnT5DLxIXlt8=
Subject key identifier: F1:A2:C2:12:40:CA:98:90:35:E7:BC:22:F9:DB:76:2E:82:A5:35:FD
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 01987A8983DF75A3DBFFBC2A35203E32E5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
Manifest number: 1241
Signing time: Tue 05 Aug 2025 14:01:29 +0000
Manifest this update: Tue 05 Aug 2025 14:01:29 +0000
Manifest next update: Wed 06 Aug 2025 14:01:29 +0000
Files and hashes: 1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=)
2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: mU/h9Z4+oFDlZ4WtqBb01M7VCi2l+djOt2SFaRF8MxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:83:df:75:a3:db:ff:bc:2a:35:20:3e:32:e5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Aug 5 14:01:29 2025 GMT
Not After : Aug 6 14:01:29 2025 GMT
Subject: CN=f1a2c21240ca989035e7bc22f9db762e82a535fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:29:de:bb:05:23:31:5b:c7:58:ed:d5:27:a2:
7b:85:e4:01:96:58:6b:60:4d:7e:1d:fb:b2:ee:3c:
c6:4d:97:db:4a:92:b3:f8:2c:16:97:f0:08:c9:3c:
71:4a:54:1d:9e:b7:36:f4:e6:7b:d7:7a:23:96:ab:
d4:91:f6:e7:39:8a:0f:0b:a6:73:6a:af:46:aa:87:
3a:11:bf:0e:db:e2:9b:b1:7c:58:e1:20:eb:fd:a3:
42:40:23:fe:87:d1:17:54:6f:a7:b3:a8:bd:f9:0b:
8e:a8:c7:06:0b:9f:ec:13:f8:b3:c6:7b:d9:b1:99:
2d:13:c0:9f:83:4a:4e:1f:5a:f6:6f:39:fe:59:fd:
63:02:d2:74:5b:52:2b:18:8e:3a:4b:78:15:05:cb:
42:07:2b:97:c6:21:92:45:ff:10:38:24:f9:1a:e4:
9c:bb:44:c5:0e:a6:6e:73:16:e1:1c:09:1d:69:71:
7a:cf:99:72:52:c3:f5:03:72:86:83:b4:9d:66:40:
c3:ff:a4:f1:8e:a1:3e:e9:00:66:12:b5:97:4b:69:
fc:50:cc:c1:ef:bc:0c:d6:75:ea:b2:14:79:96:17:
02:12:13:69:ac:d4:ee:e0:13:68:71:16:d7:18:65:
88:74:d0:0a:49:0f:9e:23:6f:13:92:0b:c6:ad:d4:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:C2:12:40:CA:98:90:35:E7:BC:22:F9:DB:76:2E:82:A5:35:FD
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:4e:53:2d:43:f3:f1:e8:54:53:cc:04:4f:86:2b:32:a1:
0c:2a:b3:43:fc:cd:81:d8:58:cf:19:5d:93:ad:bf:1e:63:ea:
8d:f8:80:c7:14:4e:7e:dc:3d:01:a1:6c:3f:41:a7:ba:4a:91:
c7:bf:94:61:ba:4d:b4:ad:9c:12:a2:99:07:31:3e:1c:65:8f:
ac:ee:cf:a4:8f:c1:6a:12:33:94:db:60:94:ec:a3:a1:67:d2:
93:e4:01:71:df:41:ba:2a:10:3d:8b:f2:ef:60:a6:cc:a7:c3:
68:3c:dc:55:f3:43:23:7e:44:90:51:fe:ef:51:c5:c2:3d:c6:
74:7b:7b:f7:26:78:18:18:19:9c:fe:29:b6:d8:17:17:a2:9b:
19:5c:46:4a:b7:a5:94:c5:87:66:00:8d:2b:62:b0:da:49:7e:
96:c8:dd:8b:85:b6:8d:29:b9:19:27:1a:0e:c5:3e:bb:5b:b5:
0d:7a:4d:c5:0f:d3:3c:81:5c:9b:08:ec:fa:c4:35:75:9b:68:
7b:71:fc:ff:11:b0:9c:b1:3b:2c:dd:d7:22:98:12:3f:10:26:
dc:48:94:f5:f9:32:4d:4b:ea:24:6d:27:44:62:8e:49:37:2c:
5d:22:4b:aa:c3:c4:9e:19:3b:6b:0c:3e:60:36:96:9c:2e:88:
33:3c:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:55 2025 by rpki-client