Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: Q+DkUg/o945U/vO0bF2JPBKvvkWRbKB9cvmBc94su8g=
Subject key identifier: D4:3B:17:C4:B4:A5:C0:25:00:B0:FD:8E:9E:34:41:11:4C:68:0D:FB
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 019872CFA872986B40FCE0F51D2369E6E21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 14F4
Signing time: Mon 04 Aug 2025 02:01:08 +0000
Manifest this update: Mon 04 Aug 2025 02:01:08 +0000
Manifest next update: Tue 05 Aug 2025 02:01:08 +0000
Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: cRGilQU8lf+JnowEBKDAfMlvnPydAaCrFBDtzFZwLcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a8:72:98:6b:40:fc:e0:f5:1d:23:69:e6:e2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Aug 4 02:01:08 2025 GMT
Not After : Aug 5 02:01:08 2025 GMT
Subject: CN=d43b17c4b4a5c02500b0fd8e9e3441114c680dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:e0:d6:00:8c:0e:84:c8:5e:01:01:c1:c4:
f5:32:a3:98:a8:65:3c:35:4e:38:6e:c6:b4:18:75:
2c:0f:97:aa:97:08:47:e0:3f:bc:5d:80:ea:17:62:
85:50:18:58:5a:61:a6:55:f3:61:7f:f4:26:f9:0b:
1d:db:57:20:ae:75:fc:9f:38:ba:71:b4:37:da:da:
74:b6:fc:a9:32:87:0e:04:a2:74:ed:6c:0a:09:56:
f4:5d:60:1f:6b:a5:24:08:5c:6e:e6:38:09:6a:54:
f4:f4:7f:95:fd:9f:e2:9c:63:b6:18:be:28:fe:bc:
e3:4e:9b:04:47:ee:08:c4:1a:3d:41:e6:ac:14:4a:
11:01:34:d0:e0:70:d4:80:d9:e0:88:d7:21:32:31:
90:37:ce:96:fa:78:62:8d:3c:70:06:4b:b6:f1:a7:
c1:65:ed:38:67:c5:54:88:df:b2:71:06:4a:31:02:
95:b0:fd:21:32:b0:a2:9d:01:5a:45:d8:7b:eb:76:
ed:87:0d:c1:e5:b6:bf:c4:f0:07:4a:16:d4:25:03:
ac:99:43:d2:ac:8f:c2:05:70:a6:76:81:84:47:1a:
20:e1:16:ea:40:c3:f9:c0:d1:ae:74:15:2e:34:ba:
0a:b6:61:2e:55:d4:31:08:5e:28:72:10:55:04:18:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3B:17:C4:B4:A5:C0:25:00:B0:FD:8E:9E:34:41:11:4C:68:0D:FB
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:57:46:c5:77:38:10:e2:e0:37:96:dd:b9:1f:23:8a:0d:f4:
5a:91:9f:df:f4:7e:80:d9:68:67:c5:07:ac:93:21:f5:21:3f:
2b:3f:84:e3:34:b9:ce:49:77:2f:34:6f:c1:cc:4e:08:42:99:
4e:3d:78:d7:d8:32:70:64:bc:2f:51:c4:f5:03:50:c3:01:72:
e7:41:9f:3e:4a:93:b8:b3:fb:66:61:c4:2b:04:86:61:0d:5d:
77:90:2d:b9:6e:98:c3:6b:69:fe:b5:c1:60:78:8f:4f:71:c5:
14:78:f4:0e:35:cf:c9:0d:a4:32:f4:38:aa:83:f0:8a:1b:73:
c3:56:a1:7f:97:a3:2a:73:6e:9d:1a:78:6b:e8:3a:c6:f2:4d:
ed:d7:4b:ee:61:3a:73:05:b4:a6:8e:f1:79:57:5b:1a:96:8e:
63:00:96:dc:50:33:8d:89:40:b0:29:89:d7:85:b7:d4:3c:66:
aa:2d:41:95:ec:5b:4f:8c:0c:48:55:9d:14:84:d2:ba:36:14:
6a:2d:e8:a5:21:a5:6d:e9:d3:2e:31:5b:c3:86:8c:b7:58:63:
6e:7d:e8:f6:ad:ac:f9:2c:f9:96:f0:a1:14:07:08:d1:6c:29:
32:a3:c4:cd:e7:55:85:75:40:b9:cb:9e:75:c3:2e:6e:89:be:
c9:a9:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:33 2025 by rpki-client