Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier: KRHax3+Q87GZdpc7tP7ygK/WghlVRCu+rH6pwqcmLzM=
Subject key identifier: 3D:3C:9C:01:CE:57:60:EC:AA:BF:E7:4C:95:B7:71:59:37:36:A3:97
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial: 01989ECCB1C8AA25A66C9BB8A9A0B39665FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number: 0EF7
Signing time: Tue 12 Aug 2025 15:01:11 +0000
Manifest this update: Tue 12 Aug 2025 15:01:11 +0000
Manifest next update: Wed 13 Aug 2025 15:01:11 +0000
Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: yv00FikAHtt4wvWEKKwj1MtS1teFRhQXyRLb/jZdgYs=)
2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:b1:c8:aa:25:a6:6c:9b:b8:a9:a0:b3:96:65:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
Validity
Not Before: Aug 12 15:01:11 2025 GMT
Not After : Aug 13 15:01:11 2025 GMT
Subject: CN=3d3c9c01ce5760ecaabfe74c95b771593736a397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:24:5b:85:f7:e8:33:98:d8:9d:05:b7:49:
01:c0:5a:0c:b7:e3:f9:4b:88:9d:a8:93:c0:25:a5:
22:cc:8d:d5:9d:a5:d0:e5:a0:f9:bf:10:69:70:e1:
79:00:5d:4f:cc:00:60:ce:c5:27:b8:ac:de:29:75:
20:b6:ff:04:0f:90:24:80:cf:b6:a5:bb:85:fe:35:
f6:13:7d:5d:01:ee:d1:76:ae:d9:7f:75:72:a7:b2:
ba:ef:aa:32:cd:82:03:16:7f:7c:42:d9:74:d8:0c:
2b:2f:ec:9e:76:c6:a9:84:58:e8:e6:0d:53:46:09:
36:58:71:97:cb:97:a4:8a:e8:57:d7:08:df:ed:6d:
0f:3f:50:ec:f6:3d:c5:8f:f8:6f:b7:b9:ad:2f:e3:
e0:ae:bb:11:42:14:22:0a:a4:f3:39:51:fa:33:f6:
c0:2e:93:c9:bd:03:d0:75:ca:5a:40:75:88:99:f1:
fa:47:8d:bb:e8:f9:d1:94:97:21:60:74:78:37:59:
9c:0c:48:85:16:eb:e8:0b:3b:3e:42:d9:c8:73:2c:
ac:66:fc:24:aa:e3:e1:63:6b:8e:65:66:72:04:e4:
8c:67:0e:4d:3e:31:32:08:4a:2c:b2:e3:50:43:15:
84:78:52:60:93:ca:e4:f9:01:a1:fe:c7:2d:9f:e7:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:9C:01:CE:57:60:EC:AA:BF:E7:4C:95:B7:71:59:37:36:A3:97
X509v3 Authority Key Identifier:
keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a0:02:d3:31:4c:53:bb:cc:1d:62:18:6c:39:34:85:38:41:
79:1b:d0:2f:ee:99:a4:b2:fc:71:ef:e8:25:6b:02:be:f2:4c:
8c:79:d1:40:a7:72:8f:a8:e7:96:c8:13:01:72:87:b4:cb:ec:
b4:f4:5f:3e:9a:9b:7a:04:0b:1a:9a:c6:2b:35:04:a6:57:86:
34:a4:34:93:61:07:41:9b:d7:11:2d:c7:dc:e4:8f:b6:85:83:
e7:f3:29:a5:85:c9:59:42:b8:62:4d:71:87:b8:32:5f:68:f5:
52:ac:bb:06:7f:47:7c:c2:e0:94:e6:ef:07:02:81:f3:7c:3d:
92:2c:c6:be:74:2b:15:b5:93:e8:0c:bb:74:69:bb:b9:0d:4b:
09:3e:9a:f3:fd:8b:d2:b6:35:41:3f:c9:be:bb:35:35:8a:1e:
07:ad:03:f5:82:c7:00:03:f7:e0:81:53:1e:62:fc:8f:b7:5e:
81:ec:a0:81:16:87:b4:4a:dc:dc:41:e4:b2:1c:a0:48:4e:69:
6a:9e:6e:5c:a9:9b:6a:ea:46:ca:e2:b0:fb:00:87:d3:a3:25:
50:20:2f:89:a2:56:2f:ff:b5:68:c9:91:ff:3b:df:02:b4:04:
91:6b:58:a6:b4:4c:64:1c:1c:e8:93:b2:c4:ba:86:63:0e:dc:
11:c9:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:23 2025 by rpki-client