Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: KkzRB+DPfi75/a9FkNN/rFcPbPHtwCGWHI60qmU43ak=
Subject key identifier: C4:84:A1:96:26:AE:4E:CD:BA:D1:00:CD:31:5D:BE:D1:D3:72:CA:C3
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 01988DA1ACBDB209F189A8CD8FED000DF6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 07:00:39 +0000
Manifest this update: Sat 09 Aug 2025 07:00:39 +0000
Manifest next update: Sun 10 Aug 2025 07:00:39 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: ZX2D/SW9Wxst/eGDYWyQWtUrRvrHg+BWuucOkuydqHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:ac:bd:b2:09:f1:89:a8:cd:8f:ed:00:0d:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Aug 9 07:00:39 2025 GMT
Not After : Aug 10 07:00:39 2025 GMT
Subject: CN=c484a19626ae4ecdbad100cd315dbed1d372cac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:c7:f9:8b:9f:b2:98:89:ae:b1:fb:7d:e6:
7e:52:fa:c0:37:3d:bb:f2:d8:f6:47:1d:71:17:4b:
e8:1d:8e:1c:50:9a:b5:d3:16:a1:8a:9c:d0:4e:b4:
c3:4d:64:36:63:0f:41:ff:cc:3b:4a:6e:1a:d4:9a:
2b:56:5e:34:5f:94:a0:37:21:a5:c4:69:97:73:3c:
5f:6b:5e:75:0a:d7:39:e7:0e:df:9a:75:ec:c3:23:
a6:34:f7:3f:b3:12:b5:5c:83:a9:4c:b6:22:32:0f:
0e:93:6c:36:b8:fc:b7:93:ea:44:8f:1b:46:d9:df:
ca:7d:ce:09:40:ae:38:29:11:02:ba:47:eb:da:6f:
17:3a:dc:c5:6c:6c:dd:f0:30:c0:08:7d:f9:36:fd:
47:f8:03:5f:91:3f:4c:34:26:96:b5:10:f3:b1:4a:
bd:8d:d2:a7:c8:83:45:aa:5f:fb:6d:f7:91:26:73:
5f:0d:4e:d2:fd:17:1a:0a:07:cb:94:39:5e:0b:63:
d6:7c:d4:b7:84:98:ee:78:db:b6:66:ca:b5:10:b6:
5e:c8:d6:99:31:e1:95:6d:ba:de:74:e2:e2:0c:d6:
14:38:f9:ad:5b:f5:fc:01:c6:ef:6a:7d:10:24:8a:
b1:a2:7a:c5:d1:ad:52:0d:38:72:0f:18:c5:c5:1e:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:A1:96:26:AE:4E:CD:BA:D1:00:CD:31:5D:BE:D1:D3:72:CA:C3
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cc:2f:76:e7:80:f3:63:77:25:78:a8:8d:5c:63:96:cb:b5:
71:40:17:9e:7f:0b:f6:83:b8:ee:ca:d4:9c:b8:34:2a:40:ce:
4f:38:9a:4e:8b:b2:2b:06:aa:84:54:49:cf:c9:ff:2c:9f:57:
94:82:d5:ca:73:fa:9f:1f:23:bf:c7:78:a0:62:b4:90:e7:f4:
41:94:94:a9:81:e5:de:ea:2d:a2:80:ab:1e:21:bd:f2:c2:af:
2a:18:23:cf:14:47:b3:8d:bd:6e:b1:21:21:dc:68:9a:0b:ee:
08:91:85:cc:be:c8:cb:37:95:8e:10:20:78:7b:a4:ca:22:f4:
bf:35:f0:2c:06:8d:57:d2:4e:0a:d8:b3:5f:35:39:8d:50:79:
ef:bc:b1:dc:aa:67:1a:a7:11:ac:4c:b4:04:0e:6c:43:44:a1:
90:2c:a7:78:41:4f:3b:d5:09:05:1f:86:5f:4f:00:eb:35:29:
d4:1e:82:eb:18:c5:41:f9:1f:4e:3a:37:a1:7f:c3:09:52:b5:
96:a5:df:3c:47:48:df:e9:c6:44:00:c5:18:23:53:dc:c2:a5:
28:46:03:7d:ca:82:4b:5b:7b:10:31:22:bb:79:24:82:fd:ee:
dc:e2:18:b2:7c:8d:f7:41:4f:6e:e0:b9:b7:8e:4b:dc:d5:d8:
cf:4b:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:32:40 2025 by rpki-client