Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: BQe/atJpvGhpjYTwZjeyoi/m/O+lLttNEB1KCSq+A0A=
Subject key identifier: 2C:77:86:E9:98:96:69:1D:04:B5:94:E7:C6:89:84:7B:E2:EA:22:F8
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 01987418B3A0299DF488612D63C550D5F112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 0EF0
Signing time: Mon 04 Aug 2025 08:00:32 +0000
Manifest this update: Mon 04 Aug 2025 08:00:32 +0000
Manifest next update: Tue 05 Aug 2025 08:00:32 +0000
Files and hashes: 1: 1skXawq2SahvYTA2mnEOEbVR1u8.roa (hash: nHycrkajnYAr9VibtJNGtsv2Ftb47ENenxgpTd+DfzI=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: FjS8Y7J54v2exsDkQiL8YICmQdKu8XkL29h9/GVYPO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b3:a0:29:9d:f4:88:61:2d:63:c5:50:d5:f1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Aug 4 08:00:32 2025 GMT
Not After : Aug 5 08:00:32 2025 GMT
Subject: CN=2c7786e99896691d04b594e7c689847be2ea22f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:c3:54:fa:0e:bc:fd:5b:2a:65:35:f3:fe:
7d:d1:a8:4a:f8:bb:9d:a3:54:03:99:f4:86:31:89:
7d:4f:ae:1e:39:41:bc:3c:46:3c:3b:7f:85:28:14:
cb:09:cf:5d:d6:2d:eb:67:02:3a:16:c9:41:2c:51:
b7:9c:61:95:25:d9:48:14:f8:46:ee:0b:4e:3e:3a:
71:35:5f:40:7c:57:d6:25:f9:a4:b6:9c:92:31:44:
f6:10:f9:03:a2:c3:07:d4:e6:a1:38:da:e8:04:0f:
cf:17:e1:17:8c:51:18:ed:5d:26:fe:65:23:e6:b4:
43:2d:12:f5:36:ae:a3:d1:5a:cd:38:b6:0b:ad:a5:
97:db:b2:4f:32:d3:ec:11:db:dd:a9:b7:e3:f8:24:
a6:76:27:56:32:8b:82:42:46:fe:64:3c:7a:99:44:
8c:92:af:c5:a1:4a:06:d6:51:b0:c7:a1:82:c1:15:
da:46:ff:dd:29:16:33:12:3c:e4:c1:65:8d:39:e9:
c9:5d:2b:08:27:c1:e8:48:86:0d:bf:8a:07:94:ac:
62:53:4f:f1:9e:f2:cf:6f:cf:f2:10:a3:4b:a2:4a:
20:4f:45:ec:9c:a6:7d:5a:7d:c0:6f:4a:7e:9d:13:
09:fc:ed:42:c9:4b:7a:7c:ab:49:b9:0b:f2:c4:50:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:86:E9:98:96:69:1D:04:B5:94:E7:C6:89:84:7B:E2:EA:22:F8
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f4:83:ba:8c:bc:4f:9d:b9:23:37:2e:38:66:9b:f4:3c:0e:
72:e5:31:a5:01:e2:36:b8:16:32:62:58:7c:3a:35:36:eb:2f:
86:7a:f8:a6:cb:be:d3:86:d9:ce:c0:03:48:1f:07:14:47:5f:
0a:0f:db:58:23:9b:38:eb:05:de:9e:a8:ef:2a:5a:d3:6f:ee:
bf:24:a2:79:d6:63:ef:f3:bf:33:ae:a3:6b:82:6d:1e:9c:55:
a8:7a:2f:c7:cf:43:b4:cf:ee:34:20:e1:03:31:e7:b1:06:97:
e2:8b:d6:e0:d6:0f:8b:9e:18:18:5e:d1:c9:4c:a4:d1:28:ea:
a7:fa:bd:1c:a4:01:fa:9b:78:7d:a4:0e:c4:b5:c2:30:83:7c:
0d:11:26:4e:f1:3c:59:27:b2:96:f9:01:b2:f5:13:15:3c:70:
89:48:3a:63:4d:34:09:32:72:8d:de:9c:1c:0a:6d:dd:c0:b9:
ca:af:2b:75:f2:51:a2:67:1f:38:fa:cf:c2:53:c0:a5:76:30:
f6:c4:80:29:ee:16:67:13:52:9c:e4:d9:72:ca:bd:7f:86:12:
35:42:bf:fe:51:88:f0:a4:0a:f6:13:24:84:79:6d:82:a2:00:
d2:2d:fd:e7:e1:3a:ab:29:33:a7:e6:48:77:77:90:ce:9e:55:
2b:d2:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:24 2025 by rpki-client