Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
File: fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json)
Hash identifier: fkwWxMmnDUct059DRZU7D3Nz0TclRjpSZJPcD5j76Fw=
Subject key identifier: 91:AD:9C:29:B2:7F:5E:B3:ED:E1:34:75:C0:4A:58:89:D8:36:5C:9F
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial: 0198733DC428E1996FE0632CDCC91F419AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
Manifest number: 0A8D
Signing time: Mon 04 Aug 2025 04:01:24 +0000
Manifest this update: Mon 04 Aug 2025 04:01:24 +0000
Manifest next update: Tue 05 Aug 2025 04:01:24 +0000
Files and hashes: 1: B7oKCLtj5wVT7Rx672od7NSTVbM.roa (hash: zBd0U1lEA6sR+ArBNpdCg/lk4ok0wNXK1hGjWgT7oxA=)
2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: /57MC+4hRwcsVgn1/fld5S5b6NFSb2SH4nvgftcyit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c4:28:e1:99:6f:e0:63:2c:dc:c9:1f:41:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Validity
Not Before: Aug 4 04:01:24 2025 GMT
Not After : Aug 5 04:01:24 2025 GMT
Subject: CN=91ad9c29b27f5eb3ede13475c04a5889d8365c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:52:76:d1:2c:08:7f:60:18:7d:88:74:a3:
d3:99:ad:a2:42:73:32:cc:b7:d8:1e:8d:2c:6e:50:
e8:67:95:41:7f:8e:a1:14:19:4f:47:5a:63:ae:3b:
d2:51:26:07:96:06:46:ab:1c:bd:b4:ae:9c:e0:95:
1f:1c:d3:c8:42:d9:4e:c1:db:19:35:61:7a:5b:88:
9b:4b:5c:c8:16:ed:73:be:bb:43:df:99:83:7e:18:
4c:f7:57:41:37:2f:6f:14:3f:f8:68:7e:13:51:02:
ec:25:86:44:ef:f4:83:4b:28:2a:94:3a:88:c0:81:
51:1e:9d:da:62:6f:f2:9e:01:1b:17:12:bb:84:38:
d2:df:16:2e:b5:0b:12:3c:ab:ff:c2:3c:2a:30:64:
06:43:19:9e:be:74:07:7d:f3:a3:37:07:2b:5b:5a:
de:19:e8:a4:06:b3:6d:92:68:4a:b6:b8:67:11:ca:
16:ef:17:16:c8:ee:41:c2:ca:5e:f4:04:e0:fa:c4:
1f:15:2a:4b:03:9e:7e:c7:d3:e6:bc:75:a6:72:ad:
bf:6e:3c:81:61:3e:dc:26:64:90:8a:4d:9a:64:f0:
af:b2:0e:53:80:62:3c:80:75:9d:89:03:7a:34:e9:
f9:73:71:57:c0:8c:63:ba:4a:b2:ad:d7:41:a3:b8:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AD:9C:29:B2:7F:5E:B3:ED:E1:34:75:C0:4A:58:89:D8:36:5C:9F
X509v3 Authority Key Identifier:
keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7e:5f:16:4b:5f:e3:d2:8a:d6:c5:dc:56:43:84:72:79:fd:
a4:cc:f2:30:f5:e0:fa:d2:96:72:85:09:38:58:24:60:ff:3b:
b1:f9:0c:b0:c7:e2:86:94:7e:6a:91:1e:7c:10:89:4f:5b:e8:
9c:ef:1f:32:4e:1d:3a:d4:be:67:3a:d0:06:e8:ca:16:13:78:
e8:c0:0c:56:60:4a:23:62:01:02:47:8f:42:72:13:40:3a:11:
bd:d8:53:50:8f:f3:9f:7e:b6:7f:2a:7b:f4:9f:ab:e4:82:a9:
af:80:6b:fd:05:a1:5d:c2:a2:e3:39:72:4e:7d:50:9e:0b:94:
bb:98:58:14:be:42:3a:64:e8:08:1d:bc:2a:65:33:c3:b4:49:
22:d0:3e:f0:df:3e:4d:69:a0:e2:44:a2:18:85:0c:21:50:1a:
91:a8:d5:1b:82:36:8c:ad:de:2f:72:51:96:8b:c3:e6:d0:98:
f7:bb:84:e8:4d:45:69:8f:b6:00:08:06:2f:dc:d6:ae:f3:62:
ed:5f:00:41:bf:6c:46:36:61:a4:ff:72:1f:5a:e4:24:e7:c4:
d9:88:5a:56:fe:09:dc:8d:e6:23:b8:bc:54:c4:af:b9:c7:e4:
bc:97:05:92:23:6f:59:48:50:6a:c4:cf:86:94:e4:b6:73:0b:
fc:9c:37:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:59 2025 by rpki-client