Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: sZBLGs5QMcKw3z15VD1ktx9J30yLPXbTRVxSPkjgKWg=
Subject key identifier: 9A:C1:14:E4:28:41:D4:CB:7D:4C:9D:94:AA:26:76:9B:B2:E8:4E:85
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 01987C099CDD77670A55379C04F759A5B107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 072D
Signing time: Tue 05 Aug 2025 21:01:01 +0000
Manifest this update: Tue 05 Aug 2025 21:01:01 +0000
Manifest next update: Wed 06 Aug 2025 21:01:01 +0000
Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: x+l0UIYOkuFmkWtfMhTpC+U0rQ5KNxt4foIpyj4uFUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:9c:dd:77:67:0a:55:37:9c:04:f7:59:a5:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Aug 5 21:01:01 2025 GMT
Not After : Aug 6 21:01:01 2025 GMT
Subject: CN=9ac114e42841d4cb7d4c9d94aa26769bb2e84e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f7:a0:f6:8f:56:0d:6c:37:f9:f4:0f:3d:14:
6d:43:b0:b9:eb:20:53:12:ee:ba:55:9f:a0:10:e6:
df:c1:d1:29:76:93:5e:d5:84:bb:29:e2:49:5a:3c:
33:9c:06:7d:d6:6a:b6:ab:48:1b:5c:b1:59:a3:fb:
3f:4b:c3:db:b5:23:fc:a3:8c:40:05:1a:9d:4a:1a:
35:76:dd:e7:db:29:98:4b:d1:15:a8:bd:52:57:28:
30:9a:0f:ee:cf:c5:f8:28:e3:93:c5:65:3b:d8:88:
33:20:c8:a8:9e:30:92:75:60:e8:16:ed:ad:bf:50:
33:1f:f5:08:93:db:01:2d:11:bb:7e:31:ac:cd:d5:
45:dd:3b:f9:13:f3:02:51:35:cb:9c:38:6d:5f:c9:
3b:56:1e:6f:d1:4e:67:9f:d5:f3:3b:06:2b:f2:b9:
b2:5a:65:8d:ef:f6:f9:ed:cb:b8:97:64:90:7f:24:
4b:8b:86:3b:ee:3c:17:7e:43:9c:af:e1:64:0c:c1:
5d:14:6b:d9:e1:40:80:ab:6c:21:e0:1f:d3:27:1a:
08:3b:9f:a5:8a:77:1e:b3:b6:76:06:12:1b:25:6b:
10:e8:26:a6:58:35:44:be:79:ed:4a:55:91:cf:25:
28:f2:66:cc:02:d0:06:cd:4f:10:26:4a:43:62:86:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C1:14:E4:28:41:D4:CB:7D:4C:9D:94:AA:26:76:9B:B2:E8:4E:85
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ef:73:84:ed:08:fb:33:66:63:2a:26:b1:f3:44:a1:66:e0:
fd:1e:2f:0b:14:68:d4:bd:8c:0d:6b:58:8a:d4:51:85:f3:8e:
00:88:fe:0e:e5:7a:7b:3b:85:09:43:c3:31:0f:ea:89:da:5b:
6d:81:32:bf:c2:a6:35:75:59:ba:0d:e9:8b:50:a5:fc:dd:98:
02:e2:3f:18:05:78:4b:c8:b9:a4:a9:89:ab:61:0e:e4:41:0e:
23:f4:0b:a2:59:d3:cb:a5:ed:b7:5e:b5:a4:e3:3c:4b:d9:53:
b3:1c:3e:ab:26:1c:44:42:af:7a:27:e7:0c:8a:a2:69:1a:9e:
1d:a7:41:27:df:c3:a3:ee:7b:69:e8:b2:50:41:33:74:92:1d:
db:60:54:78:03:fa:37:fa:0f:50:5e:06:1a:ef:26:27:8a:ff:
e3:18:44:8b:69:04:af:93:cd:79:16:a5:bb:e6:1e:59:34:10:
e6:e5:b4:6b:18:08:ad:56:e0:05:11:3d:8d:ba:31:6b:27:ef:
d0:5d:21:98:cd:22:5e:d1:d0:7c:7a:60:49:e0:4c:4b:79:dc:
70:72:8b:88:0f:43:b3:a0:81:68:3b:9e:b2:c2:fc:56:f7:1f:
67:cc:32:e6:ad:8e:42:e8:2f:1c:dd:74:d3:c4:d0:b2:d2:69:
ec:65:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:38 2025 by rpki-client