Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: YC06nGWPfovl3sWe0zawmGSBnhHtaUwZTmifwi1nrug=
Subject key identifier: E6:0E:FF:71:D2:22:0C:DF:00:1F:5B:EB:F5:AB:03:5E:CE:C1:62:DF
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 019880F8BA343EB04EFBC8E936FF1A3F9F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 12FE
Signing time: Wed 06 Aug 2025 20:00:40 +0000
Manifest this update: Wed 06 Aug 2025 20:00:40 +0000
Manifest next update: Thu 07 Aug 2025 20:00:40 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: tS1qBnZ7gX7QKfCDZ4yRycdVZ3CMvumvE2VkjFd4/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:ba:34:3e:b0:4e:fb:c8:e9:36:ff:1a:3f:9f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Aug 6 20:00:40 2025 GMT
Not After : Aug 7 20:00:40 2025 GMT
Subject: CN=e60eff71d2220cdf001f5bebf5ab035ecec162df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:a7:d5:4e:f3:19:9c:22:a4:62:64:8b:ce:
b4:68:82:d5:44:07:7a:b2:1f:f7:c4:a0:fd:a4:e3:
1b:b5:e2:e2:9d:8c:ed:81:61:11:65:15:64:49:24:
e8:25:dc:71:3b:36:cc:ff:54:b2:91:02:38:81:48:
78:ab:00:e8:21:30:b5:a0:2c:8f:57:bb:54:86:13:
79:04:91:67:87:33:77:23:51:2e:7f:f0:2f:76:c0:
59:0f:53:53:44:45:09:93:f1:2f:04:c3:16:73:72:
65:0e:5c:21:b7:44:94:c9:6d:dd:26:e8:38:99:63:
72:31:63:db:8a:26:23:66:40:d9:85:47:cf:93:d6:
cd:7e:0f:68:ec:a2:f8:31:d9:8a:c4:32:fa:01:0a:
d6:a3:f6:78:e2:b2:d3:3e:a7:45:d6:81:c3:ba:bc:
b9:8b:70:f1:88:36:0b:2b:1e:34:c5:a8:95:a5:b8:
e2:b1:4d:49:74:59:c7:05:94:3d:2a:35:64:45:2d:
1b:93:46:b6:59:35:55:c5:b7:52:f1:db:02:29:ed:
2f:33:02:9f:7d:0c:51:bd:d0:73:7f:08:da:52:99:
59:7e:27:16:4d:e2:f6:f9:cd:9d:9c:68:ec:cf:78:
4c:00:e1:7f:c2:4a:39:8b:44:50:0f:b7:e9:4b:c1:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:FF:71:D2:22:0C:DF:00:1F:5B:EB:F5:AB:03:5E:CE:C1:62:DF
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f7:7c:2d:7d:e0:95:d3:2c:a7:5f:65:ca:ca:fb:45:24:b5:
73:a4:1e:5f:01:ba:65:14:8b:2a:ed:39:9c:76:f7:0f:9b:9f:
37:e7:cd:a6:4c:0d:24:d0:70:bb:4a:15:50:5b:5a:4f:75:0c:
22:6a:08:06:63:fe:c1:dc:56:e4:42:0f:6d:c5:fe:88:27:6d:
61:4c:07:01:3d:02:d1:90:b7:aa:48:8b:c1:29:8f:b6:a6:7b:
86:bf:d5:73:20:6c:ee:6f:96:58:1c:2a:7a:3a:91:c1:e1:97:
5a:a1:ee:76:d5:24:e1:6a:03:b6:dd:37:b1:8a:f6:dc:1c:a2:
3e:08:09:9d:44:85:39:49:41:cc:3a:e3:ff:72:75:74:63:c4:
04:cf:be:02:71:ba:79:e6:fc:ac:75:33:6b:c7:d6:78:70:07:
83:ea:f4:4c:02:bd:1a:3d:bc:8a:51:6e:ec:5e:73:d6:c9:f7:
e9:15:34:a2:bc:b0:d0:fa:a5:f3:7e:a3:aa:35:dd:b6:fa:08:
4c:d8:31:9e:2f:54:c2:f2:2e:bf:18:b6:60:b4:50:84:df:fe:
59:48:ed:ae:ca:ed:14:63:60:73:57:ae:f9:5b:73:f7:02:1d:
8f:f8:04:fb:47:41:9a:8b:82:01:0b:da:02:bf:56:61:92:1a:
5f:7e:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:49 2025 by rpki-client