Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: gY5bgDnFQ+FH8yF6r8Foa/XeVWVSEjGe5NVfwWcPzDs=
Subject key identifier: 3D:56:9E:5F:A5:1A:1E:81:4D:17:DA:8B:1E:3B:5E:39:D6:DB:D6:15
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 01988C8F0DD54E9FF444988ED4EDAEE059BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0883
Signing time: Sat 09 Aug 2025 02:00:42 +0000
Manifest this update: Sat 09 Aug 2025 02:00:42 +0000
Manifest next update: Sun 10 Aug 2025 02:00:42 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: nGYORJIltxcTz4DVKAK3qTCAA3XfBCxCGNUFstmNj8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:0d:d5:4e:9f:f4:44:98:8e:d4:ed:ae:e0:59:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Aug 9 02:00:42 2025 GMT
Not After : Aug 10 02:00:42 2025 GMT
Subject: CN=3d569e5fa51a1e814d17da8b1e3b5e39d6dbd615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:b8:33:64:30:04:4f:fc:52:d3:8c:a6:cf:
08:76:ed:2e:66:6a:8b:ce:1d:78:b0:dd:b7:53:9e:
0c:13:c8:ec:f5:62:cc:f5:16:aa:7e:5c:a3:c2:f1:
5c:a2:bb:ba:62:f6:96:44:ca:61:bf:95:c1:c5:e6:
b3:a7:f1:8a:10:e9:20:12:8e:de:e6:43:50:5f:31:
e9:69:eb:78:ea:a1:2d:60:44:a7:10:cc:74:04:b3:
06:38:cc:8f:d8:d2:39:e1:af:95:f6:b5:a9:48:38:
91:c9:12:28:f6:55:96:38:08:20:e8:cc:69:21:5a:
44:d4:36:d3:2b:dd:f2:a0:db:7c:da:40:7a:85:da:
f0:00:5e:55:e7:dd:a2:f9:a2:a3:ae:3d:25:a8:6f:
1e:aa:e6:28:0b:3e:31:0d:c2:f8:34:90:83:34:07:
de:d5:8f:5b:6f:85:bf:9e:7d:a2:e7:65:41:96:ec:
48:ba:a9:d5:23:f5:33:e1:b6:0e:e2:ea:1c:bc:05:
ca:0d:40:1c:28:94:05:16:ec:e0:fc:68:b6:e4:34:
b2:eb:fb:f0:92:5e:4a:4d:ff:14:41:8e:9f:dc:49:
85:af:10:90:df:bf:b3:db:eb:50:2b:ac:97:85:d9:
28:60:c3:72:cf:fa:bc:b4:f1:e1:5a:8d:5b:c9:92:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:9E:5F:A5:1A:1E:81:4D:17:DA:8B:1E:3B:5E:39:D6:DB:D6:15
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:84:ff:af:80:b5:ff:81:01:0f:86:46:a9:39:bc:cf:8a:74:
aa:b9:25:bf:5d:6f:4e:87:1d:17:e9:71:de:96:89:39:5f:35:
eb:86:fd:fc:4c:ed:e2:f6:99:8d:4e:b1:68:67:3e:fb:71:55:
a6:b4:89:59:53:d5:b9:c4:6e:44:6f:ed:74:59:3e:6a:73:51:
e8:64:67:9e:43:0d:e7:a1:de:a1:4b:45:68:f2:eb:0c:24:2f:
a2:f2:b0:7e:bb:08:60:2a:3c:d2:fb:5a:48:b0:da:0f:41:2d:
ea:cd:b4:3f:b7:7b:ed:5e:09:90:46:6d:d3:85:28:71:90:01:
2e:ad:60:61:cd:ee:81:1e:0d:f6:3f:34:e7:11:11:6b:6d:7c:
03:6f:e7:02:2c:99:3b:f8:e4:96:66:b6:2a:a8:e6:3f:51:c4:
0e:f3:b0:df:9f:64:da:d6:c5:35:ce:1e:e6:3a:27:aa:cf:5c:
bb:d6:93:7a:7d:b5:16:89:d7:b9:1a:3a:15:b7:64:97:4f:7f:
e5:4b:8a:ee:40:a4:76:8c:68:94:ef:47:51:1c:98:d9:31:0e:
83:32:37:d7:a2:85:be:8e:be:18:10:51:bf:be:1e:f3:50:92:
25:98:ea:d5:b2:05:92:59:3d:fb:13:39:51:93:8d:68:b4:e9:
4b:c1:f4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:34 2025 by rpki-client