Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: ZSalktbnyz8ZvtOn4OCldIgP6iUY4ZQtc4Q3NWAttYU=
Subject key identifier: 86:1D:55:09:82:4C:51:EE:5E:D5:A6:97:D6:7C:65:0F:14:FD:18:F8
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 0198892180BFB17F2548DB17729F13F94F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 10:02:10 +0000
Manifest this update: Fri 08 Aug 2025 10:02:10 +0000
Manifest next update: Sat 09 Aug 2025 10:02:10 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: 9ithpNKkd7zygZcZuFeyNI9tp7Enr5EG/+suKRiXGKY=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:80:bf:b1:7f:25:48:db:17:72:9f:13:f9:4f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Aug 8 10:02:10 2025 GMT
Not After : Aug 9 10:02:10 2025 GMT
Subject: CN=861d5509824c51ee5ed5a697d67c650f14fd18f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:9b:62:09:10:31:23:06:a8:7d:c5:3e:0f:
3c:68:65:a8:33:6d:e1:34:2e:e1:24:df:4f:2a:c3:
c0:cc:8f:b7:30:b3:8d:cb:40:79:89:ff:46:b6:89:
dd:22:0c:b4:e3:ae:35:47:e3:31:f1:e7:61:a5:14:
a7:7e:96:22:b9:2f:2d:93:7b:3c:d8:4d:d9:76:56:
18:98:98:de:17:a7:0b:45:95:2d:0d:af:37:f3:41:
f0:46:8b:fb:66:c7:69:69:5d:d2:be:8b:fc:f9:35:
a2:06:dc:70:94:43:26:d8:73:d2:6e:92:5b:e9:c5:
6c:08:fc:de:9d:6b:25:b3:53:82:c5:b7:72:b6:e7:
98:08:f8:a5:4d:71:8c:a9:e7:79:d6:5d:de:c5:0b:
9e:90:8d:92:bc:0c:bf:64:32:d9:75:20:67:50:8a:
74:c2:fb:33:e2:41:32:71:ce:e0:5e:30:2e:f8:f7:
7e:22:d1:ca:1e:75:a6:c2:dd:45:d3:b1:03:01:26:
f9:41:45:02:48:6b:13:f9:65:30:97:b9:a8:22:a6:
d5:80:36:ec:61:c8:b6:33:5c:4b:d9:86:4c:18:2b:
38:98:e4:8a:5c:0d:36:95:4f:60:f2:33:ec:eb:9b:
88:3f:f7:20:bb:2e:b0:55:f4:92:8c:d0:1a:e8:c5:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1D:55:09:82:4C:51:EE:5E:D5:A6:97:D6:7C:65:0F:14:FD:18:F8
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4c:e4:e7:47:71:a4:b2:a3:28:59:cd:e1:a9:cc:a5:b1:f9:
4f:4c:fa:41:89:cd:29:3e:52:5c:46:92:11:58:a1:d0:5d:de:
83:fa:76:cb:a4:1c:73:10:77:28:32:92:a6:1f:8d:db:6f:01:
b2:99:83:7a:2c:63:90:d2:58:53:5f:64:dc:19:93:ba:e5:50:
33:1b:82:2b:62:c4:cb:e4:35:b6:17:ca:a8:6b:09:69:b7:94:
37:57:ae:07:2d:20:f3:be:ba:cd:cf:cd:e7:5f:1b:0b:e3:ee:
61:fa:09:1d:2c:f2:79:eb:74:2c:6a:bf:b4:f7:44:64:3e:98:
75:70:e5:0c:a3:26:ff:f2:ca:7d:47:9b:5b:3e:c2:dd:cc:33:
73:f5:d6:3e:ae:39:e6:ea:46:2d:ec:19:34:ed:c3:8e:8a:60:
31:4f:56:46:87:a2:93:aa:15:19:e3:20:3a:c3:32:c0:26:14:
55:b7:dd:8a:5b:a8:ee:c2:81:d7:1b:ef:de:7b:6f:65:5f:69:
d3:fe:6b:91:f0:71:ee:d3:e8:3e:e7:34:14:1b:64:02:be:ea:
5f:9f:60:ea:3f:3a:10:d3:f0:1a:9a:91:1b:57:87:ac:57:1f:
95:31:af:d1:51:a7:ea:9d:9c:4f:2f:6d:30:de:7d:52:b2:93:
b1:71:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:04 2025 by rpki-client