Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: MgwcJSFulUVmJbCW4i1WMhNPbWoDAP6yKNy50rJtrPs=
Subject key identifier: FE:C2:17:C8:AF:EA:5B:7A:A5:42:CF:E5:F7:1D:74:82:8A:54:B3:52
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 0198906C1DC32DDE3B48BB84864BF0866592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 20:01:01 +0000
Manifest this update: Sat 09 Aug 2025 20:01:01 +0000
Manifest next update: Sun 10 Aug 2025 20:01:01 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: G+nXfWWNenNSjk7mz2M//YwG8npjhDhcidbsQWy8rGM=)
2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:1d:c3:2d:de:3b:48:bb:84:86:4b:f0:86:65:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Aug 9 20:01:01 2025 GMT
Not After : Aug 10 20:01:01 2025 GMT
Subject: CN=fec217c8afea5b7aa542cfe5f71d74828a54b352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:32:42:f5:06:7f:bc:a7:cf:ec:2c:20:e3:
49:90:b3:39:00:18:5b:90:a7:38:cb:92:7a:12:c3:
a4:9a:1d:a5:ff:a1:a4:39:cc:9b:42:0f:7b:ed:70:
f9:04:f2:31:7a:fd:fa:8d:68:05:e4:25:95:d3:a6:
a2:72:1e:e4:a8:2b:fa:42:fc:b1:a6:e7:3e:81:21:
8a:cf:81:c8:a9:08:92:04:d7:ed:d5:5b:94:4b:b9:
55:d9:5d:c6:c8:09:12:64:d4:da:3d:5a:ff:64:91:
f1:28:60:4d:8a:0a:b7:0d:79:3b:26:21:42:a7:09:
cb:1e:a7:e3:55:fa:90:d8:2b:fa:ec:21:5c:65:a6:
60:a1:14:0e:3e:8b:db:48:c4:c0:72:80:97:9e:97:
5e:69:c5:b7:0f:5c:89:36:ce:d4:9e:72:e4:0f:2f:
76:c9:f9:50:a3:bf:ca:29:fd:50:cb:c0:07:26:38:
36:5f:77:76:39:f5:6d:c7:e4:2a:23:43:d2:b6:66:
16:51:90:f7:e6:3c:92:b6:ea:ac:01:5a:de:e6:83:
29:50:d7:e4:02:96:76:73:ff:49:13:e0:22:28:d1:
82:b2:95:f1:a1:cd:81:d2:a0:61:a1:3c:80:7b:b3:
13:a4:9d:c1:0d:85:d2:5e:92:d4:40:aa:b1:83:73:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:17:C8:AF:EA:5B:7A:A5:42:CF:E5:F7:1D:74:82:8A:54:B3:52
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:81:6c:95:99:9b:49:f3:8f:98:af:f4:07:38:12:68:08:47:
57:00:b6:75:ef:95:7b:6b:1a:17:9f:96:e1:f8:be:b5:5a:ef:
51:42:5f:4f:ed:5a:15:78:36:8d:89:3f:fe:e6:f8:eb:5f:37:
fe:5c:96:6d:69:75:eb:89:d5:e2:3a:d9:04:01:86:36:a7:a6:
df:a8:e4:ad:9f:84:40:81:26:07:f6:fd:cf:22:80:7c:d2:53:
67:bf:b0:45:65:8f:94:76:ea:99:2d:f9:73:e5:2a:a6:8a:f9:
75:85:70:ea:07:97:80:8f:59:6f:fb:cb:42:f6:9a:ac:87:97:
5a:7f:cc:6e:91:a1:d0:02:ee:dc:2f:b5:7a:52:6d:9d:02:aa:
37:2c:e3:16:95:97:b9:54:23:72:d7:37:22:8a:9b:3e:6e:23:
bd:a3:f6:0c:59:56:49:fc:c1:ef:2e:46:bb:c6:78:b0:96:a2:
46:1f:0a:e8:1e:a4:ea:fa:94:86:ba:15:f6:67:38:5d:67:08:
41:e5:f6:92:67:3c:db:3e:ba:8d:d5:56:28:43:4e:b9:b1:9d:
a6:92:84:ff:08:54:d7:9c:84:70:99:95:08:16:e9:53:3c:5d:
8e:86:2c:c2:48:94:19:ca:21:9d:11:2d:a7:b0:e6:90:6c:61:
72:c9:16:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:54:18 2025 by rpki-client