Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: HuETKWhaS+A9eJHX/ZV8HcOvaoNQmR8hZuC6425h2A8=
Subject key identifier: FE:9B:E5:F3:09:D6:AE:3C:D7:83:DF:2B:31:93:82:1A:4C:EF:CE:89
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 019880C22BBBB0A8CECE3E077A7E10DBD78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0E65
Signing time: Wed 06 Aug 2025 19:01:05 +0000
Manifest this update: Wed 06 Aug 2025 19:01:05 +0000
Manifest next update: Thu 07 Aug 2025 19:01:05 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: 0VcWKU5XdeVSHXt6MaNprmExn17JUJZQxGVzPGttDIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:2b:bb:b0:a8:ce:ce:3e:07:7a:7e:10:db:d7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Aug 6 19:01:05 2025 GMT
Not After : Aug 7 19:01:05 2025 GMT
Subject: CN=fe9be5f309d6ae3cd783df2b3193821a4cefce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:3b:e7:3a:fe:74:ae:09:c8:30:83:ea:e3:
fc:a1:09:d8:7f:0c:45:2a:c6:f2:41:56:f7:d5:57:
99:5a:e6:ba:4d:ed:78:e4:44:46:e7:fa:21:44:00:
b3:a0:b4:f0:34:5a:0a:99:b2:8b:22:a3:8f:d1:f8:
7d:49:0b:97:82:99:08:71:9a:0b:e0:45:44:82:28:
e5:3a:ec:2a:fb:1b:43:8c:c8:8d:1e:45:64:86:73:
1c:0d:d4:a3:11:34:40:9d:53:28:b8:45:80:0b:35:
c9:dd:20:8c:42:c2:e7:0d:5b:d6:48:3d:53:47:13:
ad:ca:fa:13:b2:3f:60:7d:46:78:59:ae:5d:da:82:
95:64:68:f9:36:d4:e9:98:ca:68:70:2f:fa:c0:0a:
24:3c:e7:f6:da:d6:46:da:dc:2b:35:10:84:d6:22:
d1:90:52:08:0d:44:57:a5:fa:46:16:8d:ce:d0:b2:
4d:05:b6:65:d2:70:55:db:1f:1a:0e:a0:20:f8:82:
7b:b5:1d:0c:92:6e:75:8c:8c:5c:19:9e:bb:ee:0b:
57:21:a2:eb:c5:45:86:7b:34:66:14:08:cb:1e:bd:
cb:c6:b0:af:d2:eb:84:7c:25:1d:11:97:4f:1e:38:
e1:e1:27:07:ae:6d:f5:80:7b:51:3b:89:29:84:e0:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9B:E5:F3:09:D6:AE:3C:D7:83:DF:2B:31:93:82:1A:4C:EF:CE:89
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d5:65:2b:e7:de:a7:7e:65:a2:72:30:5b:a4:46:65:43:29:
0e:f9:7e:08:3f:eb:d5:4c:4e:e6:6a:4f:0f:79:d8:bf:52:08:
3a:29:0d:1b:20:5d:33:11:83:ca:cc:13:13:f4:4c:b7:bd:04:
13:b3:d4:94:32:b6:22:2f:a7:bc:af:71:47:95:14:55:f8:a0:
a0:8b:ff:a3:5b:a5:09:9d:e7:b9:b5:44:56:63:f5:f2:bf:cb:
d3:b0:6c:68:40:36:da:7d:3c:8b:c9:94:a8:48:9d:89:0d:e4:
76:13:8e:71:25:f6:ee:b4:1a:69:50:ca:c9:fc:0a:f8:45:2f:
77:bd:98:d1:e5:47:3d:39:96:d1:30:ba:72:f0:f2:fb:49:7b:
47:cf:70:0c:48:fc:9c:0f:04:b5:69:c3:b4:65:fd:fe:41:5b:
3a:8c:95:86:49:da:07:35:de:64:ab:77:dc:93:c1:0e:fd:e3:
6c:bc:d9:e9:44:26:2a:c3:e5:6a:19:77:2f:47:bd:81:36:cd:
58:28:1c:50:bc:d0:38:2c:5d:7b:d5:57:12:0f:1e:db:a7:8b:
32:c0:ea:27:25:d7:e4:81:fd:34:97:91:8d:db:56:9b:bb:90:
51:dc:a4:6a:d6:55:a5:2c:bf:f7:df:42:e6:aa:4c:fa:61:8d:
ea:45:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:15:11 2025 by rpki-client