Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier: fetTJwXt9Bc9RCw68DOcp4V0SvCPFzJYhM4pwQLpdmY=
Subject key identifier: D9:04:FC:5F:61:D7:BB:53:3E:9E:C8:8B:2E:C3:1B:F2:DC:E6:04:51
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 019873744371A36966ADAD41EFE5DF4C7096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number: 02C9
Signing time: Mon 04 Aug 2025 05:00:55 +0000
Manifest this update: Mon 04 Aug 2025 05:00:55 +0000
Manifest next update: Tue 05 Aug 2025 05:00:55 +0000
Files and hashes: 1: 8ERPvpxKfVBfAUigys2-PiTFfqA.roa (hash: KAiZ9xkRQ32j6xO0jLEnhDznPnUl1zJBNWjMk46qfE0=)
2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: 1yvbPTWD9SiMauJUtzqMQq1EwlU/Ac1QbtAij7wB+e4=)
3: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (hash: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:43:71:a3:69:66:ad:ad:41:ef:e5:df:4c:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Aug 4 05:00:55 2025 GMT
Not After : Aug 5 05:00:55 2025 GMT
Subject: CN=d904fc5f61d7bb533e9ec88b2ec31bf2dce60451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:c4:92:90:51:ca:eb:03:24:cd:66:73:de:
eb:e6:2b:ba:87:e3:eb:58:2c:30:42:a6:ec:8e:ae:
ea:1a:21:ee:58:f9:bf:23:eb:83:ec:ef:f3:b4:31:
66:38:44:72:f7:01:e5:c3:24:01:4f:48:9e:de:67:
9e:fc:a4:d4:61:2d:7c:2d:70:0f:50:00:10:cd:ef:
66:83:e8:42:24:7d:8f:72:06:32:e3:a2:33:77:19:
47:a6:3f:4b:ab:fc:4f:7f:9f:01:1e:c8:56:41:a1:
17:44:33:1f:6e:fd:c3:69:f8:41:c4:83:47:c4:10:
d9:da:ac:35:3e:10:c7:51:37:fe:31:6e:e6:49:3d:
47:39:39:1e:ef:94:4a:b9:4d:d0:8b:bd:c2:28:ac:
f2:fb:e1:58:3e:6e:d7:32:3f:ec:08:b6:e3:1c:f0:
84:f9:6b:39:58:68:c8:02:f4:a7:7b:87:1e:3d:29:
c4:f4:03:9c:95:89:e9:c2:a1:5f:65:87:3a:0e:b2:
28:94:44:22:34:47:06:ad:3b:9a:43:4f:c6:52:32:
c1:fb:35:60:67:5a:ce:d6:4c:cf:88:eb:60:95:f8:
55:44:8f:93:c9:da:86:cd:5c:38:df:aa:ae:76:4d:
9e:0c:b1:53:5f:8c:8c:d1:7e:a8:c5:b4:af:70:09:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:FC:5F:61:D7:BB:53:3E:9E:C8:8B:2E:C3:1B:F2:DC:E6:04:51
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d6:37:11:18:58:16:36:7c:4d:65:5a:09:2e:29:49:79:bc:
76:72:a9:58:07:3e:a0:01:3e:9c:db:4a:3b:ea:a0:50:fb:c6:
c1:d1:b7:20:88:9c:6c:8f:8f:c0:e4:f7:2d:cc:54:07:e5:19:
7c:f6:4b:96:c4:52:80:b6:b8:01:b8:95:c5:02:d7:5e:0c:ba:
a5:51:c3:0e:06:3b:a6:84:e7:79:cf:73:5d:0b:37:2b:d8:8e:
05:40:bd:2a:30:98:fd:be:1c:df:3a:7b:b8:13:7b:19:05:12:
7f:22:40:ba:af:d2:fe:a4:1e:75:1a:b6:7a:8b:30:81:fa:b2:
ef:d2:90:b3:da:c7:3d:08:75:d2:2a:28:89:3c:3f:48:f1:90:
dd:44:97:0b:c3:27:e5:5b:12:41:8c:de:88:50:d3:d3:fd:42:
a5:99:dd:76:12:48:03:61:c0:68:b9:12:29:9f:2e:8b:92:83:
0f:1f:7a:10:6c:b7:2b:82:5a:05:c5:3e:eb:92:a9:47:ef:d0:
1d:5a:63:8f:49:e5:b1:cc:ff:f7:5b:b4:72:ed:e7:13:ad:9f:
4f:1b:71:27:19:5f:6b:01:57:1d:0f:fc:e7:6b:c9:1e:1e:7f:
1a:e6:96:d3:70:d0:ff:28:af:e0:af:5b:62:0f:ec:1d:78:cd:
90:76:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:47 2025 by rpki-client