
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
File: fiCwNOLEl7GIRIje8QaXJwR2UCk.mft (raw, json)
Hash identifier: Sn4iaJLv+9rLqLXysEakU9f7bOoSdQYeFGTPF/rc+04=
Subject key identifier: C8:2C:6C:4F:11:B1:97:6F:97:19:EB:17:44:71:9C:CE:BC:81:EA:73
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0198887B51B620D0F4C1DFBA94396910F0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
Manifest number: 07A9
Signing time: Fri 08 Aug 2025 07:00:39 +0000
Manifest this update: Fri 08 Aug 2025 07:00:39 +0000
Manifest next update: Sat 09 Aug 2025 07:00:39 +0000
Files and hashes: 1: 1ps_JXvHrVoFUPxYGp2BHP36Ztc.roa (hash: ta8CMfbMk29Fhndl6ZZIYNJy1DPsZd7Ckx7RxOALCt0=)
2: B8FR9SA5Fk8sfSBZT2d88IzPSuM.roa (hash: xWCZc/aZyTQfJO3Hey5rRYelsTLc0vBGe/wKJpUha0w=)
3: MX-RxL21AwQXVelzA4IrJb3dj-4.roa (hash: dxUOm/3bYpTRNviiYZNfM07knnqfGC+IudqU1B6rLJM=)
4: PaJ1NV9XG903UofLMhbqDFeoGRI.roa (hash: cV1+9IwWjMr3CVVFN5PwdUeZyMxTTrMoErA9Ufghrjc=)
5: _c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa (hash: wQQa9Mnur4vqn575tKy3l6q/9fmjlstZd96o2yaRPEI=)
6: fiCwNOLEl7GIRIje8QaXJwR2UCk.crl (hash: R/Rx+3eqP9TQOHyJbUoXD0LvmVEdoY3K7zcE6N7j+Ok=)
7: lvS6vh9BhXk-DDoC3lHO0j30XVs.roa (hash: NE22Cbu2Lr6NtvVCV3Mb0Mbcy2GjF6nALD39UXv5vqw=)
8: rDdl4wb7d9_eC22yvGjUcZm-ZF0.roa (hash: IxVCz/Sbbi4L+BIjve8uTsWyEfGjkV7LQaO0qi7hXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:51:b6:20:d0:f4:c1:df:ba:94:39:69:10:f0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 8 07:00:39 2025 GMT
Not After : Aug 9 07:00:39 2025 GMT
Subject: CN=c82c6c4f11b1976f9719eb1744719ccebc81ea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:00:f1:b1:f9:25:ba:d8:1b:55:dd:14:48:11:
44:9f:35:47:25:60:94:7c:2e:93:4b:f1:02:75:d3:
be:6c:14:fd:98:b9:65:44:7c:10:0f:35:da:a7:aa:
8b:14:80:d2:bf:8e:7e:9a:e3:d1:3b:8c:98:de:df:
48:ac:d1:78:b9:b6:26:f1:89:0c:b8:16:05:09:fd:
b1:59:54:9d:ee:bd:fe:ee:bf:6f:4a:44:37:3c:7a:
71:b5:74:4e:71:b1:1e:09:79:f0:2e:e8:57:99:f2:
aa:d0:e7:cd:16:6c:87:91:51:9c:17:1c:88:80:d1:
7c:02:3e:da:08:e1:1f:e2:46:11:df:bd:e9:a1:25:
a0:42:3f:06:0a:bc:6e:29:87:95:13:10:d7:86:4f:
0c:b0:2c:fe:80:70:bf:ad:a7:52:95:5b:95:f2:5d:
a5:4f:59:ed:cf:a9:d5:a2:6e:2e:a4:43:6f:db:12:
e1:22:a2:c7:58:df:45:c3:71:cd:7a:22:e8:47:0f:
87:2c:70:4b:01:59:47:ca:3e:6a:ad:73:17:81:95:
5a:77:3c:bd:35:76:c1:98:d9:ef:ca:16:ee:fa:a3:
20:4b:68:74:85:7d:b5:dd:a2:7a:b7:7a:79:ad:51:
44:7b:e2:04:c9:9b:a3:32:2b:13:1f:69:d3:f8:54:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:6C:4F:11:B1:97:6F:97:19:EB:17:44:71:9C:CE:BC:81:EA:73
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f8:db:eb:ef:b5:5c:e7:0f:0e:4e:44:08:c3:80:8d:4c:13:
e3:97:23:40:35:de:14:10:29:4b:a6:3a:b7:23:a8:b0:57:56:
2e:9c:86:84:aa:b4:fa:8c:a3:15:1a:4c:aa:8c:ff:f3:cc:aa:
b3:84:05:15:eb:d3:2a:6d:03:a9:14:f2:4b:ec:01:0f:34:6b:
d1:b8:60:b7:f0:bd:16:18:cc:77:74:66:3c:89:9a:33:ab:cb:
cf:df:ca:89:1c:f3:1f:8b:b6:3a:c0:7d:ee:15:2d:b9:65:ad:
3f:03:e7:7d:76:8c:62:8e:2b:7f:48:2a:f2:59:3d:16:54:26:
97:c5:f3:0c:8e:a7:82:87:0e:b4:c2:da:67:2e:36:51:7d:c2:
4c:14:cf:0f:56:ea:33:31:9e:fe:7a:8a:23:51:70:74:fc:75:
fa:c1:6a:a6:b2:8d:e0:e6:2c:50:77:23:8f:cd:7d:4e:a3:fd:
af:a5:4a:a0:71:09:26:e7:53:c1:94:87:a5:f2:69:a9:23:5a:
16:87:3e:98:08:cd:2a:59:5b:20:06:af:da:43:7a:5a:97:20:
40:31:3d:b1:88:1b:2f:59:44:fe:4f:dc:23:6b:a0:23:f6:af:
a8:8c:1d:f7:1a:5a:bb:5a:fd:ee:be:6b:9a:13:4a:d8:f9:c4:
57:42:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:28 2025 by rpki-client