Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: mPu/baU69ehvxvRXqJVnEZOl2fhuHoN86YhutX1X9b8=
Subject key identifier: 9C:8F:D8:29:17:DE:04:7E:A5:E2:14:AF:3E:BF:B2:FF:D9:84:3C:4A
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 019877F5CE4E82E3771EE7F000AF4A67DE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 0D40
Signing time: Tue 05 Aug 2025 02:00:54 +0000
Manifest this update: Tue 05 Aug 2025 02:00:54 +0000
Manifest next update: Wed 06 Aug 2025 02:00:54 +0000
Files and hashes: 1: 2CYNXB5qZHN7in7RGaGVmXvb7Xs.roa (hash: n74UAylTv760Shvrd+PI6ipCj4rV+2WaR3QnP3+8e6Y=)
2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: fRPzDuWFIrES0YVYjn3uqUczgFp3XhUzV8x4jF2M4Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:f5:ce:4e:82:e3:77:1e:e7:f0:00:af:4a:67:de:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Aug 5 02:00:54 2025 GMT
Not After : Aug 6 02:00:54 2025 GMT
Subject: CN=9c8fd82917de047ea5e214af3ebfb2ffd9843c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:f6:91:8b:36:92:f6:dd:77:93:f1:89:d0:
58:e5:72:31:c8:55:35:61:52:53:20:9b:18:73:c9:
d2:f0:57:f3:1e:7c:18:90:14:08:30:19:8d:4f:d1:
27:f4:13:3f:a7:af:0f:94:32:3a:9c:32:0f:ce:bc:
b0:e8:46:16:38:2a:c0:d4:5a:d8:5c:aa:25:cc:0e:
90:92:0d:ec:0f:be:d2:81:9e:a9:0b:40:1b:f0:95:
6d:7e:81:cc:d2:1a:09:0e:e3:14:17:95:9e:64:20:
99:52:ac:e7:2d:fa:86:aa:79:53:b5:70:71:a3:19:
ee:2a:95:f6:ca:61:df:52:7e:5a:e8:25:15:7c:52:
9b:48:3b:a1:25:98:94:42:c6:ee:e0:c1:9b:3b:89:
57:5a:01:03:14:1b:70:f3:e4:14:5c:36:07:a7:33:
19:3b:24:16:ad:0e:11:26:71:7e:ee:80:fb:4d:8a:
b8:c2:f0:1b:f4:98:03:49:aa:1c:ad:82:96:d3:dd:
50:08:af:73:28:b9:a0:cf:c1:b6:92:d7:1c:c1:2d:
a2:2c:6d:cb:2d:e1:3b:06:0d:71:5f:15:0f:43:24:
d3:54:f4:3c:e0:16:8f:38:26:6e:b7:23:f7:32:fc:
5e:90:c1:0e:c1:29:c0:86:13:73:6d:da:35:e9:05:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8F:D8:29:17:DE:04:7E:A5:E2:14:AF:3E:BF:B2:FF:D9:84:3C:4A
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ec:de:a5:6d:3a:35:f2:0b:c7:d8:ac:76:ea:c5:f1:af:46:
8b:73:9f:bd:b7:61:35:41:73:97:1e:bd:d1:c9:3f:a1:23:c6:
eb:de:e4:5f:2d:53:23:39:a6:49:ff:9b:5f:25:8f:60:d6:62:
30:b3:e2:0b:61:0e:12:2c:4f:36:b8:27:cb:89:3d:01:29:91:
cf:e9:53:04:08:6a:5f:c3:5f:86:89:49:30:2a:43:36:29:6a:
10:fc:6b:f6:6b:97:d7:f8:27:11:83:49:8b:99:28:d3:0e:cb:
02:30:79:82:ee:02:b7:84:5f:91:f3:86:3e:b5:07:83:d8:f3:
89:41:40:43:3e:45:bd:0f:21:8e:f9:8c:fe:08:aa:75:c2:0d:
0b:12:3e:b8:54:45:8a:48:57:05:36:7e:1f:a8:88:66:ff:f3:
0f:ae:26:83:fc:ce:0b:d8:0e:1f:dc:9b:59:5f:b1:24:7d:ed:
45:5d:f3:43:29:24:3e:67:1a:c6:18:4b:56:fa:73:69:99:57:
a2:fe:9d:55:30:36:58:dc:8e:63:c3:5a:5a:09:b9:46:ef:05:
bf:f8:97:75:1a:55:4d:ae:31:36:d2:23:71:98:df:cc:ad:26:
9f:0c:6b:33:cf:f0:bb:b7:e2:df:c2:a5:cf:d8:ee:79:85:b4:
ad:82:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:23:06 2025 by rpki-client