Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File: fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier: gS8Xp6cbAMB/5BvRWfesaLUNuNvQlt9/YZwpwD0oGCY=
Subject key identifier: 3A:50:6D:58:9F:74:10:DA:53:F1:07:EB:0F:17:CF:DB:09:DE:80:D3
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer: /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial: 01987D8B2453C0949317070F167D3A6DF708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number: 06F5
Signing time: Wed 06 Aug 2025 04:02:07 +0000
Manifest this update: Wed 06 Aug 2025 04:02:07 +0000
Manifest next update: Thu 07 Aug 2025 04:02:07 +0000
Files and hashes: 1: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (hash: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=)
2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: t6duUFmRZKsqjWyXLfLA8IhPfH/laSiQCliXP4uvtO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:24:53:c0:94:93:17:07:0f:16:7d:3a:6d:f7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Validity
Not Before: Aug 6 04:02:07 2025 GMT
Not After : Aug 7 04:02:07 2025 GMT
Subject: CN=3a506d589f7410da53f107eb0f17cfdb09de80d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:18:db:18:4a:40:ce:43:68:41:ef:07:b1:
75:aa:c9:52:0c:c1:5b:0f:36:d1:ce:85:b9:c1:d7:
85:a7:ba:2b:31:0b:95:95:bc:0b:b5:3c:3f:a8:6a:
92:ed:a4:65:65:19:58:37:31:c6:e1:e4:d2:64:d5:
ef:88:a3:ef:9b:0e:06:7d:72:e3:b7:d6:b7:8f:18:
6c:42:6b:16:7d:c1:3c:73:a1:4a:cc:10:b7:0d:59:
88:4a:76:b4:ca:ec:28:ac:e5:e7:89:3f:a1:b6:12:
55:73:cc:a4:88:da:64:f7:39:92:f6:ee:fc:79:0f:
c3:49:93:0a:b5:81:65:09:3b:6f:2c:a1:8d:a4:2d:
30:ff:f0:d9:c9:ca:62:b2:86:93:bb:62:77:b9:79:
3d:5e:f4:a2:d7:f1:11:2c:da:ed:7a:43:04:13:62:
33:b7:9f:ca:18:49:89:0e:88:31:c1:64:74:c7:09:
78:98:e0:16:b4:ff:30:7d:1f:84:b1:ce:a1:29:f6:
c1:10:98:64:14:ac:e5:11:a1:a3:0a:28:13:9c:8f:
e6:17:48:2b:d8:6f:55:7c:4c:bc:d9:06:ef:b5:bb:
d6:ec:82:05:15:5e:8d:40:35:74:7e:f2:ee:fc:0f:
b9:74:69:f6:2c:33:b7:ec:e2:db:c1:ad:ba:8a:18:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:50:6D:58:9F:74:10:DA:53:F1:07:EB:0F:17:CF:DB:09:DE:80:D3
X509v3 Authority Key Identifier:
keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:53:2d:21:b5:a0:1b:7a:1e:dc:12:df:be:c5:3e:a6:d6:2a:
ac:85:c0:b5:fe:a9:e8:cc:c6:bd:b9:22:2d:0c:3d:ca:dc:bc:
7f:85:2b:59:dc:58:3e:b1:df:65:bb:88:52:c2:18:5d:28:23:
cf:a4:66:e0:4f:14:22:a7:6f:64:8a:ed:fc:50:d7:84:cb:c4:
ac:3b:79:48:4d:f3:af:f5:9c:f6:d7:85:e6:dc:f6:7b:4b:db:
96:0b:06:8f:01:89:20:78:13:9e:bd:4f:28:37:4f:5b:52:3c:
40:5b:9f:2c:0e:01:96:1b:f7:ca:bb:e7:95:5c:5d:40:f0:0e:
ed:23:48:b9:6a:4a:f6:ef:a3:62:7b:95:75:0e:d3:58:85:5f:
75:6e:03:70:f0:d9:67:3b:6c:e3:87:68:31:3d:24:f1:6d:3c:
42:6b:e3:42:88:98:81:fa:86:60:04:6f:6a:67:ef:ab:c7:5c:
2a:66:b0:83:cf:c2:b8:c5:2d:61:79:16:59:1c:49:8a:f1:67:
dc:b0:a7:72:74:60:b9:36:f6:5a:23:4c:06:b2:b7:df:10:9c:
6e:c2:63:db:fb:18:e1:4f:c0:50:73:72:6f:fe:5c:5d:77:d3:
83:a8:79:37:d5:a1:27:e3:f0:51:65:04:d8:66:9e:9e:2c:28:
ce:9e:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:08 2025 by rpki-client