Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: kIeWUEQ3orssGK3Q6bW8f5iQM1cnRyqooWmxEXNBrL0=
Subject key identifier: 3E:D8:68:01:E6:02:34:E7:44:08:93:F6:BE:0D:A1:60:3A:42:4F:DB
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 019879ADF769DE3CBDECA60AD5D57687FE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 0FF8
Signing time: Tue 05 Aug 2025 10:01:40 +0000
Manifest this update: Tue 05 Aug 2025 10:01:40 +0000
Manifest next update: Wed 06 Aug 2025 10:01:40 +0000
Files and hashes: 1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: 2MLtMeYDbTft3kB8NZVDvkXUe5Z1zjfa2EcEkpOSby0=)
3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:f7:69:de:3c:bd:ec:a6:0a:d5:d5:76:87:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Aug 5 10:01:40 2025 GMT
Not After : Aug 6 10:01:40 2025 GMT
Subject: CN=3ed86801e60234e7440893f6be0da1603a424fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:1b:7e:2c:b5:34:74:9a:04:8a:3c:f2:25:
2c:ef:fc:4f:2e:65:46:82:20:de:b8:56:5b:86:30:
e4:84:42:94:f4:62:66:bf:45:3a:71:15:4f:af:1a:
b3:83:b5:4e:d1:7a:1e:a7:22:f4:8b:7d:49:f6:64:
bb:e8:ab:94:a1:9e:14:f6:e8:d6:2d:0b:ff:b1:d6:
83:62:e1:1a:6d:bf:08:92:56:ce:0f:aa:6a:74:7f:
18:bc:fe:21:8c:f0:02:da:dd:81:b1:6c:50:8a:31:
d5:8b:0f:01:ea:6b:4d:59:42:7f:5a:5c:23:3c:ad:
2a:38:d5:0c:52:38:ad:d4:5c:9d:fa:2f:a5:f4:32:
14:66:e4:6e:ed:cd:09:0a:ad:80:de:7e:2a:2a:72:
3f:c5:07:d2:e1:b4:3d:04:05:ff:48:6a:41:d5:1e:
97:cc:3d:7b:b3:ee:ba:4c:8f:95:b2:60:50:c9:48:
d3:fd:db:ff:c5:43:d7:88:8a:21:d4:aa:ce:43:df:
55:e9:10:63:6f:e4:de:39:37:c5:ef:28:06:3f:46:
fa:83:ee:54:ae:b7:6e:03:01:01:7b:5e:c1:ac:a7:
6f:0b:3d:b1:30:86:47:32:61:ae:f6:c7:db:78:69:
cb:31:ce:3f:d7:4b:e3:db:10:ef:96:45:be:8f:96:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D8:68:01:E6:02:34:E7:44:08:93:F6:BE:0D:A1:60:3A:42:4F:DB
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a5:3a:2e:86:b0:4d:18:ce:76:e8:65:df:f2:a7:55:8e:ec:
5c:25:90:9c:25:9d:0d:b0:7e:16:1e:42:5a:1f:6b:27:02:55:
82:51:ee:6c:13:c3:fc:7d:40:9d:12:d5:8a:05:8e:07:c5:e2:
6d:ef:d7:d7:43:20:91:fc:85:f5:7b:3d:f7:c9:91:68:55:cb:
5d:1e:28:45:fb:16:48:e4:5f:c1:4b:9c:75:8e:e8:ce:94:d9:
a7:d5:41:eb:81:76:dd:75:87:c7:85:34:c1:ae:7f:59:0b:13:
c2:c5:d8:39:ef:30:31:5e:fb:73:cc:f6:3d:44:18:42:55:69:
da:f7:c8:42:f6:39:78:2e:a9:ce:1b:c5:b1:95:7f:2a:df:d1:
40:b5:bb:5c:c1:73:c0:f5:f4:b1:49:95:68:25:61:4c:ea:4f:
c0:9c:00:82:7a:40:c3:0a:e4:91:00:2a:16:dc:01:7f:bc:4c:
66:e6:ea:23:e0:e6:b6:d9:b5:8c:0a:5c:23:03:fa:1b:18:60:
df:9a:f1:9d:c0:cd:6d:14:93:cd:90:f9:49:74:4c:21:c5:c7:
83:b3:db:f9:6e:66:b6:f0:be:3a:64:44:1e:a7:69:c9:05:95:
e5:7b:2e:69:f2:aa:19:99:27:91:ad:d4:11:b2:4c:f5:03:1b:
f2:b2:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:28 2025 by rpki-client