Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: NVwdJcKrbNxUFmuqDNAZOIQIkd/m0udT/TmMBWYWNUg=
Subject key identifier: 21:01:14:44:3B:4B:24:6B:4C:8D:DD:6F:AA:93:D7:25:04:D9:AB:EB
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019873E257E1EC4E5C214E13125F6BE347E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 12C2
Signing time: Mon 04 Aug 2025 07:01:10 +0000
Manifest this update: Mon 04 Aug 2025 07:01:10 +0000
Manifest next update: Tue 05 Aug 2025 07:01:10 +0000
Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: K36MfDM8ApLmb0ISzstHB2J9MaftBG2wjzZx4E08hK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:57:e1:ec:4e:5c:21:4e:13:12:5f:6b:e3:47:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Aug 4 07:01:10 2025 GMT
Not After : Aug 5 07:01:10 2025 GMT
Subject: CN=210114443b4b246b4c8ddd6faa93d72504d9abeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:19:bf:ef:3c:ae:11:7b:97:54:c3:0f:6b:
3a:e3:8f:91:4e:0a:63:bc:b8:ee:ef:78:e6:ec:fc:
be:ce:f3:88:c4:fe:70:31:9d:b9:7b:16:ae:8a:53:
41:46:2e:63:dd:89:97:10:e0:72:3f:03:19:5c:8e:
c3:ad:f8:50:9b:6a:fb:80:ce:f8:0e:86:ca:57:31:
e2:fa:cd:56:72:dd:59:7a:53:60:c9:fe:0e:21:01:
dd:c7:05:e9:1b:88:2a:02:49:6a:89:2b:84:fb:47:
c0:03:d7:9c:e5:00:72:30:6b:ea:d7:6f:07:50:98:
49:36:5a:2e:3f:88:d8:f7:db:74:e3:0f:86:14:d3:
92:19:20:86:6f:0e:19:ca:e8:60:7c:8e:ab:1b:a2:
6d:70:01:b0:5b:bf:dd:10:6b:b6:9f:43:99:9a:f4:
a7:df:63:04:49:85:6c:b3:ff:a4:09:b9:ef:31:ce:
55:81:24:65:22:83:4d:82:a1:3c:bb:fe:7b:f5:8e:
fb:55:58:2f:29:cd:1b:f1:f8:76:9e:c2:0b:1e:c0:
3b:ec:c3:e4:ac:f4:00:95:3d:55:84:d6:a0:04:14:
75:26:4d:00:97:00:43:97:49:a6:a9:da:66:ad:86:
3b:9e:aa:83:8a:6e:46:ee:64:79:45:46:99:75:a3:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:01:14:44:3B:4B:24:6B:4C:8D:DD:6F:AA:93:D7:25:04:D9:AB:EB
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d0:33:cf:74:70:b7:6d:97:78:f7:a6:3a:f1:a0:7b:82:49:
9e:43:09:fd:bd:d0:3a:0d:9a:53:0f:85:4a:62:92:2a:5c:c7:
e3:52:44:0b:82:f7:04:ec:d1:22:b3:8d:44:ea:2d:70:2f:e5:
1a:d9:f4:05:f6:26:18:e9:3b:c7:6b:f2:5f:03:b8:26:fc:66:
7e:99:67:70:4a:c9:be:6a:9c:14:c6:40:85:54:77:70:6f:e1:
61:78:9c:52:e1:51:b1:98:71:d5:3e:10:15:39:a6:18:92:9b:
b8:fd:88:c4:9e:a0:ba:36:22:e8:45:e6:d8:33:a7:e0:56:08:
70:72:f8:d9:7a:16:7d:62:36:c7:49:56:d2:a1:66:7f:51:e7:
a5:ab:27:6c:65:ea:0d:ef:41:29:78:ef:3d:6e:34:af:1e:e2:
0e:11:b5:2d:d1:42:d7:13:fc:9c:bd:51:0c:74:67:a3:74:b4:
93:40:76:f0:dc:01:cc:21:90:66:2d:80:e2:d0:ab:28:ff:86:
d4:59:db:24:8a:08:6f:7c:8d:8a:22:68:53:5d:7d:d4:b3:9b:
7c:b8:e8:55:eb:77:c3:23:11:b4:5a:33:7a:e9:76:af:6c:5e:
28:97:07:25:e4:34:68:2c:18:95:d6:c3:8c:5a:4d:3d:83:52:
f6:fd:1a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:01 2025 by rpki-client