Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: w8REzcINvhlHAxFSRpEvO1Z95VTfua3onUjuJrgb52k=
Subject key identifier: 8B:7C:9E:82:99:45:59:EA:31:C5:38:D5:A3:17:D3:D0:1D:8E:B1:A9
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 019897808C9735ABE78BC35DF06A140FB173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 05:00:40 +0000
Manifest this update: Mon 11 Aug 2025 05:00:40 +0000
Manifest next update: Tue 12 Aug 2025 05:00:40 +0000
Files and hashes: 1: W6ZuDAGnWoDaEzlWI7u6oQknSmA.roa (hash: OmbyY76V+595ZQjAafvVZcWcNGfzKgZ8Ut3VoJKhN9E=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: eA7gLoW0MDgLIpgpyGJiPdHuIVvYa9M93gnke7IfNXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:8c:97:35:ab:e7:8b:c3:5d:f0:6a:14:0f:b1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Aug 11 05:00:40 2025 GMT
Not After : Aug 12 05:00:40 2025 GMT
Subject: CN=8b7c9e82994559ea31c538d5a317d3d01d8eb1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:81:bc:a8:04:17:9b:4a:ea:5e:b3:58:60:
1d:e2:91:cf:15:9e:63:5c:04:2f:3b:56:15:5d:f1:
10:53:7b:fd:77:eb:a8:58:16:e7:dc:a7:8d:46:87:
a3:3f:3f:59:a1:4c:ad:e9:36:dc:8d:b7:60:58:02:
87:8d:db:31:d2:8a:9a:9a:20:7d:1d:3e:ee:2b:11:
7e:b1:bc:8f:e5:32:32:73:5b:f0:0e:3c:06:b2:f5:
98:b1:be:a2:cd:dd:c6:b9:9f:54:32:2e:14:24:39:
e1:4e:74:ea:f7:4b:0a:8a:38:84:f1:10:88:d4:52:
a4:08:01:9b:bc:33:85:77:96:4c:f1:bf:33:ca:58:
f2:b4:35:bb:9a:45:34:f3:12:14:fd:c2:b6:b6:57:
70:36:60:53:2c:21:ce:5f:2f:26:f7:d2:5d:eb:1c:
c6:07:3c:08:42:84:26:3c:2d:13:6d:1c:07:19:fc:
8c:b8:7d:d2:a6:e4:a7:7a:91:5e:e7:61:f6:7d:5a:
26:80:34:ed:ea:3a:0b:cb:7f:a7:0b:b5:21:f9:11:
b8:bf:9c:a7:22:5b:9b:30:07:d9:e0:6d:46:84:c8:
61:33:cb:a3:e8:c2:3b:31:1e:b8:36:65:a6:30:3d:
49:f2:35:89:f8:a2:ad:be:aa:5e:ba:0e:fb:6d:08:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7C:9E:82:99:45:59:EA:31:C5:38:D5:A3:17:D3:D0:1D:8E:B1:A9
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:00:c9:e9:f4:56:42:1b:a1:9c:8b:71:d1:a9:2d:a0:2a:7c:
c8:3c:2a:7c:9b:a7:99:d2:bb:33:0e:ab:f0:25:62:cc:40:3d:
f7:b9:6e:24:f9:ef:fe:af:6a:ad:f8:b8:ae:9b:d9:24:d7:b9:
ec:09:e1:3e:20:c0:6d:bf:b9:f5:27:78:80:d4:94:ba:7f:e2:
51:b9:a9:fd:e7:0a:98:08:4f:44:8d:42:91:94:97:a0:d0:78:
a2:c4:a7:6d:37:d5:3b:3f:2e:7a:e4:97:a0:3a:21:0c:c0:e4:
05:b0:a3:9d:dd:d8:42:64:0e:a1:54:67:10:c7:90:86:4a:18:
00:5d:e5:80:c8:95:ae:40:66:ab:94:ca:78:4e:d5:bc:a9:e0:
ee:fe:91:6a:de:58:61:80:25:cd:75:e1:00:4c:3d:c9:01:7d:
b5:17:78:8e:30:d6:1b:f0:66:41:e9:72:0e:cc:b5:3b:2d:23:
06:2f:87:4f:1a:cd:88:c4:07:b4:1b:9e:f2:9d:95:1f:b0:6c:
ef:6c:db:ac:8a:78:64:28:15:9b:ca:fc:28:50:72:ea:ca:8e:
b5:ce:7a:a5:80:8b:a4:45:b1:55:b3:10:33:00:4b:5f:21:b0:
f1:76:2b:74:c6:85:d1:79:ba:ad:97:48:29:31:1c:25:49:b6:
36:f2:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:44:46 2025 by rpki-client