Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: 6ytsbiekrNsnL7gdmceHbvohWzTQTb7tG/y+Q2hNuBk=
Subject key identifier: 3D:CE:2A:3C:5C:87:D2:5F:52:E7:1F:56:88:CF:EB:D3:AC:9F:D3:65
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 01987C40B1EB57C9ADF4B0417E70ECD32EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 05C7
Signing time: Tue 05 Aug 2025 22:01:11 +0000
Manifest this update: Tue 05 Aug 2025 22:01:11 +0000
Manifest next update: Wed 06 Aug 2025 22:01:11 +0000
Files and hashes: 1: 8Rj91VmErY8nG9AvttlpyE1wLJw.roa (hash: M9Ao53zeBk6GPnJYr5ZYdgrGPitX+aJ7EjLXG/7qqNM=)
2: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=)
3: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=)
4: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: 1vF4+2Bvv6OXLbL7X+E32kF1c9aGTrkfEDS2WfDSuEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:b1:eb:57:c9:ad:f4:b0:41:7e:70:ec:d3:2e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Aug 5 22:01:11 2025 GMT
Not After : Aug 6 22:01:11 2025 GMT
Subject: CN=3dce2a3c5c87d25f52e71f5688cfebd3ac9fd365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a4:69:c4:d2:85:74:d8:2e:f1:9c:a0:c4:32:
89:0b:3b:5c:5c:91:15:f6:bd:c8:4c:53:a0:e6:20:
90:85:ee:2b:8a:6a:18:c7:ae:27:30:c7:db:37:39:
6b:10:bd:18:4e:ae:46:4f:f2:25:53:9c:46:44:c3:
bc:b6:aa:7d:ef:fe:02:1f:21:52:b1:49:6f:97:f5:
f8:3a:6c:c8:85:c5:bf:c8:02:ee:ed:25:85:c4:1d:
a6:c6:bc:65:90:5f:f5:ef:5b:a6:d7:4c:a0:89:bd:
e6:9f:6d:ec:10:81:73:00:d7:47:3b:77:93:92:2d:
dc:21:e7:5c:7a:a5:06:62:0e:7c:4b:e0:2e:53:50:
54:8e:24:1c:a2:b8:23:6d:e6:2f:b5:d2:48:dc:36:
ba:b5:58:07:39:9f:02:98:70:89:e0:63:bb:c9:a6:
2e:5f:eb:37:0a:16:2b:2a:ca:b6:96:d5:a7:56:af:
e0:6e:96:52:52:6d:09:f7:70:11:f1:41:a0:d9:e6:
29:4b:c2:f7:49:dc:5e:0d:9d:1a:88:50:d2:49:10:
fa:5b:17:c8:78:9c:4f:40:cd:07:6d:ab:1f:f8:ba:
97:a8:18:47:80:50:b3:47:32:ca:61:a0:bb:16:70:
d0:1b:95:5c:09:fd:94:6c:22:de:65:a6:0f:60:7d:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CE:2A:3C:5C:87:D2:5F:52:E7:1F:56:88:CF:EB:D3:AC:9F:D3:65
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bc:4b:63:7d:47:9c:1b:b1:f2:e6:cd:12:b0:83:1b:fe:08:
03:0a:3f:93:16:d6:0b:fb:b9:91:13:41:04:28:30:2c:a3:aa:
47:46:70:73:1f:72:d6:9d:e2:fa:cb:84:b2:39:95:1d:b2:f3:
f2:a9:de:c7:3f:e2:27:b5:79:10:f5:6a:8d:c0:a5:4a:47:c2:
86:c4:d8:c5:4c:46:25:cd:0b:46:31:57:93:fe:5b:fe:77:0e:
1d:7d:36:2e:0b:76:f7:f8:2a:08:b8:80:05:67:08:bb:07:14:
54:56:e2:1f:92:da:91:df:b6:34:d4:65:2e:b4:b0:49:33:bd:
38:17:86:1c:78:ed:dc:7f:84:23:0f:7a:99:1e:e7:4a:26:82:
77:8b:a4:02:8c:b0:ee:50:9c:7b:c9:3c:68:ae:6c:a2:f3:32:
6f:3e:b5:ac:8a:ef:c7:b0:2a:80:84:96:b0:1c:42:8d:d9:78:
5c:15:f0:ca:cd:58:32:e8:44:77:14:81:35:0d:48:8c:39:5b:
15:d7:62:a8:51:af:ad:0b:2e:35:5d:2e:d6:93:93:f2:52:57:
dc:f0:5c:cb:59:0f:d1:76:07:e5:81:2f:5a:76:41:c2:b0:95:
85:45:7f:6d:2c:ce:67:02:91:f0:74:c4:3e:8a:53:6e:eb:18:
23:59:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:18 2025 by rpki-client