Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
File: fSroDN5c12nI8UTmwmYRO_rt7D4.mft (raw, json)
Hash identifier: 4u/iRT9vPdC2+czSLQMGsjfP0XhhHvD7vp6dQpm0/sY=
Subject key identifier: 5B:B5:08:C5:7A:13:A4:DD:6C:AF:BE:AF:32:49:A4:CF:BF:26:93:5F
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Certificate issuer: /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial: 0198838C251BDFA461804E9674A9515405BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 08:00:56 +0000
Manifest this update: Thu 07 Aug 2025 08:00:56 +0000
Manifest next update: Fri 08 Aug 2025 08:00:56 +0000
Files and hashes: 1: fSroDN5c12nI8UTmwmYRO_rt7D4.crl (hash: YDR/WF5sR+Kk6slk/WnirfXoF+GYWknnMgVRshO2DII=)
2: sxNlViRMFBeyCKHK1V0sQojloaU.roa (hash: B7neqRuXw3EzuRHFQ3Xdq+BC5xmWvSgD18hq8QHGols=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:25:1b:df:a4:61:80:4e:96:74:a9:51:54:05:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Validity
Not Before: Aug 7 08:00:56 2025 GMT
Not After : Aug 8 08:00:56 2025 GMT
Subject: CN=5bb508c57a13a4dd6cafbeaf3249a4cfbf26935f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:97:a8:eb:3d:a4:c5:41:3d:e4:9c:34:81:c9:
0b:d8:8e:28:22:48:80:65:60:7f:8e:8d:b7:8b:6e:
2e:76:dd:7a:2b:1a:b4:a8:16:35:28:22:ef:e4:86:
72:0a:bb:29:37:4e:ac:b2:71:6c:af:55:5d:db:f1:
e7:49:16:bf:05:20:02:78:a2:d6:64:9c:32:e3:69:
f2:8a:93:d0:e1:46:9f:28:80:1a:22:53:c8:ee:39:
f9:80:47:b5:14:4d:67:e9:c4:bb:b1:03:46:b2:4b:
64:57:0d:f0:c5:b3:44:98:59:be:2a:fa:1d:23:50:
a4:e9:3a:64:8a:f6:00:b4:df:b2:2d:13:8a:02:a1:
ee:ec:3f:69:99:0d:a3:72:c4:22:49:78:ba:55:56:
78:4e:16:a8:f1:fc:0c:a1:32:b5:6c:8e:65:e6:a9:
2f:80:74:33:97:f0:50:7c:38:91:5e:41:0e:3e:46:
10:9a:9e:c2:02:5a:f1:6c:a0:c3:b5:f4:b7:48:b5:
76:d1:e3:9c:28:a7:35:0c:ee:a0:22:2b:b5:3e:25:
c8:a3:8e:e1:17:83:b1:64:cc:ca:3e:f5:e8:26:56:
31:05:40:b1:36:46:78:ad:7c:31:9d:de:ae:d0:c2:
c6:15:c4:ce:de:60:79:7a:ce:5a:df:2c:59:aa:5c:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:08:C5:7A:13:A4:DD:6C:AF:BE:AF:32:49:A4:CF:BF:26:93:5F
X509v3 Authority Key Identifier:
keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:a5:0d:50:7c:c7:2a:cc:d2:8a:2e:f0:c2:f3:f6:63:a4:
57:9f:15:ff:54:ec:37:2b:e5:e0:f8:8b:a1:99:aa:a5:ca:c1:
e1:3e:31:fb:f3:89:90:fb:af:4d:2e:c8:af:6c:c3:69:eb:38:
31:46:d5:bc:55:83:b6:b8:2f:6f:29:51:da:38:dd:e8:f2:92:
ed:01:63:37:88:af:c2:c4:a0:58:20:11:a6:2f:a5:31:a4:59:
93:95:68:57:c2:c3:e9:d9:27:ca:2c:e8:45:6b:9f:c0:c2:12:
2c:e8:5d:c8:2d:24:4f:b6:12:68:96:33:51:7c:a8:32:71:41:
36:ea:1f:56:eb:81:15:9e:69:90:45:b1:13:36:75:5d:32:1b:
24:16:ed:2e:33:38:3e:2a:71:5d:39:c2:35:08:7f:fe:8b:fb:
14:46:c4:8e:22:45:99:69:59:1d:ec:7b:9a:ae:48:a5:56:b6:
31:e6:cc:f2:3f:5b:6a:ad:d2:ec:24:e3:f8:10:f7:c6:0d:f8:
65:98:89:22:b0:86:bc:d9:41:2c:bd:f4:49:d0:af:c5:bb:68:
a0:78:ea:b1:69:b6:41:e0:9f:f8:df:42:cc:98:92:7e:ae:f2:
38:c6:2d:4d:16:29:32:70:9c:92:85:af:58:0f:39:5b:08:c2:
34:37:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:13:01 2025 by rpki-client