Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: lWZlC4eK0HWQM7dI1hdvmcw5JYvyWv4B3LtbEyKLTlQ=
Subject key identifier: AE:C8:14:C5:AF:9D:6A:35:51:3A:50:3D:6C:01:0C:58:B1:13:F8:AC
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 01987ED3E72940981D83AD8841407958C091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 10:01:13 +0000
Manifest this update: Wed 06 Aug 2025 10:01:13 +0000
Manifest next update: Thu 07 Aug 2025 10:01:13 +0000
Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: C8Hsh+Vzm5IYgua45GHhomSkemKdAPgDBawWUbCMvrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:e7:29:40:98:1d:83:ad:88:41:40:79:58:c0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Aug 6 10:01:13 2025 GMT
Not After : Aug 7 10:01:13 2025 GMT
Subject: CN=aec814c5af9d6a35513a503d6c010c58b113f8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:cd:06:32:9a:a6:2a:e8:46:aa:0f:18:0d:
d7:19:ef:84:51:86:b7:83:59:96:91:32:7d:4a:2f:
73:ee:69:3c:7f:b9:23:7c:0c:2a:a8:74:2a:af:ae:
14:f1:57:83:7f:cc:64:ea:21:c3:a2:2f:91:f9:16:
8f:5e:59:e3:95:f8:72:39:8f:6a:b1:a3:96:ea:29:
05:06:8c:f5:55:2f:0e:14:5d:3c:26:17:ec:70:62:
eb:c1:35:e7:e3:d3:3e:df:43:b0:60:8d:41:22:ee:
16:81:41:62:b0:4a:96:92:c3:e6:b1:cd:04:db:a0:
8f:89:b1:30:b7:39:08:88:f7:b0:10:83:5c:13:bf:
3d:f6:36:41:78:cd:52:d5:7d:1b:4b:ec:2f:10:6a:
8a:09:e0:08:79:42:93:fb:a2:43:37:26:d1:73:8e:
7e:d8:15:81:9a:49:2f:b4:7c:ca:b1:54:0d:0f:8f:
c2:d0:7e:4b:1a:24:81:24:d9:cc:0c:1d:98:cf:6c:
cd:3d:9c:a3:57:41:87:55:fe:2d:32:2c:0b:2f:85:
8a:05:ae:dd:f2:f5:05:30:cd:d1:80:24:65:cc:b6:
9f:c2:4d:60:82:6f:95:5e:89:e9:d1:bb:7b:d4:9f:
eb:22:5a:bc:c8:05:20:3b:49:8f:9d:f7:52:ea:0d:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:14:C5:AF:9D:6A:35:51:3A:50:3D:6C:01:0C:58:B1:13:F8:AC
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:77:be:a4:3d:67:b0:f4:ee:97:5f:2d:30:13:d3:98:2c:18:
b9:8f:70:d7:24:1e:91:52:79:01:04:d5:43:76:4d:ef:47:c3:
3a:c1:90:cd:e0:31:2b:c7:8e:d7:e0:e2:a3:b3:a5:a9:d0:5d:
d8:12:b4:d4:9d:3f:d2:f3:36:ea:e9:c0:08:35:74:d0:a0:16:
a5:c8:97:63:52:c5:11:36:c1:9a:15:52:3d:25:a1:34:09:d2:
dc:96:bc:94:af:39:d8:6b:de:55:ea:e1:40:12:2c:f4:ec:fb:
67:b9:e9:40:7f:91:72:5b:91:09:cd:8e:88:48:98:d7:cd:6b:
15:0a:aa:76:64:8f:02:ad:2d:33:99:ab:f0:85:c6:99:97:4c:
d3:5a:30:c4:ab:3a:78:8c:3c:bb:71:7f:1a:c9:91:6a:38:99:
b1:6a:0d:3f:b7:c8:51:ea:09:0b:fe:9b:95:d2:7e:3a:59:3e:
f4:a5:44:48:16:0e:1c:6d:4e:e5:8e:9e:f7:80:00:8f:e4:1c:
32:cd:f6:00:48:83:dc:49:91:a2:02:a0:05:c8:b5:e3:f9:60:
25:21:bd:6b:d5:b2:9d:7b:ed:80:57:f0:60:57:de:3f:c1:12:
eb:56:65:e0:00:1e:e6:66:a5:83:a2:86:b6:62:50:60:54:d5:
30:2f:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:20:13 2025 by rpki-client