Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: UihHij0YUYk7mGgpbaQzfmCI52c05MyGKof2vRvZdDc=
Subject key identifier: F8:53:1D:CF:2C:4B:BA:4B:E0:EF:6D:E1:4E:D1:AF:CA:A3:9E:27:5F
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 01988DA1A266DE138F8A7255572A3D77383E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 05B5
Signing time: Sat 09 Aug 2025 07:00:36 +0000
Manifest this update: Sat 09 Aug 2025 07:00:36 +0000
Manifest next update: Sun 10 Aug 2025 07:00:36 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: L+37u8DM8TlWNg3GlBeqXOoye68DntCX7UqzpryBCSI=)
2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:a2:66:de:13:8f:8a:72:55:57:2a:3d:77:38:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Aug 9 07:00:36 2025 GMT
Not After : Aug 10 07:00:36 2025 GMT
Subject: CN=f8531dcf2c4bba4be0ef6de14ed1afcaa39e275f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:3f:be:ff:14:e8:04:10:38:c5:1e:9f:e5:
c2:f2:f8:16:d6:d1:9f:5c:37:22:9d:38:f8:f2:be:
8b:be:ac:5c:69:f9:17:b6:f2:fe:1d:e3:83:ae:cf:
3b:3a:80:16:26:25:11:4a:e3:9c:f6:1f:13:6d:f8:
e7:f6:3a:04:05:76:bf:bb:bb:e1:e9:72:48:17:c4:
86:a0:8f:92:59:57:53:7e:d1:8f:6a:c5:e9:48:04:
4a:b4:3f:ab:5d:83:4a:a6:5c:98:07:5a:72:d2:5d:
54:11:50:24:45:12:a0:ed:17:1b:3e:1a:6c:4f:dd:
13:35:05:76:dc:aa:97:4a:82:ba:4b:0a:8e:6d:0f:
c5:17:3a:55:1d:c9:12:03:99:01:c4:81:3f:63:fb:
94:76:5d:41:58:4d:87:07:94:eb:46:f2:8e:11:bd:
97:17:1d:eb:97:45:0e:e3:6b:18:c7:96:7d:66:ca:
a7:ff:8b:aa:4d:d0:a5:78:85:36:dc:0c:1d:59:29:
a9:92:07:42:cb:26:d6:74:94:08:95:60:6f:a4:75:
14:6b:b7:49:35:e6:00:2b:8c:d6:84:d0:48:d7:02:
a6:c2:d8:55:e2:f0:bd:92:67:89:23:7e:13:82:59:
9c:69:db:8e:35:7c:b8:34:cd:65:e4:66:5c:e8:2a:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:1D:CF:2C:4B:BA:4B:E0:EF:6D:E1:4E:D1:AF:CA:A3:9E:27:5F
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:1f:05:2c:b2:2a:34:50:3a:ad:55:0a:81:78:50:6f:3e:f1:
0c:4e:5d:48:22:a6:d7:91:cc:53:e4:0a:e7:bf:84:60:d3:50:
90:75:d3:ef:50:41:02:5d:22:00:25:a1:84:97:ae:a9:ad:53:
08:b4:46:b4:97:cd:27:b9:e1:25:e4:a8:22:c8:7f:ea:1e:fc:
df:19:ce:25:77:63:ff:b2:b1:b6:0b:73:81:c9:3b:31:33:6d:
81:fe:73:c3:33:1d:aa:fc:c4:4b:c7:6a:ed:65:9c:83:cd:fb:
5f:18:ce:6b:4d:ea:27:00:ba:25:a0:bd:e2:29:c4:bf:1c:ae:
f2:c1:e3:45:f2:19:c7:71:58:f2:ed:f2:93:88:3d:65:e6:29:
ca:5b:36:ce:93:5f:9b:d4:7b:39:19:39:a1:fb:1c:94:22:bd:
bb:c6:6c:20:d5:73:cb:56:06:05:df:fc:81:d6:5e:2c:d9:53:
05:21:52:a3:e0:2d:a4:37:1f:b5:cf:28:68:9b:3a:96:52:bd:
1e:17:6f:99:63:0f:25:2b:e7:4a:56:41:14:ec:a0:48:d6:41:
4b:d5:61:73:d2:52:45:07:71:47:79:7b:b4:0c:78:a5:a7:55:
bd:20:3a:32:9c:c5:e8:fa:7b:69:fd:68:92:3f:d8:2f:12:49:
fb:15:e0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:48 2025 by rpki-client