Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: YJG34N919Ks7xT1+m69SnmavXwSnyZVGaqUS3XgUQHc=
Subject key identifier: DF:98:EA:D8:28:8B:87:A1:BB:6A:AD:D3:DE:94:17:A4:53:8D:72:1F
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 019872CFA0787C0399013F626CFC6AC09B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:01:06 +0000
Manifest this update: Mon 04 Aug 2025 02:01:06 +0000
Manifest next update: Tue 05 Aug 2025 02:01:06 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: EzHai1sfBdZ2hsaMmckU0ZsomZyIKLKfHJ8vU1cMhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a0:78:7c:03:99:01:3f:62:6c:fc:6a:c0:9b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Aug 4 02:01:06 2025 GMT
Not After : Aug 5 02:01:06 2025 GMT
Subject: CN=df98ead8288b87a1bb6aadd3de9417a4538d721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:d2:91:2a:6b:c0:79:5d:e1:95:f6:49:2a:
63:01:af:0c:f6:b5:9f:64:84:c8:33:4f:05:d4:52:
4b:6d:b3:47:2e:5d:69:87:cc:69:ce:54:3b:23:fe:
d3:39:25:05:b1:b5:68:0c:25:f5:7e:a5:b6:39:89:
b3:0c:c2:eb:ce:7c:0b:40:7b:d2:a8:56:fc:73:4e:
62:be:3f:f4:a8:04:2f:98:67:f3:e1:1d:0d:c6:ab:
40:e9:c2:6b:5b:94:8b:90:08:d9:e1:d3:1c:da:f0:
41:aa:8c:f5:0d:57:1e:f2:5f:59:a6:98:13:8c:6c:
70:07:af:ef:9b:56:21:2a:2f:cb:e7:3a:ef:49:f9:
4e:2e:1a:72:16:83:f3:b8:f2:67:22:ce:25:41:49:
41:22:35:0c:2c:6b:94:7e:d1:9a:86:79:77:97:31:
a2:ea:eb:e1:0d:69:02:b0:0e:6f:e2:f9:86:18:dd:
39:90:c6:7e:2b:da:ba:72:e1:0a:ab:c5:5f:e5:5c:
4a:b4:6f:2c:ec:72:1d:2b:a9:79:86:d8:66:21:53:
2e:16:df:f6:be:ce:1b:50:81:7f:e5:1f:fc:8b:4b:
0f:34:71:dc:0e:fd:7d:1f:ef:75:50:29:f7:cd:26:
64:5c:26:70:31:d7:66:20:8e:cf:c1:a8:19:dc:9f:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:EA:D8:28:8B:87:A1:BB:6A:AD:D3:DE:94:17:A4:53:8D:72:1F
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:30:6b:48:31:31:71:2b:ca:5e:e7:4d:f6:72:25:e1:df:89:
8d:94:32:a0:7a:b7:02:f6:73:10:3e:42:ca:12:58:d1:56:1b:
28:48:f7:a1:a3:80:98:94:a1:dd:e7:e6:cc:05:b0:6f:6c:26:
e9:c8:bd:89:d9:02:32:bc:ee:c0:5e:ae:11:5a:bd:e8:13:6b:
f6:87:03:0d:22:54:ef:ef:e9:cf:da:bd:86:ed:c8:9b:22:b6:
6a:80:d5:87:5d:56:19:51:5c:30:23:55:05:32:5f:0f:e1:90:
78:56:48:76:a6:68:de:84:62:0f:52:14:53:6f:6a:7f:10:b2:
59:12:c4:6e:c8:37:9a:26:f4:8b:ec:79:29:41:fc:c5:f7:f1:
9e:6c:84:00:22:59:8f:aa:ba:b4:56:0c:7f:f7:88:a1:99:a5:
a1:a8:dd:2b:45:d4:a7:a2:5e:9b:bf:ca:1e:21:a5:9e:a4:54:
82:9f:86:a6:00:bd:26:19:64:f9:08:6a:93:e9:0d:e5:5e:73:
d8:fe:5c:21:4d:8e:f0:76:02:0d:8b:4a:a9:2b:64:65:17:6f:
73:1d:53:ad:e5:ca:7c:e0:ae:ef:66:86:e5:6f:34:de:ee:52:
9a:8c:93:4b:cb:a4:85:7a:61:e9:40:44:3e:ed:b9:b5:03:e3:
44:a2:b2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:43 2025 by rpki-client