Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: LGe6RRRj/I54kPuqpzaOtci4qUtLJes8nO39epEZVFY=
Subject key identifier: 4A:65:5F:D7:B9:8E:26:71:9A:3D:B8:E8:3F:C2:E2:E4:8C:70:08:A1
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 0198A0842386B1592432BAD4BA8F5ABE9E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 136D
Signing time: Tue 12 Aug 2025 23:01:11 +0000
Manifest this update: Tue 12 Aug 2025 23:01:11 +0000
Manifest next update: Wed 13 Aug 2025 23:01:11 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=)
3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: DNVTs9vIgD+jgOKdIr0/Bjs3nKMjEMt0nUgFkXr+1AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:23:86:b1:59:24:32:ba:d4:ba:8f:5a:be:9e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Aug 12 23:01:11 2025 GMT
Not After : Aug 13 23:01:11 2025 GMT
Subject: CN=4a655fd7b98e26719a3db8e83fc2e2e48c7008a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:48:97:94:3d:ab:82:65:e2:a3:18:88:b1:19:
77:b1:c8:5c:ee:22:e7:d6:b4:4d:37:5f:66:e5:ce:
3f:cd:8b:b3:e4:ae:a6:d1:cf:75:33:9b:81:d7:52:
06:0d:24:52:cb:d4:29:1f:37:c4:a4:d4:8a:43:f5:
c1:0f:bd:fb:59:be:41:80:8a:34:d7:6c:35:30:d1:
3f:70:31:82:ab:fe:2f:56:45:b3:b0:78:a2:cd:4f:
d0:9c:6c:d7:0c:6d:32:94:6a:00:73:e0:0b:90:82:
a8:02:66:7f:2a:6e:54:30:ba:9c:0f:cb:01:55:17:
e2:d8:7c:d7:52:2e:f7:a8:07:ab:5e:bb:71:87:f0:
0a:23:99:67:f3:54:90:d7:f6:e3:b3:15:42:ad:97:
99:0a:84:52:a0:d8:c4:e4:49:07:81:bc:2f:7f:e9:
1b:71:d5:da:c3:50:3c:04:34:0a:98:db:57:27:17:
94:ff:3f:58:9d:4c:12:39:89:37:14:d0:dd:76:fc:
e5:c0:50:66:78:6d:3d:9d:37:eb:8e:75:dd:17:62:
81:d7:47:f8:87:d7:b8:10:f6:72:c8:71:99:f0:7b:
0c:e9:99:d4:64:4b:77:11:79:d9:0d:f5:0d:2e:4d:
06:a4:32:6e:1d:86:2a:08:c3:a2:1a:df:6b:be:b1:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:65:5F:D7:B9:8E:26:71:9A:3D:B8:E8:3F:C2:E2:E4:8C:70:08:A1
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d9:e5:54:5b:26:3f:56:b3:40:b0:c3:bb:ce:4c:df:bc:cb:
f1:93:34:97:cc:ff:4b:af:cc:73:31:0f:59:32:42:c4:09:4e:
bc:bc:99:51:27:be:ad:92:e6:ac:47:8e:ca:5f:98:a7:98:23:
ca:9e:65:43:0d:74:ce:65:bf:25:2a:45:3c:d6:50:fa:2a:ba:
72:3f:f6:a9:50:b2:e0:af:a4:24:0b:96:35:08:57:fe:c4:41:
5f:e3:5d:7c:6c:82:bb:50:3e:39:1a:87:49:d0:b6:7f:96:9d:
3b:4c:ac:74:62:a3:0c:5f:bf:2b:64:4d:da:1e:7b:b0:a4:1e:
3e:a2:16:59:e1:0c:8a:ce:79:98:22:1d:56:38:f2:a3:65:5a:
df:f5:eb:33:a0:39:f1:40:ce:81:64:4b:74:e9:a7:fc:9c:f1:
68:cf:38:1f:17:d7:96:ef:b6:eb:37:6d:c5:53:91:d0:e3:30:
e2:6d:6a:b3:64:90:77:52:ed:d9:2f:3d:1b:bc:f7:86:59:57:
05:7e:d3:90:60:e9:05:40:87:6e:72:5a:dd:31:23:1e:22:a3:
09:5c:b3:f2:10:ba:38:9f:ce:b6:2d:b7:17:3d:b2:22:d8:81:
33:f6:34:08:50:68:b7:fd:94:f0:e9:79:b4:6e:73:a0:06:17:
87:39:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:11 2025 by rpki-client