Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: FRXz645Kcs8axhEMpey8gX9lB8qwu5ebfKIvLx13fGA=
Subject key identifier: AD:C2:68:30:9E:56:7A:30:53:F7:C5:2D:48:D3:BA:B3:29:94:58:85
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 01988B0F5E807E36A2A05732CC637C106B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 14A3
Signing time: Fri 08 Aug 2025 19:01:36 +0000
Manifest this update: Fri 08 Aug 2025 19:01:36 +0000
Manifest next update: Sat 09 Aug 2025 19:01:36 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: upsxoCi3R22b1MaG2dJ+t53Gy6FR5gmjJPasVpSwgjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:5e:80:7e:36:a2:a0:57:32:cc:63:7c:10:6b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Aug 8 19:01:36 2025 GMT
Not After : Aug 9 19:01:36 2025 GMT
Subject: CN=adc268309e567a3053f7c52d48d3bab329945885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:20:97:07:63:d7:ee:25:ed:9d:46:f0:e2:
39:1a:4c:48:f8:ca:e4:48:fc:e6:01:87:22:37:b0:
f2:94:37:4a:88:a5:90:63:94:e0:3b:c1:d1:2f:25:
49:50:99:06:f7:61:fd:4c:fe:1a:d7:92:40:9e:eb:
f2:a6:5a:f0:25:88:a2:0f:d3:d2:1f:d1:2f:95:06:
83:f1:d3:8e:92:83:2c:8f:e9:0b:10:99:17:3d:e2:
ba:f8:1f:f9:58:f3:21:ab:5d:03:94:35:9c:6c:db:
88:d9:2e:c8:aa:3e:16:d1:18:5b:3b:a2:a4:db:1c:
e3:c8:df:d2:6a:b6:f7:c1:d0:a7:de:a3:5a:2a:b0:
ad:69:e2:ca:83:8d:b9:bf:9a:34:75:ae:e4:90:38:
f0:36:8f:f9:9f:f6:61:7b:4d:6e:64:9a:2f:43:0c:
fd:8f:c2:28:d9:3f:12:1c:94:58:4a:c0:06:21:40:
74:75:70:b0:b3:a2:c6:f9:30:3b:d1:63:a4:e3:77:
81:5a:e4:d7:dc:26:6d:d2:3e:37:a8:78:9d:2a:c8:
ef:bb:ac:1f:3d:65:a6:26:f0:3d:86:57:67:9f:5d:
58:0c:f9:03:16:2d:56:b9:19:5e:42:6a:d4:85:f9:
75:be:9c:8a:14:ad:a6:45:83:ec:3c:7e:46:95:1b:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:68:30:9E:56:7A:30:53:F7:C5:2D:48:D3:BA:B3:29:94:58:85
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5f:a3:5d:78:50:a4:71:24:b5:c9:2f:ac:50:39:ae:eb:6a:
7b:58:9e:41:47:34:d0:ac:99:bf:5d:06:57:85:e3:de:55:95:
9f:c7:54:fc:5a:b9:0d:70:0e:80:50:ff:51:b2:f6:f7:87:ef:
d1:dc:b7:68:cd:bd:cd:a8:f6:3c:3f:58:94:7d:d7:f7:21:19:
a8:91:79:1e:de:65:b3:4f:fc:af:45:36:12:ba:fa:5e:5e:d4:
3a:07:c5:cd:e6:24:dd:d7:7c:2d:4b:6c:71:4f:8d:70:fa:53:
77:a7:7c:cf:db:e8:01:42:4a:b7:a5:d3:34:73:2f:8a:57:05:
65:2b:23:e9:3b:35:b7:ac:cb:11:c5:fc:a4:45:5a:3b:1b:03:
31:0b:fa:68:14:80:c2:97:d5:98:8e:f1:ba:15:2f:b5:80:0c:
42:15:02:72:7c:55:fd:06:40:ab:39:68:e3:c1:b0:71:b4:45:
63:e6:7c:1a:4b:71:17:4a:7f:a5:d4:b0:06:b7:c1:27:bd:4b:
82:a6:a0:e6:44:49:32:50:a9:b7:cb:c2:92:50:3e:cc:52:da:
2d:cd:18:f6:de:55:1e:75:e2:64:b3:cd:d6:98:f7:4a:f1:1f:
97:ee:7b:4e:5a:88:0a:dc:32:85:32:0c:31:79:08:cf:85:90:
f0:59:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:19 2025 by rpki-client