Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: Xg5D8qq4x2LPoZ7BiQ7I7vaQhNfqZtTNNLnkMGB53zI=
Subject key identifier: 2D:42:CF:DD:A6:EF:DA:E1:FD:52:80:3D:70:D1:F3:A7:30:20:87:EB
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 019875D26B8A842469F09C4077F962F22E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 16:03:01 +0000
Manifest this update: Mon 04 Aug 2025 16:03:01 +0000
Manifest next update: Tue 05 Aug 2025 16:03:01 +0000
Files and hashes: 1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: pmNzWR2R7yMoi/WszosrhxJBXy80xPmDwH6SZpdGyrw=)
3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:6b:8a:84:24:69:f0:9c:40:77:f9:62:f2:2e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Aug 4 16:03:01 2025 GMT
Not After : Aug 5 16:03:01 2025 GMT
Subject: CN=2d42cfdda6efdae1fd52803d70d1f3a7302087eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:78:45:20:45:1d:c7:9b:f8:b5:b0:ee:d7:
20:14:9e:cc:2d:54:26:23:32:fb:6e:e0:dc:25:6a:
88:38:76:83:54:57:20:fa:f9:cf:a9:21:c0:3f:0c:
f3:78:a8:64:6b:41:23:85:73:fe:e2:7c:34:bd:4a:
2a:e1:fd:c8:0d:76:cf:f8:92:2b:09:d7:ad:54:46:
cb:de:7b:37:21:12:b1:d9:c3:82:28:02:d9:f0:77:
6e:d1:1d:eb:46:ef:6c:36:bb:45:76:51:eb:0c:ef:
12:00:26:28:0b:25:fa:e0:fc:bf:1f:3a:2b:e8:2f:
69:20:16:55:e0:7f:d8:5b:31:95:b0:0c:0f:83:66:
56:67:0e:c6:69:f6:1c:c9:c0:ae:ac:80:f5:ea:46:
b5:e3:fd:1b:b9:77:4c:6f:a5:87:1e:07:82:f3:16:
5b:4a:b0:55:df:19:94:5c:47:59:38:a4:ad:ac:67:
b9:b8:4b:bb:ba:b0:31:c2:24:a1:0b:36:2f:a9:b2:
54:eb:08:4d:02:d3:12:11:54:74:fd:d2:57:00:47:
13:6f:69:bf:91:1e:fb:06:f6:ee:75:c2:75:71:76:
f5:16:22:b4:66:ec:03:5e:a5:d3:6b:d1:a2:c6:82:
f8:67:51:02:e0:3f:47:f6:91:6e:8c:0f:b7:e2:50:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:42:CF:DD:A6:EF:DA:E1:FD:52:80:3D:70:D1:F3:A7:30:20:87:EB
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f5:60:29:ad:63:be:da:57:dd:04:d8:ed:ca:8e:74:2b:e9:
1f:9a:bc:c0:3a:f0:75:d4:78:47:f4:4a:0f:dd:99:f0:cd:09:
cb:81:2a:5b:7b:31:a4:e6:bf:d0:04:1c:2c:2b:5a:b4:04:b8:
4d:eb:05:fd:77:60:1b:a1:30:1e:d3:87:e5:d8:92:dc:34:df:
ae:d8:9d:93:6e:9d:a5:e3:df:52:fd:d0:57:3b:3c:87:c1:e2:
ca:e7:9b:5b:3a:a5:51:62:6d:47:ed:b5:d4:fd:cd:56:00:48:
20:f0:c9:20:8e:67:10:d2:3c:2d:47:ef:9b:4c:36:15:b9:0a:
a6:f5:e7:75:69:ab:c3:99:cc:70:0b:04:b4:8a:e5:7d:a3:41:
ca:93:eb:8d:ab:dd:f4:51:42:0c:29:6a:8d:db:87:ca:d8:bd:
2d:6d:ef:83:e3:c8:c8:e3:e2:7d:3d:0b:aa:61:43:3b:e4:7d:
9b:7b:c0:5b:e2:ae:13:c2:14:c6:2b:7c:c1:2e:e6:4d:31:89:
c2:fa:4f:2a:fc:61:b6:4f:6a:fa:16:17:94:05:be:68:ce:84:
1e:76:bd:ff:96:fd:dd:ae:fa:6c:eb:93:de:18:c5:1a:9d:2e:
35:c4:03:41:44:ed:09:bf:65:e9:c9:af:72:d3:ec:4c:3e:1f:
37:9c:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:20:19 2025 by rpki-client