
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: kqec0mPJdIs8139KrMhwOp6T4aH9bKTBEs6COdKK8eU=
Subject key identifier: B7:D4:AD:B7:28:13:1A:B6:93:EE:B8:50:13:A4:33:B9:FD:FE:9B:34
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019880C268CAC47FA7A72AB7EBDCC303182D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 097F
Signing time: Wed 06 Aug 2025 19:01:20 +0000
Manifest this update: Wed 06 Aug 2025 19:01:20 +0000
Manifest next update: Thu 07 Aug 2025 19:01:20 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: T0JffGZOcu6rp4HX3LW0KGQkbrmuWcufHqCc2tmddlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:68:ca:c4:7f:a7:a7:2a:b7:eb:dc:c3:03:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Aug 6 19:01:20 2025 GMT
Not After : Aug 7 19:01:20 2025 GMT
Subject: CN=b7d4adb728131ab693eeb85013a433b9fdfe9b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6e:3e:1e:06:00:19:c5:58:7c:66:07:08:ab:
e6:39:19:fd:0a:af:71:e6:b5:ec:04:4e:d6:db:62:
52:cd:6d:75:40:a1:32:6f:38:f2:7e:65:58:80:10:
6b:97:7e:08:ac:10:af:b7:1a:79:bd:97:34:02:c4:
9e:19:22:5c:cc:27:43:79:0d:e3:5b:65:58:eb:eb:
3a:b7:4d:ce:0c:2b:d0:eb:a8:6d:9e:a3:76:c5:10:
f2:e7:79:9f:d3:b0:58:43:16:12:ff:f7:22:3d:1b:
c7:7d:9b:1a:5f:2b:51:f3:6a:b1:7b:b0:b4:43:f2:
0a:c7:1b:f1:7b:59:41:6a:22:f8:d9:13:1d:44:9b:
4f:a9:fb:6b:5f:7f:95:8c:53:a7:8f:46:26:81:a8:
bd:fd:95:cf:6c:4a:fd:34:f5:a3:34:45:c5:b8:8e:
ea:33:c8:96:41:0a:90:3b:51:99:75:17:e5:56:9d:
52:a9:fc:35:db:d1:58:5c:5c:e5:ad:e2:b0:b4:68:
4c:0d:94:45:70:be:98:c9:c9:27:00:2b:b4:65:c0:
1b:4f:e8:7e:bd:3e:31:0e:0c:7f:47:b6:3c:ef:b4:
67:48:82:7f:3a:84:55:82:06:51:85:73:d2:5d:ef:
2b:af:ad:9e:64:de:20:f3:7b:47:7c:92:d8:dd:b6:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:AD:B7:28:13:1A:B6:93:EE:B8:50:13:A4:33:B9:FD:FE:9B:34
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:72:ca:ac:e8:5a:b3:25:f7:dc:7d:01:9c:22:c9:94:24:eb:
ce:05:8b:c0:c6:53:4d:aa:96:eb:b7:59:42:96:8a:0e:0d:64:
a4:98:ee:df:b7:ed:b7:bc:4b:b3:71:32:97:a9:5b:ae:7b:ab:
81:97:f6:6b:d3:da:f4:b1:e0:93:71:57:41:bb:44:dd:e6:56:
b5:f6:43:c8:51:66:e5:78:b2:f6:e9:ed:a8:34:ed:13:2e:5e:
84:8f:78:8d:cc:c0:36:7a:7a:f6:65:24:bd:2b:1a:97:02:4b:
76:85:f0:4a:11:90:14:b6:c2:a9:53:92:ea:df:52:de:c9:89:
90:bd:74:ef:96:51:b8:53:94:c6:93:a9:67:4e:57:a1:ec:fe:
e7:26:a5:c4:c1:1f:79:d2:73:1a:c4:72:b0:cc:b7:8e:bb:1a:
27:6a:2a:b7:c2:d8:42:f7:af:02:40:39:dc:09:46:af:6f:f5:
c2:60:95:b2:17:af:84:95:23:5b:48:ba:32:99:74:fa:e5:56:
28:b9:99:a1:e4:91:7f:c0:03:e5:b9:63:26:7e:13:b3:d5:e9:
28:be:34:78:59:b7:ca:5e:62:d2:bb:2a:3f:b4:9d:b8:06:19:
e0:5f:46:2e:f4:64:ca:14:d9:9b:95:53:88:46:99:11:c7:59:
ab:a3:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:48 2025 by rpki-client