Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
File: fPySsKdbia0uPFf3y6DkeGhCGc4.mft (raw, json)
Hash identifier: bfIxjtnTaJTgqVl/3AUwA9UgF2N0SF3iZkcOTp4Z4MQ=
Subject key identifier: 95:2C:5E:C6:95:C6:4B:2A:F4:8E:9D:C7:2B:3B:63:56:65:09:A7:50
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 0198752B66BBB961A0761004404D3421E9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 13:00:35 +0000
Manifest this update: Mon 04 Aug 2025 13:00:35 +0000
Manifest next update: Tue 05 Aug 2025 13:00:35 +0000
Files and hashes: 1: 9yjHUYS9Fxw_4dxtmR-3Rxot344.roa (hash: AWQ6glDSqhKNOCwBlnvSM0hvzT6dwIHbQaxbn9xxzkI=)
2: XQ5p_v2P6Gqcwe6mUUsVtaNZ97A.roa (hash: AfJ0RTbLQ6sDHJhxmnbkdCHcxDZgS6nXOmdvB8FlyiA=)
3: Y5V8eP_AgzuwiFE2HrYGmskh04c.roa (hash: SlwWJVVTaYw9Z8mUHoA0C0IZ8H875se5L3mE0H1vEwY=)
4: fPySsKdbia0uPFf3y6DkeGhCGc4.crl (hash: sXwCA+aJMky0DLsIRKtBJKj5Qf2CWrrSgk9c+pMpuf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:66:bb:b9:61:a0:76:10:04:40:4d:34:21:e9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Aug 4 13:00:35 2025 GMT
Not After : Aug 5 13:00:35 2025 GMT
Subject: CN=952c5ec695c64b2af48e9dc72b3b63566509a750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:3a:ff:d9:7c:23:29:19:c1:25:25:cc:89:
d8:a3:e3:63:44:1f:5b:58:22:09:4c:a2:00:2b:80:
0c:1e:de:6f:6b:83:e7:0b:1d:7e:b7:30:33:e4:fb:
59:ce:c4:19:f7:a4:6d:c4:5b:c3:d3:e0:40:8c:9c:
9c:35:08:f5:9a:af:69:f8:d0:4b:ad:c0:ee:d6:b6:
07:45:15:b3:5e:71:11:a5:25:25:d8:66:a8:86:b7:
a6:d4:f5:f8:53:aa:7e:2c:5f:53:94:23:df:97:2c:
bd:2a:a2:5f:a4:cb:03:3d:f5:b2:f1:9a:b7:d0:86:
e7:4a:8d:55:62:d0:a7:fd:d7:cf:3f:70:35:d8:74:
41:35:68:1f:0f:4f:ce:b2:71:46:21:b8:76:5b:1e:
6e:e4:56:a9:50:75:a5:de:88:53:a7:a4:c6:b9:c4:
2a:e2:32:d1:03:0b:bd:4b:a2:0b:2a:65:e7:05:74:
86:cb:2d:7f:45:f2:12:3f:1b:da:5a:bd:56:e1:ef:
42:36:22:30:ac:ea:e0:a1:69:72:34:0b:72:59:3b:
04:ef:7f:3a:cb:4a:07:9f:0e:ad:57:76:33:5d:35:
a4:92:58:ff:65:5e:68:a6:ad:20:ac:b2:8f:f7:e2:
f3:72:1c:38:82:91:e6:e5:79:0f:c6:58:60:d2:0a:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2C:5E:C6:95:C6:4B:2A:F4:8E:9D:C7:2B:3B:63:56:65:09:A7:50
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d3:34:f8:84:76:55:db:f9:b7:9e:7a:d1:0c:80:d9:69:d8:
dd:2a:93:95:b4:aa:20:e9:a2:f6:bd:e8:f5:b4:03:a7:cd:a7:
e7:bf:9f:71:62:5d:83:83:42:01:95:b4:a6:87:29:64:bb:f2:
b4:f6:06:57:09:ee:bf:28:20:06:71:dc:61:69:b3:3f:94:de:
8e:0d:1e:6a:17:3c:08:78:04:0d:b2:67:f4:27:f0:81:27:ed:
24:41:60:e3:b3:96:98:cc:8d:a7:97:b9:a4:55:4f:d2:75:56:
ac:10:c4:f1:d6:d1:0b:08:6a:c8:17:8f:1f:67:29:f6:a6:72:
c2:c4:8a:80:f2:1a:ef:11:07:a6:8e:53:d9:c8:32:b7:63:fd:
f2:4f:d2:d0:d9:3d:50:fc:de:60:11:87:27:a1:c9:2f:d4:e8:
79:8b:ca:64:5f:b1:4f:cc:f9:a8:a7:b2:46:67:7e:be:7a:05:
30:09:ab:12:a4:c4:2e:ad:5b:6d:fb:4f:70:a9:63:28:80:f1:
18:94:49:09:c7:b0:dd:6e:26:01:84:8e:39:4c:04:ec:c0:c3:
51:8c:49:1f:9b:5a:76:5b:64:ca:8f:23:b8:0c:cd:8a:4c:59:
30:b2:07:3a:71:07:b2:a2:b7:fb:29:73:57:ed:32:6e:ef:62:
b7:71:83:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:05 2025 by rpki-client