Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
File: _XBhwg1PCXYTrAMTI3pt8rsstdw.mft (raw, json)
Hash identifier: ecvuefXt1gVhckScI2qUEEyujYh6sX5Ttrzb4OJ9z5Q=
Subject key identifier: F6:B5:FA:BC:3C:D8:7D:8A:30:65:7B:B0:C1:14:05:68:55:D4:AD:F7
Authority key identifier: FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
Certificate issuer: /CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Certificate serial: 01987261AA04D2DFCB72D97EB1DA01545CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
Manifest number: 01AB
Signing time: Mon 04 Aug 2025 00:00:59 +0000
Manifest this update: Mon 04 Aug 2025 00:00:59 +0000
Manifest next update: Tue 05 Aug 2025 00:00:59 +0000
Files and hashes: 1: _XBhwg1PCXYTrAMTI3pt8rsstdw.crl (hash: wMPMzJAYtlOcKNjcoxIcGA7xXWynJ1TmQdqsDQa0/bc=)
2: oenpcHzg8QPV-rJqJOxh7sUU4JM.roa (hash: pI8sI3HGC0XwZjUjUuA9QCNQ3HFZ2jSXO5rE2e12GoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:aa:04:d2:df:cb:72:d9:7e:b1:da:01:54:5c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Validity
Not Before: Aug 4 00:00:59 2025 GMT
Not After : Aug 5 00:00:59 2025 GMT
Subject: CN=f6b5fabc3cd87d8a30657bb0c114056855d4adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:9f:5c:e0:be:72:49:a3:c9:d7:db:8b:b2:
cd:34:e1:25:1c:7a:c2:ca:55:e5:62:82:c4:e9:b7:
3a:cd:69:78:ff:04:36:e4:fa:f6:fd:db:22:65:d7:
15:94:fa:4c:83:95:0d:33:63:48:19:44:6d:27:c6:
79:38:b7:a3:ef:6b:b9:97:98:d6:d1:d2:86:f8:1e:
9c:20:79:38:5f:1c:0a:ae:ba:7a:12:d9:78:49:2c:
d5:bd:15:01:c3:6c:fd:63:68:dd:63:89:b6:90:87:
19:e6:a9:4f:2d:f8:34:a5:d7:77:b8:ec:de:8c:7c:
d5:a8:31:d1:b1:df:63:24:4a:27:ab:73:d2:6a:21:
c4:7e:32:86:13:57:ae:e8:8a:bd:0f:6a:a5:94:18:
da:e6:ff:f8:07:68:69:a1:11:d0:a7:cf:1b:12:32:
d9:aa:d4:59:18:ef:61:31:63:e4:f3:76:0a:7e:47:
9a:e4:10:02:65:d3:9e:31:e3:4f:bd:66:ad:80:2f:
36:da:26:42:ba:0f:e1:b5:4f:5e:65:4b:93:6d:25:
ce:27:da:a8:96:a9:fe:02:74:19:48:bc:55:a3:29:
9b:4c:4a:11:73:05:c0:c8:da:ec:6c:75:5a:1a:2b:
02:ac:50:50:b1:61:b7:5d:a4:61:6a:6e:29:63:46:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:FA:BC:3C:D8:7D:8A:30:65:7B:B0:C1:14:05:68:55:D4:AD:F7
X509v3 Authority Key Identifier:
keyid:FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:d9:08:19:6a:17:2f:06:66:69:37:07:e6:7b:db:aa:7f:4a:
d4:f1:98:71:ff:85:da:2f:fa:5e:26:ff:f4:e2:05:4f:e6:ee:
9b:2f:6a:1a:0f:cb:19:c2:86:91:80:af:cb:50:61:0b:e1:a6:
cc:26:8c:28:30:d4:6a:bd:8e:eb:49:64:fd:dd:3c:ab:5e:4a:
f9:9e:7e:fe:68:f3:76:90:0a:f9:8e:d1:36:7e:ca:8b:57:41:
15:58:f6:ef:7d:e6:8c:c5:43:73:8e:fd:43:83:b3:24:e5:15:
65:d0:83:d9:79:47:dd:ec:a3:7f:5b:64:6e:26:e7:96:c1:81:
b3:dd:b9:28:00:b0:ce:57:7e:82:85:b6:cb:4f:ce:fd:0d:28:
f5:c2:b5:ea:8f:0e:d0:db:37:f8:d1:73:c6:7a:ff:f9:55:50:
e0:81:f1:1e:91:dc:c6:9d:60:95:99:e8:20:9a:c9:6c:ef:cc:
b1:ab:c0:44:a7:4b:c3:56:a0:79:1f:f0:36:40:8e:d5:0b:9b:
e8:d2:74:e0:11:ab:34:74:f1:9d:35:ab:a1:01:21:d7:74:82:
d1:50:7e:79:4b:89:3e:5e:33:48:be:56:f5:df:22:29:99:64:
50:19:ff:95:c2:7f:9d:74:42:36:a7:e3:9d:55:44:43:15:1b:
2b:88:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:34 2025 by rpki-client