Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: r1Ch7GYR0Oj1bxEXiYLIu64VqnVci8CwLLrPF/vTB+4=
Subject key identifier: E2:D4:F4:AB:5D:AF:71:A1:B0:B4:AA:7F:FB:2E:F2:C2:EE:D9:A7:55
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 0198729888B63DA962F619FD450B60B99FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 01:00:55 +0000
Manifest this update: Mon 04 Aug 2025 01:00:55 +0000
Manifest next update: Tue 05 Aug 2025 01:00:55 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: uB08jE8XHPjFYvPo5OmvaKyQSWAowH/pqGHGWel4ZEw=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:88:b6:3d:a9:62:f6:19:fd:45:0b:60:b9:9f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Aug 4 01:00:55 2025 GMT
Not After : Aug 5 01:00:55 2025 GMT
Subject: CN=e2d4f4ab5daf71a1b0b4aa7ffb2ef2c2eed9a755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:03:91:ff:33:2f:98:78:01:67:ec:94:29:
99:7d:c2:c0:c5:58:c5:69:73:f3:50:6e:c3:3c:0c:
e9:60:c1:d3:78:dc:ed:43:13:b4:73:54:10:f9:5d:
ac:a0:b9:1b:d8:c2:96:34:eb:ba:c9:8f:59:8c:fc:
dd:65:9b:3a:2d:f8:15:71:c6:05:17:05:9d:ff:1a:
77:d3:72:b9:89:86:d4:05:52:a0:f9:76:e6:04:93:
0e:60:7d:1d:e7:c7:ba:0d:f9:a7:bd:e1:89:56:d7:
cf:49:db:d7:55:e6:10:05:d8:d6:51:f5:79:61:e6:
e8:69:a3:d1:81:0b:ce:55:ca:08:b5:55:ca:81:7b:
af:a3:3e:23:47:ee:10:1b:c1:57:5e:1a:44:b4:4e:
85:f6:9b:89:e9:7c:9f:52:27:f2:5f:0b:29:ca:9b:
9c:27:37:c8:b6:f2:b7:83:ca:bc:75:21:13:ca:4b:
07:33:fd:6e:6c:41:f6:c2:9a:6e:e3:74:64:4c:79:
12:f4:59:0b:5b:75:ba:70:ae:af:c0:33:15:ef:60:
57:5b:e9:31:28:c1:25:29:e6:d0:76:d7:61:0b:65:
55:a0:72:d4:0c:d2:2d:18:da:02:dc:56:f8:1d:2d:
e8:16:ae:6b:b6:0e:c4:b0:02:a3:bb:4d:1c:ed:df:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D4:F4:AB:5D:AF:71:A1:B0:B4:AA:7F:FB:2E:F2:C2:EE:D9:A7:55
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f9:7e:87:02:da:c3:d8:5e:24:1b:af:b3:7f:96:f3:48:73:
eb:aa:06:c7:dd:41:af:40:d6:96:c9:14:58:41:71:af:8c:85:
eb:7b:89:00:d9:0e:85:38:c1:b5:7f:38:27:ff:de:e0:90:0d:
ad:1b:51:e5:9b:7b:f6:a3:57:8b:48:4c:12:4e:d8:5a:e7:31:
db:ab:b8:a8:f2:06:0b:36:5a:e2:b9:02:54:74:7e:80:22:eb:
20:63:f6:49:49:7e:07:73:39:e1:cd:89:af:cc:ed:b4:fa:ee:
f0:ff:6c:42:77:8f:6c:e3:fc:24:b5:1d:16:76:b6:b3:e6:d3:
8b:b5:91:bd:c2:fa:9e:19:d1:44:94:01:2d:88:b8:63:27:97:
07:7a:86:7c:86:f6:33:87:ba:f7:19:bb:2b:de:33:de:98:93:
2f:87:b1:9c:f8:bc:d2:cf:05:02:0b:4d:63:dc:1e:1d:f0:45:
4e:67:20:87:8d:34:b6:f5:32:82:e5:5d:56:11:ca:b7:41:46:
06:fb:73:33:0c:9f:c6:0e:13:60:9e:4d:9e:62:7f:f3:1f:81:
6a:16:c6:56:a5:98:b0:9e:be:1a:de:a4:15:7d:aa:fb:27:ad:
6c:72:00:22:0a:39:99:44:2a:39:f2:ae:12:6b:16:1f:cc:9f:
68:2f:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:21 2025 by rpki-client