Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: 0ddaBl2TZg6viXi3tnFMZQNEF29g+yoKg/wUYRIBJ+M=
Subject key identifier: 38:E6:8E:9E:74:72:FC:81:CA:52:BD:3E:2E:94:C4:51:45:C0:71:5E
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 0198D4E069DB464905D7F32A64779B5346EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 0822
Signing time: Sat 23 Aug 2025 03:02:13 +0000
Manifest this update: Sat 23 Aug 2025 03:02:13 +0000
Manifest next update: Sun 24 Aug 2025 03:02:13 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: eaui9Lj3qXwLaaFTUZibgxOZBG9hOl+xD3A2mOOzsk8=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:69:db:46:49:05:d7:f3:2a:64:77:9b:53:46:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Aug 23 03:02:13 2025 GMT
Not After : Aug 24 03:02:13 2025 GMT
Subject: CN=38e68e9e7472fc81ca52bd3e2e94c45145c0715e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9d:c4:c3:87:55:a1:41:ec:eb:ee:4f:20:a6:
d9:a4:e9:d9:02:16:67:6f:f0:30:0c:c4:f1:c3:60:
af:28:b4:12:23:df:a6:14:9f:4f:72:b6:55:c5:7c:
1a:72:ba:8e:81:e9:ec:1b:c8:b3:41:79:55:fe:bc:
d3:a8:6b:9a:47:8d:9d:09:13:e8:3b:4b:19:71:53:
e4:8f:14:9c:dc:46:84:05:f6:d3:70:5c:78:37:5f:
75:61:0a:fb:f4:c5:87:97:69:9b:1f:ab:a1:6b:e3:
11:a9:64:69:7f:d9:66:6d:5f:59:f4:dc:dc:b1:c6:
49:75:be:8e:c7:49:6b:3f:2b:89:78:1f:da:b1:0d:
5d:c2:22:d3:44:56:16:53:6d:9f:ee:48:68:3c:13:
a4:d0:1a:56:9a:ff:b2:b8:a2:7c:e3:62:24:f3:91:
5e:02:9d:ba:fe:86:e9:bd:21:c8:9e:91:03:e7:f1:
40:d3:34:cb:14:e9:e4:ac:3f:72:d7:48:29:0f:e7:
b3:1e:ba:d0:2d:3a:af:90:fa:6e:9b:25:ef:50:11:
42:87:38:ef:eb:57:bf:55:b3:bf:16:ea:e5:9a:32:
e2:51:a5:ae:01:20:2b:8a:23:5e:35:ca:ba:8c:40:
69:d5:3d:44:5b:bd:09:56:b5:68:12:cd:44:76:61:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:8E:9E:74:72:FC:81:CA:52:BD:3E:2E:94:C4:51:45:C0:71:5E
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e6:6e:d7:b8:d1:b8:1e:e3:b8:02:b3:f4:fa:c2:b2:4b:06:
bd:ef:f0:fe:89:36:9e:96:a5:d5:c4:5a:22:05:89:34:95:d0:
68:e7:80:30:65:0e:40:ac:b3:77:a1:88:42:cb:57:8d:66:77:
e3:ca:60:52:c1:af:2c:de:c7:27:e9:14:a4:db:51:ef:31:ee:
70:1e:bc:2a:f2:4a:9e:f6:87:ce:ba:93:98:06:0b:ab:1d:be:
74:0d:63:51:e8:02:52:92:b1:34:0a:93:49:f8:3e:a7:7e:82:
f7:42:02:0d:88:7e:c0:9d:6c:ce:a2:48:7e:76:62:c0:5f:21:
7d:fb:15:db:78:87:b5:9b:22:46:af:96:bb:bc:45:04:f5:f2:
68:e2:2b:c9:c4:b5:66:c4:dc:af:16:9d:40:7f:c5:20:58:c0:
ef:aa:cc:3a:67:38:7d:e2:3d:4d:c1:fc:c0:06:c9:6e:0a:e3:
42:dd:6e:f8:07:8a:43:6d:f2:96:6a:e7:0d:fb:d6:82:e3:78:
91:52:1f:c2:de:8b:2c:d3:62:61:3d:b7:a0:37:b5:71:16:e1:
b4:35:00:37:21:af:b8:af:db:b9:24:93:55:a7:2d:17:8a:80:
f8:f2:e2:fd:4c:15:66:a5:e9:2b:99:29:0d:89:20:61:4e:c0:
42:0f:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:50 2025 by rpki-client