Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: EjXER2k2BfDCkI74EOrag3BdaKlNv9+2JH14HdArFBw=
Subject key identifier: D7:73:79:A9:09:7F:81:5E:C0:BD:23:EB:7C:12:67:E4:56:EF:27:FB
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 0198D69816F30BA266E3F5DCE3CE59E8EAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 0F0F
Signing time: Sat 23 Aug 2025 11:02:28 +0000
Manifest this update: Sat 23 Aug 2025 11:02:28 +0000
Manifest next update: Sun 24 Aug 2025 11:02:28 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: t/OVCxOaY4w2dlQ87z6BhRSvCWHR2Au3zEC8pOwy+rA=)
2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:16:f3:0b:a2:66:e3:f5:dc:e3:ce:59:e8:ea:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Aug 23 11:02:28 2025 GMT
Not After : Aug 24 11:02:28 2025 GMT
Subject: CN=d77379a9097f815ec0bd23eb7c1267e456ef27fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:c6:c4:63:a3:66:ec:0e:b6:3d:6b:9c:86:
86:09:04:c1:ba:1e:14:3c:c8:00:10:bd:45:d3:6c:
65:23:b6:c4:ad:00:98:34:9f:b2:50:90:99:ca:dd:
a3:5a:9a:7f:af:fc:be:ef:c0:5e:28:9e:8a:f1:ff:
f0:13:92:27:00:85:cf:cc:d5:96:fc:f6:57:42:2f:
7b:92:0c:1b:de:ef:89:c2:99:a2:85:f9:ab:12:d0:
ab:08:d0:40:55:e8:d3:55:f9:0b:19:5c:48:44:20:
a5:7d:64:7a:76:83:ef:8e:56:de:8e:02:c0:2d:ac:
e3:c7:49:d3:2d:59:e9:52:99:22:dc:8a:d7:48:f7:
69:f9:a1:91:96:75:3b:e2:b1:e6:e0:51:de:a5:a5:
55:12:02:12:29:3e:f6:91:d2:40:28:ee:9e:bb:71:
55:df:c3:e4:e7:be:ef:63:44:d2:eb:8d:a8:30:3f:
64:98:36:e6:11:88:d7:cf:24:5b:4d:d8:08:48:44:
50:d3:66:54:a7:f2:88:f4:24:d2:e3:56:5c:4e:21:
28:da:e2:59:8e:cb:3f:0d:59:2f:9b:a4:5f:61:50:
4a:92:88:8e:59:ad:3f:e1:e5:f5:d2:61:bc:23:43:
9f:e7:19:5c:2e:d4:c5:c2:0e:65:0c:94:d5:30:79:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:79:A9:09:7F:81:5E:C0:BD:23:EB:7C:12:67:E4:56:EF:27:FB
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9b:b6:82:e7:51:b9:01:2d:5b:11:10:7e:a4:7a:b1:ec:af:
f5:51:d6:2e:f8:a0:94:73:dd:99:60:0e:d4:d4:d2:7b:4d:26:
25:50:28:df:72:2a:a4:be:36:34:67:c3:86:6e:19:93:e7:01:
aa:68:f6:04:ba:34:eb:37:fd:63:8e:0b:e9:6f:15:24:51:3e:
8b:cc:a4:ed:4a:76:55:9c:e4:4c:1a:9b:af:06:7c:3e:e4:82:
37:ac:ac:4c:e4:c4:3c:03:76:01:43:fa:eb:bd:5c:a6:9b:9f:
d0:9a:63:da:70:13:d4:de:75:2f:a1:26:50:0a:0f:89:0c:b7:
44:40:8b:36:ef:67:7a:df:24:06:fc:d9:ad:46:ce:54:27:54:
46:7c:b8:67:1a:24:58:74:fa:74:7a:e4:fb:4a:d0:bd:7c:c0:
c5:c1:8f:af:a1:3f:3b:5a:2a:8b:c0:19:de:32:b7:75:91:28:
dd:8b:32:2b:3b:69:3a:1d:ff:5d:46:62:ca:1a:8f:7a:4d:28:
4d:86:c0:af:cb:33:19:35:ab:62:ca:2c:96:4a:08:dd:6c:76:
aa:7d:9b:b0:b7:df:ee:4f:d8:b1:31:cf:b8:27:d9:25:c1:22:
8a:4f:86:b3:3d:40:7c:eb:4a:0e:01:2d:f6:e7:90:60:1d:27:
bb:c7:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:59 2025 by rpki-client