Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: 53vA+ZdM0z3J/PGvTyqBHoqNGOaj5HkNSxeDRC1BAvg=
Subject key identifier: 36:C0:C2:78:88:5F:9B:26:47:74:51:DF:8E:AB:52:FA:8A:22:BB:1B
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 0198D5F185FE92DC0F8B6A3404CCB19E957F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 08:00:32 +0000
Manifest this update: Sat 23 Aug 2025 08:00:32 +0000
Manifest next update: Sun 24 Aug 2025 08:00:32 +0000
Files and hashes: 1: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: xjLAUOX+u64D3C38TPIVkG4b90JAzPjJTZlLPtLEUck=)
2: O5ilAJzp4Fiady6OzW8y6F-h2tk.roa (hash: 5NXhQBooraxn6sup0YPIQ8njZP6A7m2bDKaKDs+Nqts=)
3: QwSiPMgCrnV_t6yAUHlhkg3u_jM.roa (hash: hYyVlbmE/pf2k4j7NJjebHsv7m2YlTW7LKuiiP6VfuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:85:fe:92:dc:0f:8b:6a:34:04:cc:b1:9e:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Aug 23 08:00:32 2025 GMT
Not After : Aug 24 08:00:32 2025 GMT
Subject: CN=36c0c278885f9b26477451df8eab52fa8a22bb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:18:db:6b:c5:d4:da:ea:82:b0:cd:79:58:
29:7d:09:1f:0a:7f:23:fd:f8:a9:90:32:c9:af:2f:
89:f3:a6:be:86:ef:20:8f:46:8c:b4:41:b9:ae:dd:
ce:25:48:8b:14:5a:ce:eb:fb:38:dd:0b:cc:9c:58:
f8:69:12:31:51:8e:ad:06:5c:15:00:c4:9f:99:fa:
58:d7:bc:53:5f:ac:15:58:7b:88:73:26:06:c5:7d:
a7:60:eb:29:8a:7f:b1:91:30:15:9c:b9:17:d4:b3:
80:06:e9:2d:f6:6c:c7:28:dd:92:2d:e1:66:ba:52:
7f:15:1b:c3:1a:76:e8:c7:75:ff:7c:10:7d:bb:84:
33:9f:92:27:01:c9:3a:5c:95:3f:71:dd:60:70:da:
59:46:25:4a:27:ce:79:81:7b:e5:3a:d9:c8:e0:2c:
15:37:17:8c:8d:e4:e3:a0:b9:b4:bc:ec:fc:0e:46:
47:04:08:e7:58:cd:cb:03:0b:a0:27:23:65:92:3a:
b3:df:4d:24:39:25:71:b2:bb:83:c8:53:66:4b:b5:
00:c4:71:78:40:b4:fd:74:bf:db:3c:8d:41:11:f6:
35:b0:62:24:07:24:a4:60:43:10:bc:c5:37:ac:f4:
12:7c:78:f5:64:99:d8:91:09:23:4c:fa:1b:6e:86:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C0:C2:78:88:5F:9B:26:47:74:51:DF:8E:AB:52:FA:8A:22:BB:1B
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0e:78:f3:72:78:be:17:30:cf:62:8e:74:54:7f:f6:15:76:
71:67:ad:b4:89:36:1e:84:21:ba:9e:8c:05:3a:dd:4b:57:63:
70:55:d6:03:11:14:d6:84:93:24:05:f3:dd:77:b9:b4:82:fe:
b8:d6:5b:7d:8e:83:80:fe:a9:c6:b1:d6:b7:d7:98:7b:82:9d:
58:03:27:dd:71:5b:6b:74:a5:b8:89:ef:78:b8:fe:6e:9e:94:
83:9b:c5:55:63:23:8d:1a:20:68:94:1e:80:a7:60:a9:01:92:
41:f4:ac:70:9a:e6:6a:4e:36:8d:50:bf:df:5c:95:f4:0d:4a:
cb:64:4a:9b:21:9b:35:0c:e9:8c:47:94:7b:ec:57:6d:83:4a:
1d:35:49:79:b1:b4:cd:e0:92:ba:3a:4f:a0:e6:07:1e:56:a2:
db:85:67:e6:a0:e2:33:2f:a9:05:e7:18:f9:c8:4f:da:12:bd:
8e:34:05:94:2e:a1:b8:46:df:b5:e7:7e:cf:a7:a7:e9:24:17:
3e:b9:ce:a9:46:48:e6:b0:16:e5:58:99:3f:44:74:d7:03:b9:
0a:b3:34:0d:2a:1f:49:18:65:f1:e0:bb:9c:c1:c1:0d:4b:96:
a7:be:02:2e:81:ad:87:8b:c8:00:7c:f3:7c:13:09:2a:7b:b2:
d3:c7:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:47 2025 by rpki-client