Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
File: Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft (raw, json)
Hash identifier: OB0PYqZ+qGEkBd1SP6y9fiDqdFlQ4W8M5BZZhk1WjwI=
Subject key identifier: D6:04:B8:FF:AC:A5:8B:F6:FA:05:AC:A0:C8:68:07:DB:60:E9:B5:74
Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
Certificate issuer: /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Certificate serial: 0198D65F8CFF9ADB5A1DBFB1193BC6F622E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
Manifest number: 0315
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl (hash: 1WCF9YkLOwCNJ8Ffma7vQJu+T+t3NGR5qgqDpa7VaDA=)
2: slKuYhirMr_9AdtUijDzLipBRL0.roa (hash: /qHjp8kupLORl1OCxD3SUcgezP/zyet0u8Wb2x+yJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8c:ff:9a:db:5a:1d:bf:b1:19:3b:c6:f6:22:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=d604b8ffaca58bf6fa05aca0c86807db60e9b574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:c8:88:7a:e2:00:15:84:ec:22:e3:87:a9:
42:05:e2:b3:c1:ef:26:ca:59:b9:24:dd:e0:0d:f8:
d3:ac:85:1c:ed:55:e8:94:f2:66:38:48:d8:47:44:
43:a1:e3:26:8b:0f:ac:00:ac:73:25:d9:9c:cd:ae:
83:da:69:47:bf:26:99:9d:a9:60:05:8d:73:33:6d:
9d:85:68:aa:39:33:64:3b:f5:09:e6:03:5a:3b:9f:
ff:3e:c6:43:1e:28:28:be:28:e4:0d:4f:54:a1:ef:
85:ff:13:c7:ec:52:60:20:58:27:54:81:b0:5d:2b:
50:92:e7:7c:dd:67:0e:53:79:2f:61:15:7e:a3:66:
7d:01:7d:fc:0b:27:25:da:48:03:3c:d6:60:04:98:
12:8a:57:0f:3e:a5:c0:d2:d4:a0:39:3c:98:7c:63:
01:92:3f:20:c6:4f:94:d9:51:90:e5:c2:ba:e3:2a:
1e:aa:c1:e5:3d:9a:1f:e3:a6:e4:29:fc:4f:62:50:
f1:ea:13:40:b7:67:ee:9e:7a:e0:62:bd:f8:06:c7:
0a:4d:60:ab:3f:c7:51:1a:ea:a0:82:69:d4:64:75:
d0:cf:96:96:39:f0:9a:09:0d:62:bc:f5:9f:ee:f8:
6d:0d:b1:a5:f7:68:e2:a8:df:9f:0a:d5:06:26:80:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:04:B8:FF:AC:A5:8B:F6:FA:05:AC:A0:C8:68:07:DB:60:E9:B5:74
X509v3 Authority Key Identifier:
keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3b:41:c2:2f:6f:2d:71:ef:04:de:00:fd:a1:5d:f3:d5:e1:
87:fb:bc:d9:53:9b:19:a1:d9:b0:4a:aa:d4:03:14:4a:06:f4:
b4:b5:aa:94:fd:d8:5f:52:e1:c6:8b:57:f4:cb:17:32:53:97:
c0:6d:bd:6e:bd:3a:c8:05:be:83:57:0a:13:b3:a0:15:11:98:
ce:ea:19:5c:e4:96:b5:a7:6f:b4:51:a2:5d:ef:84:0c:57:0c:
07:c0:b1:7e:a7:b7:18:4e:97:ff:48:e2:dd:1b:65:47:40:06:
2d:6c:8c:9f:a1:b9:c9:8f:e9:f8:2a:bf:1e:32:58:ed:6b:47:
fb:8d:0c:39:13:09:8a:0a:c8:50:99:3f:59:fb:9f:df:7f:91:
5b:79:68:72:9e:82:b3:e8:e7:fe:7d:ec:59:0b:7d:8c:70:c6:
7b:1b:98:98:f4:7a:3a:80:66:90:3b:fb:6e:67:c6:8a:8f:c2:
0a:a4:27:e4:dd:3b:a0:c8:f6:e6:b2:4f:0f:32:86:56:41:b1:
dc:82:41:e6:04:bc:6c:d7:e3:38:bd:8c:b2:1c:cf:0b:ba:cd:
c8:d7:a4:0b:13:83:97:d7:2a:d8:e0:1c:8c:9a:8f:fe:b3:77:
51:56:2a:80:70:84:5d:b4:50:59:c5:2c:d4:cc:2b:55:39:fe:
cb:69:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:08 2025 by rpki-client