Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: vu/YOyHO17+QY1dUNgWZ7vqf6WaQVgc7zkmwWnnNZjo=
Subject key identifier: E4:00:42:D6:6A:22:E3:05:57:81:9A:66:4C:22:99:61:75:57:3A:21
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 0198D5835235A91C372B0AE2EF33DF9322CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0A57
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: xUp487dyW9but0nt3dlzwZUunHqXua5XpGNqDpxOpNQ=)
2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:52:35:a9:1c:37:2b:0a:e2:ef:33:df:93:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=e40042d66a22e30557819a664c22996175573a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:c1:c5:ed:e9:c4:6f:10:74:93:d6:a3:28:
cd:93:6f:a9:2d:75:64:de:04:25:d0:5b:5f:60:78:
72:b2:60:3c:ba:46:67:d7:1d:f3:da:9d:9b:08:4c:
ee:ee:9e:14:fd:c8:64:f7:62:4b:6c:65:56:2e:89:
2a:bb:9b:d1:cc:f8:a6:d1:d1:4d:db:f7:d7:a7:ff:
e3:85:ba:f5:97:72:d8:c3:a3:fe:81:b7:2f:2b:30:
56:79:08:47:4b:1b:dd:3f:bf:04:bb:a1:e6:c5:ef:
e7:7d:3f:c5:ac:80:81:92:8a:62:a6:e7:59:cf:20:
fb:56:7b:d4:4b:c5:a6:c6:eb:11:ac:e0:81:75:c1:
61:62:d7:82:6b:e5:e5:34:2a:46:84:8f:ec:2c:ae:
80:5d:a8:1e:6b:c8:97:c4:c2:03:57:0d:78:7f:40:
f4:73:92:4c:3c:36:96:45:10:f9:01:e0:22:bf:91:
a4:54:2b:5e:ad:40:05:cf:2f:bd:1b:8c:d7:cf:35:
c6:66:6c:0e:bb:59:a4:96:4d:6a:65:0a:ba:0b:78:
84:12:05:a0:0b:d0:e1:13:0d:2d:6d:55:5e:08:ef:
12:a4:80:77:93:7e:b9:c9:36:c1:96:17:8b:c3:3c:
d3:4d:62:70:9b:8b:86:cb:9d:e0:8e:62:b1:05:2c:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:00:42:D6:6A:22:E3:05:57:81:9A:66:4C:22:99:61:75:57:3A:21
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6e:77:95:70:96:af:ab:cc:ea:df:a9:9a:e3:0a:56:67:dc:
15:25:3b:0a:50:50:0f:44:d6:29:10:a3:5d:8c:b7:63:57:36:
a9:25:72:2a:c7:85:1b:a8:0e:d6:ca:d3:16:09:13:e8:31:1f:
7e:90:92:61:11:5d:26:14:c6:9e:bd:15:69:5d:9b:6c:ed:5f:
89:d5:e7:c6:29:74:77:81:92:09:ad:06:3b:09:5a:ca:a6:b9:
ed:08:4a:10:72:ca:61:0f:99:ad:9a:30:ae:8c:75:5f:8d:7e:
1c:6f:7a:8e:02:13:5a:3e:56:78:b2:5a:6f:9e:79:96:05:22:
e4:64:06:0a:11:02:82:79:ee:38:8e:6f:45:3d:9f:1e:5e:1a:
09:06:ef:1f:ff:08:33:80:aa:9f:69:59:ee:50:28:53:9b:c0:
1f:e4:59:63:81:04:30:70:ea:19:78:17:da:86:1b:87:36:7b:
77:47:ed:df:dc:1c:7c:4e:40:7f:81:17:3e:0d:aa:7b:cb:b0:
48:1d:e8:3c:a3:b0:8b:90:df:5d:ed:b6:48:47:46:56:05:8e:
96:4b:d1:ac:d5:18:2e:0a:b5:74:7b:26:61:dc:bb:72:c3:c8:
88:88:9c:1c:b2:56:82:68:07:64:7b:f3:c2:2b:7f:7b:c8:f2:
20:00:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:43 2025 by rpki-client