Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier: OiumWsRtjbQW3iNw4W2wrg07ueVhDfiFI/F5TrcZVmg=
Subject key identifier: 86:4D:B7:D1:DE:6F:A8:52:5F:A5:3D:06:9B:70:92:29:73:AF:A1:A0
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 0198D705AE766E1E71FC0D10ADA5F276AF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:10 +0000
Manifest this update: Sat 23 Aug 2025 13:02:10 +0000
Manifest next update: Sun 24 Aug 2025 13:02:10 +0000
Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: fGpkTM+4alYbf/o1maYJYZm7OUvPx5SNcPe7a22Cbeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ae:76:6e:1e:71:fc:0d:10:ad:a5:f2:76:af:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: Aug 23 13:02:10 2025 GMT
Not After : Aug 24 13:02:10 2025 GMT
Subject: CN=864db7d1de6fa8525fa53d069b70922973afa1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:c7:bf:77:28:7d:93:ca:0d:57:87:44:7d:
43:97:53:c5:ee:e3:b5:f4:e6:f9:b4:cb:e0:f3:7d:
c0:46:36:95:36:b7:e3:ea:89:1f:31:47:c0:a6:6d:
6c:f3:27:c3:dd:32:cb:ad:4b:dd:68:da:a5:6b:1f:
9e:ce:c0:fc:0e:23:33:37:5d:30:e5:10:b0:ee:a0:
65:19:07:5b:fa:fa:20:49:51:58:ba:d3:dc:11:1d:
e4:1a:6e:dd:18:51:b1:0a:41:ae:49:42:57:b3:84:
c3:b3:90:80:8a:4f:a2:e0:d4:0b:ec:78:a1:5d:4f:
09:40:ce:80:83:3e:c5:ac:f4:15:d8:64:8b:0e:3a:
bf:17:ee:f3:f4:af:37:55:da:77:98:d0:b5:97:15:
59:05:d2:96:f5:ba:13:47:8e:e3:24:3a:54:99:1e:
61:c9:3c:58:a4:f7:a0:2f:79:d4:e4:30:b3:f6:68:
bd:53:d0:50:4f:7b:1d:b3:48:7d:4f:44:de:a6:63:
26:6b:ff:36:5d:38:f9:c4:b3:a2:3f:79:c7:e1:40:
34:05:e0:d6:3c:4b:05:ef:9f:c7:4b:67:5d:92:d8:
a1:57:ac:25:6c:db:ea:9e:b4:59:60:63:fb:42:01:
c2:ed:64:4d:03:ff:8e:63:82:d7:a9:4e:04:73:43:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4D:B7:D1:DE:6F:A8:52:5F:A5:3D:06:9B:70:92:29:73:AF:A1:A0
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:90:cb:aa:f9:f5:79:80:c7:86:d0:5a:5e:5a:76:91:52:83:
9f:cc:19:0b:b9:8e:5b:6e:75:b4:98:ea:b2:24:b2:5e:22:ca:
d1:85:06:77:49:77:b3:2e:27:ef:53:c3:b6:ad:31:72:6d:e3:
25:eb:2c:23:cb:e9:c0:74:9b:86:08:0b:6c:2b:00:e5:99:ea:
83:24:87:dd:9a:73:00:0b:5c:1e:de:54:27:11:63:7d:b7:15:
cb:a2:fb:fb:66:bc:9e:1a:d8:7b:a2:2e:ab:21:d8:ad:22:df:
35:2a:49:ec:27:5c:a1:37:24:0f:0d:1a:61:f7:65:71:be:77:
f1:ce:71:22:c5:0b:8e:65:c1:4a:b3:44:0f:91:a9:77:54:fd:
62:b9:de:61:b7:8e:c3:b3:7a:63:01:2b:a6:88:75:22:3e:4d:
da:ae:3a:c4:16:7a:d2:42:af:7d:42:64:e4:3e:50:55:49:1b:
07:bb:9b:b3:52:c1:da:21:72:c0:3a:bf:64:5e:71:12:35:d2:
64:26:17:e8:db:33:a2:1e:6f:4a:af:39:97:bb:af:49:52:ed:
86:44:bb:f3:e5:66:18:14:57:ff:c3:e8:ab:8f:d6:b4:28:0b:
69:6d:31:8c:1d:25:b8:2e:a2:04:bf:e4:17:42:d5:e6:0c:9f:
b2:d1:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:00 2025 by rpki-client