Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: ZtCRZ0KX5D1cvWWLxmxxXQll6YlSenH94D52CqQSeGY=
Subject key identifier: 35:18:96:61:18:3B:FB:DB:8A:AC:6D:97:63:0A:DE:C7:4D:00:E6:34
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 0198D472544CFBED6483A2A6634D665A4DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 01:01:59 +0000
Manifest this update: Sat 23 Aug 2025 01:01:59 +0000
Manifest next update: Sun 24 Aug 2025 01:01:59 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: 3o4FvYSKc1ZRg9jKrOLiHZYd5Mr1o70mO8nqPRYtSF8=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:54:4c:fb:ed:64:83:a2:a6:63:4d:66:5a:4d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Aug 23 01:01:59 2025 GMT
Not After : Aug 24 01:01:59 2025 GMT
Subject: CN=35189661183bfbdb8aac6d97630adec74d00e634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:8d:ba:1c:13:6f:7b:1b:3e:82:92:e8:5c:
49:ef:c6:07:2a:10:76:02:4b:7b:f6:07:5a:d7:6d:
cc:01:84:ec:10:96:b5:ff:af:e5:ae:51:1f:6c:33:
a2:f6:06:11:c5:ef:9e:9f:df:0a:aa:be:08:7f:a2:
56:a8:ad:c7:aa:bc:06:72:d5:a0:fd:9f:f3:04:be:
5a:0a:7d:2d:aa:d4:9e:e5:60:4f:25:8a:5f:a1:ed:
a2:80:be:01:39:91:4f:a2:34:96:b7:29:b6:6c:2c:
6e:85:6d:28:4d:df:02:2d:0f:87:a3:d5:df:e3:79:
ff:26:68:56:c6:93:45:ca:a8:c7:fd:88:5a:61:ba:
32:80:45:10:f0:3a:49:6c:ad:90:9d:ec:65:e5:93:
e3:4f:fd:12:e5:da:29:85:fb:e8:ed:9f:cd:ac:1a:
a2:3c:2d:09:40:0e:a2:29:53:ce:da:57:b0:eb:3f:
eb:5a:d9:52:d3:70:08:c2:cd:07:4b:69:26:84:12:
85:43:70:92:45:ed:4c:2b:35:c8:94:9f:0a:30:a4:
08:cb:b7:29:fd:dd:99:a9:92:4d:8c:87:64:7f:97:
db:c2:24:ec:e3:1d:a6:f7:c7:49:dd:30:9c:d0:11:
ad:67:87:a1:ed:58:65:24:75:34:c4:ab:3c:21:94:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:96:61:18:3B:FB:DB:8A:AC:6D:97:63:0A:DE:C7:4D:00:E6:34
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a7:a9:70:48:ac:2a:2b:f9:e7:69:81:9a:3a:05:8c:33:f5:
87:38:52:da:4b:fb:8d:3f:01:0d:68:4d:02:7e:3f:19:c4:b3:
ad:8e:76:86:a3:d1:d2:84:69:91:4f:df:8a:2a:95:61:b6:68:
cc:ce:1a:de:56:02:04:9b:1b:25:05:ba:02:84:c1:c5:ff:c0:
db:54:7b:67:44:f7:f8:35:f6:8b:cc:d1:54:ee:a6:21:02:25:
8b:d9:8d:1f:30:33:de:43:09:51:3a:37:a3:d8:ec:a8:b5:b7:
d8:66:d9:c5:fd:db:6a:5a:e9:7b:cd:54:c0:f4:a7:a5:6f:4f:
2f:c1:79:db:76:8f:df:54:44:86:f4:d3:33:d8:aa:6c:86:d7:
10:62:b3:68:fa:5b:e6:60:16:e2:f3:3a:dc:b7:7b:67:ef:20:
80:db:d4:e3:e1:f5:2e:0b:ef:28:96:bb:5e:83:56:89:dc:b0:
2d:7c:1f:a2:34:c5:87:64:87:d9:8d:53:df:eb:d2:8a:6f:e0:
3a:c1:40:25:30:bc:1d:46:86:cb:4d:d8:cf:c8:93:e3:be:07:
a9:f4:8e:06:a4:ff:5c:40:bd:c2:19:e8:58:a0:17:6d:5d:65:
82:8f:90:34:ff:52:46:70:51:aa:f2:a1:14:9d:dc:f7:3b:ed:
ab:3e:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:41 2025 by rpki-client