Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json)
Hash identifier: phio9POrpLn7aHMPJh7jqi+Hxz3ytkXS1yula6DxxMM=
Subject key identifier: ED:AC:B6:82:0F:4A:81:35:A8:AA:84:BC:D5:DB:78:89:E0:43:B4:90
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 0198D5F1972D643DF9B2A80D5AF17D8743F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
Manifest number: 13D2
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: OwIv7U97sC9dks6Rl4mlkK2f8GI.roa (hash: 8n+wp+UnJSkfB2nwEoGtaJ5dvj8q4nuluWU6IFbCLc8=)
2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: M1aOdmiany+KRlxptvfBLIYBgOfzlkDmoKwafCn7Y6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:97:2d:64:3d:f9:b2:a8:0d:5a:f1:7d:87:43:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=edacb6820f4a8135a8aa84bcd5db7889e043b490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:55:67:ae:d7:0b:56:aa:83:0c:c7:b9:a7:
c3:72:72:1b:53:1e:f4:5f:12:5c:ba:fd:99:0c:a5:
48:95:1f:51:3d:56:f3:7e:b3:ac:d8:0b:0f:2d:21:
24:de:67:7a:a0:84:78:2c:aa:61:97:8c:0a:81:2e:
6a:b6:31:d8:98:66:f5:59:ef:61:17:05:20:ec:ac:
3c:c2:ec:d6:05:57:80:aa:e4:77:f1:a2:d9:04:b6:
1e:66:3c:2b:0c:84:b5:7a:34:9f:92:2e:b0:f5:62:
21:5e:5e:e9:0f:75:c6:a9:df:3e:2d:4d:b1:93:42:
d6:a9:3d:0c:53:36:fa:9e:2d:9b:71:56:11:62:8d:
3f:62:3c:2c:3e:e3:86:c0:79:a0:b3:84:06:49:6a:
92:c1:ad:a0:9b:fb:30:3c:ee:f6:d0:f1:49:57:5a:
95:93:66:bb:13:8a:59:85:2d:cc:88:0c:b9:51:85:
56:73:dd:31:a2:98:eb:b3:e4:5a:22:72:fd:a1:5b:
45:2a:b1:6c:cd:93:f1:8d:88:6f:e0:60:0b:71:b6:
d2:ba:9d:31:86:40:6d:9e:40:01:87:38:9f:10:af:
89:3c:ba:22:63:30:35:0d:7f:5b:d1:01:2a:b2:b9:
af:7a:b4:e6:71:bf:56:ad:13:31:06:14:23:c8:e2:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AC:B6:82:0F:4A:81:35:A8:AA:84:BC:D5:DB:78:89:E0:43:B4:90
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ff:3d:fe:36:eb:c0:b2:11:5a:49:26:b2:1c:fa:57:32:16:
a8:bb:99:99:30:02:dc:5b:c1:c6:76:d0:08:1d:bb:c1:89:bf:
00:f1:1b:95:bb:e0:ed:63:e4:aa:8b:64:80:5c:37:5f:15:e8:
52:77:c8:93:1b:bb:41:c3:5a:9f:c3:8f:a2:18:50:37:68:72:
b5:9e:70:ae:83:06:0f:f4:31:5b:f1:19:f4:19:eb:6e:ff:67:
b8:14:2d:3b:35:53:53:9f:48:07:3b:ef:e6:bf:94:18:f7:c8:
81:9f:4a:e7:df:47:95:04:29:4e:42:c2:7c:82:ba:1e:ca:14:
98:fd:7a:58:07:72:8d:2c:9b:f5:d1:ff:cc:0f:35:d6:df:2a:
ca:b4:1c:fc:10:bb:58:2a:e5:51:c0:96:1f:70:67:ee:81:6c:
4e:df:b6:8e:6d:4a:bb:f2:ca:7e:48:a1:a6:e7:b9:22:6e:01:
54:6e:d5:6c:9b:e2:9f:4a:29:fa:e3:4d:d2:d9:b1:39:7c:f8:
52:a7:d0:e8:0e:59:1c:3f:d0:da:d9:51:71:65:54:a7:b1:58:
63:e0:11:15:d8:16:10:df:a7:40:ef:54:93:28:f1:e3:f7:37:
66:a4:ea:bc:cc:e6:d6:0e:03:2d:77:aa:30:fb:f5:a3:e8:23:
1e:b8:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:12 2025 by rpki-client