Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: fVlXdxxExFY/qp5sleoo2YbENqsyBlRAjn5LkG90PC0=
Subject key identifier: 9F:03:F9:36:23:76:9A:15:C9:7C:B9:87:5A:0E:D9:A6:C5:02:72:47
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 0197B6A06C2A3C4658B83A87656336FF53FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 08DA
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: WSYLIYrevFAPlfi+11F8bzm6MnCyn2UkdAbGdStr2Bg=)
2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6c:2a:3c:46:58:b8:3a:87:65:63:36:ff:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=9f03f93623769a15c97cb9875a0ed9a6c5027247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:7e:91:6e:0b:ab:eb:b4:85:73:ae:4c:e1:
f2:d2:86:20:a2:2e:af:6c:c5:e5:03:c0:2b:23:b5:
83:1a:f9:f6:58:82:0c:a8:f0:b5:a7:b2:d2:2b:a6:
d9:98:67:d0:a8:2f:5e:3d:e4:3b:03:eb:ad:af:11:
11:e5:ad:15:31:d1:05:5e:1e:01:d1:fa:75:e6:49:
44:53:eb:54:e9:a5:f9:86:f7:0e:50:8b:de:0e:fb:
f0:59:31:e2:84:71:73:cb:29:a8:a8:d7:50:69:85:
31:98:64:2a:1b:48:b2:7e:d7:f9:53:9b:93:9c:4e:
aa:f8:3b:3a:01:f4:56:0f:b6:d3:a1:4b:a8:a8:fe:
65:88:f2:fe:90:fa:52:69:9b:e0:ae:92:f1:31:a7:
b9:1e:b5:b1:cf:3a:72:ab:40:8a:bd:ca:56:53:ba:
eb:23:92:0a:31:bd:3c:c1:b5:e0:4c:d1:0a:7a:cc:
16:0c:dd:58:cd:89:cc:fa:e7:94:fd:ba:62:16:dc:
29:2a:b8:37:13:13:dc:0a:d5:2c:b1:12:f9:f9:85:
90:54:f9:c4:af:0f:e8:12:bc:8c:12:27:21:ac:a0:
c1:42:68:b7:bb:e1:f1:f4:03:b8:f4:cc:ff:52:c1:
57:ca:0a:2e:66:ec:f5:2d:18:23:61:65:07:f3:8c:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:F9:36:23:76:9A:15:C9:7C:B9:87:5A:0E:D9:A6:C5:02:72:47
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a7:f5:01:5b:b9:56:82:ba:5b:11:91:47:b0:eb:2d:28:14:
1f:9e:ec:b8:ba:d2:d3:58:41:2c:28:b0:f2:9c:ab:90:ba:4d:
ec:40:58:69:a6:f2:99:2e:43:21:ed:84:78:71:c8:0d:a2:ba:
e0:89:4c:26:16:7f:7e:87:fb:b1:3d:c1:60:cd:b9:c9:71:ea:
65:d1:e3:8b:96:6c:77:c7:98:b2:8e:67:6e:c2:5f:c5:58:b6:
2c:bf:b4:74:70:c4:c9:e6:2a:2c:e2:2c:e5:43:c1:f7:10:24:
46:c5:a1:42:bb:14:5a:f9:8d:7a:5b:c6:06:38:75:a8:f4:99:
9e:08:11:03:85:fe:d0:51:35:29:a3:e2:5e:e7:78:5a:49:95:
95:ff:f6:3e:df:d5:b4:c8:9a:38:41:17:ee:62:67:60:c5:05:
b0:c4:f5:87:c7:76:2a:00:56:2f:55:cb:98:f5:57:96:04:da:
12:09:50:01:f5:b7:a9:4d:97:ef:7d:61:a3:d0:b1:8b:5b:a2:
f8:3c:6c:46:60:af:bd:35:70:bd:33:eb:85:0d:95:b8:05:5d:
89:22:c1:cb:a7:0a:cc:4a:83:b6:bd:a2:42:67:fe:ce:0e:a1:
11:e6:e3:14:f9:37:a1:ae:d9:13:84:49:06:77:f3:58:6e:28:
6c:89:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:22 2025 by rpki-client