Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: PJMjElc6BpkDadFg6rzDq0Z066tGIvx/J3YF1uGUTzU=
Subject key identifier: 62:A6:68:D5:F4:74:EC:9E:29:BD:97:52:23:65:03:20:0F:83:11:C1
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 0198D439B7B29815DD44D1D21806D61164A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 034D
Signing time: Sat 23 Aug 2025 00:00:08 +0000
Manifest this update: Sat 23 Aug 2025 00:00:08 +0000
Manifest next update: Sun 24 Aug 2025 00:00:08 +0000
Files and hashes: 1: DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa (hash: 8XNyxo7dqU3caZB7WQMnNM1LcvoL0TWuICCANY2KZkk=)
2: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: iXY75JW0nbf3L7LmJ5+2dtRzUURzDYR71FtJxK8VmRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:b7:b2:98:15:dd:44:d1:d2:18:06:d6:11:64:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Aug 23 00:00:08 2025 GMT
Not After : Aug 24 00:00:08 2025 GMT
Subject: CN=62a668d5f474ec9e29bd9752236503200f8311c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:63:d4:87:83:3b:67:76:92:93:7a:33:88:
59:23:2a:f8:ff:1d:51:72:e4:2c:3b:02:4b:03:d7:
8f:8d:27:84:98:c4:a9:cc:0f:fb:ea:a5:3f:65:eb:
29:55:ae:ab:a2:d6:e1:45:2e:66:18:58:08:5f:7d:
1d:97:44:b6:88:9b:a2:f4:45:33:e9:97:6d:73:30:
ba:3b:a5:e9:09:6e:14:92:09:ac:24:cc:98:5a:c7:
bd:94:d7:77:a9:06:58:1b:de:6c:71:32:de:3f:15:
74:7d:80:96:7c:33:4a:8a:0f:f4:9d:3d:82:9a:eb:
ce:2e:31:30:c4:ba:82:4a:20:74:a6:48:b1:f1:6f:
3b:ac:c1:a9:3d:9b:c5:5b:a8:d9:ef:1b:20:57:7e:
54:70:f5:8b:ee:b3:bd:04:4f:4a:f3:26:f2:98:cf:
84:ed:45:4b:fb:50:fd:ce:42:21:6a:9e:aa:cc:9f:
db:2c:6b:3f:e6:fc:8f:b1:33:98:38:a4:e0:ca:8c:
c5:0f:9f:76:0b:33:17:aa:5f:ba:88:94:be:bf:75:
f2:fc:5f:f7:04:6f:40:31:44:0f:c6:11:4d:43:cd:
70:4c:03:5e:32:db:4e:24:29:52:3a:a0:21:47:a2:
ec:25:18:c6:4c:4f:70:c7:d9:79:15:5f:bd:a2:a0:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A6:68:D5:F4:74:EC:9E:29:BD:97:52:23:65:03:20:0F:83:11:C1
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2c:e2:6b:9e:a4:ed:e7:39:19:82:ad:7a:9d:06:15:0f:40:
cb:02:48:aa:9c:20:a3:d9:07:32:da:97:13:cc:f3:36:7b:ab:
44:0d:13:f9:d4:1d:4d:84:cb:f9:49:fa:8b:34:fd:cd:bc:43:
21:66:4d:00:cc:e2:dd:0e:e2:72:5e:71:a0:e7:1b:d0:af:85:
5d:e8:c3:f6:00:8d:b1:65:61:d9:ab:84:d7:22:f6:03:d3:6d:
c5:13:82:aa:13:33:35:84:b3:1c:70:91:85:21:fb:f1:39:9f:
c1:9a:7c:7d:31:16:b1:d7:3c:f4:24:3e:b8:20:cb:9f:9e:30:
f7:6e:00:68:bc:93:ee:f6:5d:80:56:86:73:02:08:1c:6a:56:
75:b7:fa:a2:63:c4:ce:70:1c:e2:e7:5a:21:e4:0f:8c:78:40:
fd:ca:4e:9b:f0:e2:bd:53:c4:35:02:f0:75:b7:6f:34:4a:89:
9a:f9:0d:0f:88:45:d3:72:c6:b2:ba:96:31:67:72:17:19:c1:
95:22:51:53:a6:9f:85:3a:6b:52:bc:c9:59:4c:b1:97:f9:f0:
04:db:6c:49:6a:9f:55:9f:52:47:d4:99:6c:05:c7:f0:f3:83:
f0:cb:c9:d2:54:1e:36:5c:82:a5:04:c5:2b:bd:4b:c7:18:ae:
2b:76:10:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:09 2025 by rpki-client