Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: i7HA1Vj4/KcChtpOfG/oDNxBAEePNNcRRL83LbnCiPM=
Subject key identifier: 23:00:20:0F:86:31:98:F4:AE:51:0C:86:EF:A9:6C:1F:A4:F4:E5:A5
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 0198D515E05EB20BAD7D31F87F99E5A3D70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 1621
Signing time: Sat 23 Aug 2025 04:00:37 +0000
Manifest this update: Sat 23 Aug 2025 04:00:37 +0000
Manifest next update: Sun 24 Aug 2025 04:00:37 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: VbwbYbrr81GzkmlHc1x/7rR8O677mcydS1FYBnXVMUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e0:5e:b2:0b:ad:7d:31:f8:7f:99:e5:a3:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Aug 23 04:00:37 2025 GMT
Not After : Aug 24 04:00:37 2025 GMT
Subject: CN=2300200f863198f4ae510c86efa96c1fa4f4e5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:e6:a6:5c:06:4b:4a:e7:0e:6b:7b:83:c6:
4f:da:8e:d4:72:c5:0a:35:b4:3c:65:03:2f:a5:a1:
c2:96:05:72:50:a4:ca:ab:60:74:3f:e6:88:42:73:
b5:4a:9f:e5:94:1b:63:df:31:92:95:a9:91:e5:f2:
9b:0e:e8:3c:bb:e4:d3:2e:cb:9f:6f:d6:2d:7e:e7:
8c:f4:3b:63:e2:8d:22:90:f2:6d:1a:6c:74:fe:5b:
e1:b9:45:e9:49:ad:e9:55:b4:b6:b6:0e:81:31:de:
de:2c:0a:46:7e:07:62:a1:80:1f:2d:73:f3:73:c1:
04:78:eb:a2:21:93:27:d2:fb:13:14:25:b0:f5:6d:
01:43:da:a9:d8:ff:c4:d8:52:6f:a5:32:59:8d:1d:
a8:68:8b:9e:40:98:f5:71:a8:4a:8e:0c:3f:f0:77:
b6:37:5a:3f:81:88:7e:fa:a7:e1:7c:ff:7f:49:06:
76:a6:78:08:f1:3c:6a:7c:1c:c6:3b:47:7e:53:14:
2b:06:d2:de:5f:ec:c0:53:0e:9a:c6:a8:a0:f9:e3:
f2:b3:94:cc:6a:28:cb:78:2d:7b:13:27:d7:91:eb:
6f:32:cb:82:61:4d:67:1d:72:86:25:54:03:db:13:
78:96:b9:89:48:2c:16:98:53:5f:24:c3:54:26:7b:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:20:0F:86:31:98:F4:AE:51:0C:86:EF:A9:6C:1F:A4:F4:E5:A5
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5d:90:4a:49:bd:27:9d:58:32:17:8e:3a:61:aa:eb:a2:29:
68:2e:54:c3:0b:54:49:5a:47:3e:02:f7:61:52:ef:a3:88:d1:
aa:ab:01:4b:e9:c2:73:38:d7:65:df:c3:d2:49:fb:f4:06:37:
21:4b:1e:38:2a:b4:62:d1:9a:69:ba:1e:bd:73:aa:76:8a:b6:
b7:23:e4:5d:76:0a:ca:bc:a8:57:69:b7:c7:79:38:5f:60:e5:
9f:2d:9e:6a:94:64:c5:42:97:bf:34:d1:1a:89:40:0f:ee:b1:
09:b9:c0:b4:97:e3:3d:12:46:15:91:1b:77:4a:47:e5:6c:d6:
bb:af:60:11:d1:e2:aa:1b:2e:7a:46:97:17:d3:12:f7:ce:7d:
5c:cc:14:70:62:2a:17:85:53:35:35:c2:aa:f6:97:08:95:5f:
04:61:e0:9d:ef:ce:c7:db:0e:f5:13:23:05:3e:86:81:38:bb:
a8:71:a4:cf:ca:a5:3c:43:da:e1:14:40:4e:ad:92:cd:f3:55:
1a:16:96:5e:4f:db:1a:da:5b:b5:50:ab:d7:e3:4f:d0:69:aa:
83:41:84:75:33:d0:c3:85:f8:21:86:e2:6e:51:3b:36:88:de:
e5:56:82:bb:14:26:ea:43:13:01:9d:bc:b8:b6:0e:0e:0b:30:
32:b4:b7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:57 2025 by rpki-client