Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: TJSSrKo0RAZehjOSjWb5isJYdAjuGEp/0SpKvHlFM6A=
Subject key identifier: EF:2E:C8:AC:A0:77:4E:81:9C:FF:5C:38:BF:44:8D:E1:47:DB:42:BD
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 0198D73B0D42A688101657BFBEBCF54F2462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 15F8
Signing time: Sat 23 Aug 2025 14:00:28 +0000
Manifest this update: Sat 23 Aug 2025 14:00:28 +0000
Manifest next update: Sun 24 Aug 2025 14:00:28 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: o9ECRRHfzCo/jAxm7Ytuo5wDHE0K6cwZSrq6aCkAoi0=)
2: XWiker2v7GIlhkuZZtR48lVm108.roa (hash: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=)
3: zJ5MYEMzWfucEDGxLfmRzsaSeEg.roa (hash: 13et8HkfUmrO0+ptVe41OzMBwG62Ru5G13R9afNJkP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:0d:42:a6:88:10:16:57:bf:be:bc:f5:4f:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Aug 23 14:00:28 2025 GMT
Not After : Aug 24 14:00:28 2025 GMT
Subject: CN=ef2ec8aca0774e819cff5c38bf448de147db42bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:0a:b7:a6:68:d8:a8:42:05:20:bb:7c:5f:
2a:34:fe:e6:db:7b:bd:40:c9:90:b4:b9:ef:c2:8f:
48:6e:ed:7a:38:68:43:65:04:e9:1e:72:6d:29:c1:
6b:0d:ed:46:98:fe:c5:fd:c7:8e:fb:98:8e:8c:59:
63:0d:a2:88:cc:93:0f:b0:41:e5:c7:b4:9b:a6:2c:
60:d4:38:9b:b6:9b:c2:50:13:73:3c:2f:a5:fb:09:
98:6e:6e:d6:45:b9:16:fe:1d:83:a7:67:e0:ea:bb:
70:15:ac:a6:7b:35:0f:2c:d4:ed:55:f6:34:a3:e8:
0f:3a:7a:59:08:18:b2:38:57:93:c7:52:34:84:54:
5c:91:b2:ce:df:60:ed:bf:d2:38:b1:94:11:91:e6:
28:47:b4:50:6d:86:69:d5:c5:40:3c:ac:18:4d:bd:
31:a4:f8:c6:9f:02:d3:68:0c:9a:6d:12:11:92:60:
3b:7a:f7:0d:40:b4:c8:4c:69:2b:b9:d6:f1:8e:c0:
74:48:2f:ab:99:65:53:69:76:90:70:6a:e2:40:c2:
9a:12:6e:86:18:43:9c:1d:f3:1a:47:96:27:fa:10:
10:fd:41:ea:45:95:be:23:6b:98:94:81:3f:8b:1e:
51:84:8e:a3:d4:aa:21:01:b5:c3:b3:ff:ce:e5:90:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2E:C8:AC:A0:77:4E:81:9C:FF:5C:38:BF:44:8D:E1:47:DB:42:BD
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:29:d2:ac:bc:6b:a6:a7:43:7c:b8:e2:41:6a:1b:67:36:7f:
95:b3:85:f4:b0:32:20:3d:72:34:1a:b2:61:53:f2:ce:04:77:
bf:55:8b:d3:fa:4e:85:f3:6e:72:88:ed:9f:db:7f:9c:8a:1d:
55:dc:82:6a:a2:e7:8e:6d:7c:2c:8b:a7:60:51:c3:9e:ee:fd:
ea:75:0e:01:b7:8f:02:9f:74:e6:38:5f:98:3c:40:0b:d6:09:
e4:7f:94:3d:e8:15:c5:94:62:d1:06:29:ac:fe:0c:9d:5e:2c:
0c:a2:73:e4:98:c0:05:fe:a1:ba:60:90:00:10:08:ec:09:ae:
11:24:a9:08:3d:cf:87:fa:ed:a1:54:bd:74:08:b2:02:03:50:
d1:8f:49:27:de:6a:6c:26:eb:b6:82:c0:bd:f2:99:bd:90:b6:
88:56:46:27:b1:96:14:1e:99:63:59:92:49:fa:6a:22:6f:e7:
68:7f:be:83:d4:3c:ab:3a:1f:2b:bd:34:d8:60:a9:fe:ed:ab:
57:07:43:ca:70:03:5e:38:80:9a:d2:1f:d1:38:72:ab:bb:cf:
9d:25:b5:25:66:c3:6d:4e:8f:3c:7d:22:d6:22:26:1f:0e:11:
65:56:84:f8:41:9a:b4:94:b1:0f:9a:72:38:2a:ef:8f:9f:ad:
06:fb:78:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:54 2025 by rpki-client