Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: OpTV8R2RCkzRZvHXdqdT9sFIlUpLSCtdbPjowzNiFL8=
Subject key identifier: 35:C8:A8:76:DA:55:69:3F:1B:A8:4E:71:19:3E:96:1E:1F:FE:A2:4E
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 0198D6604E4123095F3872A68E66D5597693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: kYSVLdUloH4KdLziNwy9+JNnDwA/ss5+F3JgWlMbF8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4e:41:23:09:5f:38:72:a6:8e:66:d5:59:76:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=35c8a876da55693f1ba84e71193e961e1ffea24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:49:84:9d:05:f4:1a:4e:8d:bf:9d:fe:5f:
29:0e:4f:54:ff:9d:62:f3:10:8b:94:ae:4c:55:cf:
7a:4e:78:c5:64:fa:1c:22:5f:d3:d1:e1:a2:33:4a:
ef:9e:b1:a8:91:f4:e9:a0:dd:18:1e:78:2e:68:8f:
5f:cc:e3:02:f5:20:d7:ff:27:dc:cf:78:80:e2:cd:
50:dd:5b:5e:a2:11:6a:31:1b:16:c4:99:e7:23:20:
2d:6b:ab:65:85:db:c0:76:18:bd:86:f1:a9:4f:3d:
2c:30:5a:ae:eb:29:1b:5c:11:2d:e6:16:60:06:ed:
23:21:fe:b8:bc:17:46:08:9e:36:35:13:52:00:9b:
46:32:2d:a9:df:f3:68:17:3a:54:f3:bc:9a:d9:3d:
77:d4:b8:bf:9b:52:d0:6e:64:2a:b0:d3:d8:f0:bd:
0a:e0:45:f3:7c:c8:96:35:59:e2:3e:b6:33:12:c0:
9a:2a:b2:ec:83:82:e1:b0:92:98:f3:02:d6:7d:31:
34:c0:3d:91:64:c3:7e:3b:57:95:3a:33:c1:7a:49:
95:ac:2e:f7:04:d3:59:91:46:19:f8:e4:7f:83:f4:
8c:a1:0b:06:4f:36:0a:15:53:a3:48:bf:6e:b0:e3:
31:7f:3c:0b:97:74:2d:d5:db:0c:c8:aa:5b:a7:5e:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:A8:76:DA:55:69:3F:1B:A8:4E:71:19:3E:96:1E:1F:FE:A2:4E
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a7:8b:2b:81:22:54:04:12:4f:8a:75:7f:9e:27:53:d4:36:
2e:20:c7:b8:f8:d4:4a:ba:04:98:14:d6:ad:e4:c7:37:9b:44:
92:eb:e0:df:36:55:f0:4f:42:99:e3:b1:75:e9:f1:d6:fd:97:
49:79:d3:35:2f:cd:e7:e8:df:f4:4e:94:73:5b:b4:d9:e3:78:
79:ce:ed:b0:0e:ab:65:ef:1c:4e:cc:6e:ff:b2:95:9a:04:31:
be:48:0e:00:99:cc:3b:f5:fa:8c:9e:d4:8f:fb:0b:d0:fd:15:
d0:40:c8:a9:ed:21:dc:50:72:d3:53:3e:1e:2c:31:de:24:8e:
a1:c9:24:03:21:87:cd:2f:a4:1d:01:b4:05:72:5f:45:50:cb:
a5:66:16:55:f8:f9:2f:d0:4f:a9:98:f9:29:52:b6:5d:e6:8d:
6f:db:32:d6:92:2c:d1:1b:e3:07:ba:c4:59:d4:94:31:7f:da:
14:1e:81:75:c1:76:82:31:e2:7c:d9:0e:8e:af:a1:9c:05:b6:
30:a2:1f:67:80:2d:a6:1f:cb:d8:a3:8f:e2:60:8d:10:8a:4c:
d7:76:f1:b4:79:c6:66:1e:02:c0:d9:6f:be:25:a0:e8:e0:aa:
10:41:58:c4:5c:a0:85:ca:df:e8:d7:7f:8d:59:d2:2a:85:df:
63:e4:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:01 2025 by rpki-client