Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: FTUFxp51hwtFfgqtFAyDxvnvnXs0las/oPlSgWC1ZKo=
Subject key identifier: B0:98:EF:5C:4C:C3:5B:DF:56:75:D9:9B:26:A0:E1:96:93:80:E2:05
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 0198D474467E20F0076FE48DFCEFE8710009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 10E7
Signing time: Sat 23 Aug 2025 01:04:06 +0000
Manifest this update: Sat 23 Aug 2025 01:04:06 +0000
Manifest next update: Sun 24 Aug 2025 01:04:06 +0000
Files and hashes: 1: E7khi_dy64NAplQCGIYWONm6XWs.roa (hash: B7pDURftKO1TVaIjuNJYi/KUiJRc83FFsiFwUHpeKCw=)
2: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: YXWMcUTXnGCtSGKfa6s491G4mfnduvLaxqa+ovytBXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:46:7e:20:f0:07:6f:e4:8d:fc:ef:e8:71:00:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Aug 23 01:04:06 2025 GMT
Not After : Aug 24 01:04:06 2025 GMT
Subject: CN=b098ef5c4cc35bdf5675d99b26a0e1969380e205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:8d:db:f8:ef:fc:0d:e4:a8:b8:8b:10:9a:
ef:78:c6:13:26:f3:9b:29:9b:3e:7d:15:fb:31:35:
d6:01:7d:69:f7:26:3d:c1:2b:98:1d:d3:bd:29:ed:
18:5e:6f:e2:0f:8c:3b:6a:5e:fb:dc:10:73:67:91:
e3:e7:8e:8c:b8:cf:3e:03:4d:17:25:19:80:a5:53:
63:2c:eb:d9:dd:6d:27:5f:93:5d:b7:f9:1b:61:66:
92:07:b4:84:fa:22:01:3b:0c:6f:da:46:2b:09:42:
0a:42:4a:17:83:16:4b:42:a0:a9:d6:ae:76:06:e2:
21:e1:5d:4a:37:25:1a:08:8a:3c:7b:3d:4e:55:f1:
97:64:77:3a:3a:b6:cf:d5:51:1a:1a:eb:58:f9:bd:
1f:41:c9:3d:c3:47:26:0b:db:bf:74:fc:98:8c:27:
a3:74:f5:5f:14:67:fe:f4:b1:63:cb:96:3c:50:57:
64:88:6d:8e:90:3a:7e:26:a1:54:4c:87:e2:4d:2c:
e2:91:ce:72:65:a6:a5:de:be:ef:65:fc:94:2f:db:
bd:0d:53:4d:a8:55:e4:77:a4:26:93:54:d5:b7:d3:
1c:16:97:8b:cc:1d:9c:f1:63:7a:19:e6:c9:78:e7:
fb:fb:61:ea:9d:30:e5:7f:30:1f:38:51:d0:2c:6a:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:98:EF:5C:4C:C3:5B:DF:56:75:D9:9B:26:A0:E1:96:93:80:E2:05
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c8:e5:03:25:eb:6f:eb:b3:9c:e6:4e:23:1f:98:f3:07:93:
0a:65:b5:ba:38:3d:fc:2c:d0:a9:d8:d0:aa:5a:20:bb:7d:3a:
05:f4:a3:d7:7b:2d:df:d7:6f:69:56:d4:bd:70:ea:05:22:5b:
ed:8d:a0:f5:dd:02:69:e6:fd:d3:0e:94:d1:d1:d8:2d:7c:51:
08:1d:05:2e:c8:95:1e:5f:38:59:e3:b3:45:f1:89:d5:af:66:
b4:c0:4e:8e:79:1c:0c:ad:77:d1:45:bc:29:4e:b8:09:3d:e2:
ac:d7:17:fb:36:50:08:af:6f:d4:ca:82:3a:f7:15:6c:a6:3d:
97:96:81:b2:91:14:08:d0:32:1d:89:ac:88:ad:24:62:26:90:
f3:56:6c:59:53:a1:f6:9f:cb:f7:3e:c4:d0:82:83:98:85:e7:
9b:4a:16:82:51:b9:34:12:63:66:b6:07:af:4d:02:57:49:45:
e2:13:57:c4:00:35:4c:fa:aa:28:b6:ed:5e:84:21:f9:c7:1f:
6c:6b:66:3e:ba:3b:28:b6:92:68:2d:e7:c0:f8:09:b9:0f:c0:
0c:04:0a:03:2c:d8:0d:87:0b:15:4b:d0:3e:94:84:a1:1a:a0:
fd:40:cf:ef:d0:21:82:e0:9a:f8:22:a5:83:12:49:ec:92:d1:
20:35:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:49 2025 by rpki-client