Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: +aRtSCOpA9542fqo8405KOSFgrckaPBaxdtPhe6qmBQ=
Subject key identifier: FE:4A:D5:D6:C2:A2:B3:F9:9E:61:16:A6:FA:C7:E4:20:BD:D9:C4:EC
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 0198D7058AC875327CBD363D06F35A7B2CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0389
Signing time: Sat 23 Aug 2025 13:02:01 +0000
Manifest this update: Sat 23 Aug 2025 13:02:01 +0000
Manifest next update: Sun 24 Aug 2025 13:02:01 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: J2U+DOyy9rxFO2DaQ80nb8ot3j+FV3tV5Q20KvEa88U=)
2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:8a:c8:75:32:7c:bd:36:3d:06:f3:5a:7b:2c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Aug 23 13:02:01 2025 GMT
Not After : Aug 24 13:02:01 2025 GMT
Subject: CN=fe4ad5d6c2a2b3f99e6116a6fac7e420bdd9c4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:23:c7:41:c9:03:45:21:9b:4f:a3:30:f3:
88:26:2a:e2:ce:bb:23:88:e5:74:9f:e3:f4:d4:d4:
de:1e:6f:29:76:73:24:91:9d:8d:74:36:12:c0:34:
90:74:7c:ca:05:0d:a9:c5:a3:15:bf:df:c2:3b:15:
ee:20:30:07:e4:a7:b7:87:48:0a:d0:51:b9:e2:dd:
07:ae:d6:1a:18:12:4a:50:e0:28:1c:3d:02:0a:22:
85:f4:b4:4a:cd:21:23:56:57:1b:d1:c9:66:2a:5b:
59:b7:d9:55:7b:ca:34:16:ab:fe:0f:be:19:6c:bc:
00:05:0e:47:79:7b:36:01:dc:92:cd:da:cb:4b:5e:
8d:0e:29:7a:f6:c8:b8:de:c4:65:39:33:52:d9:82:
47:97:39:62:05:8d:33:76:af:07:65:7b:5b:16:2f:
7b:8f:bc:33:c2:e2:5c:13:89:cf:c3:f1:b6:2c:97:
9e:d9:ed:27:fe:2d:ed:4d:1a:c9:bf:c6:b9:6a:e6:
ab:b4:0d:1e:c4:e9:2b:fb:89:65:fb:76:52:d1:65:
4b:0c:3e:03:f0:55:aa:62:9a:ff:48:16:9b:62:b0:
21:9d:58:b6:89:04:ce:5b:1f:33:43:bd:80:4b:b4:
56:84:6f:d1:48:a2:e1:f5:c7:ca:37:c1:3f:62:a5:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:D5:D6:C2:A2:B3:F9:9E:61:16:A6:FA:C7:E4:20:BD:D9:C4:EC
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dc:d7:f9:71:ab:70:53:59:4c:0f:f6:0f:c4:1a:d0:ff:63:
ff:c7:9b:50:71:52:db:e1:61:76:d9:f9:f9:5d:3f:4a:bb:55:
1b:34:29:f0:8a:8d:ae:ea:9d:34:17:f7:c7:27:c0:9e:0e:ae:
13:b8:3f:74:31:16:1c:a5:bb:1d:71:e2:80:cc:f5:66:0a:19:
51:8e:5d:13:ce:92:44:ec:49:fa:dc:9b:74:76:96:bd:f8:94:
8b:ba:a2:a7:7b:4b:90:93:2d:ca:1a:45:29:0c:da:88:00:d9:
d3:d7:e1:f0:86:df:50:63:ca:47:2e:e0:07:23:5b:49:b7:de:
f4:e8:7c:03:b6:86:10:70:41:4f:59:d3:13:57:b3:22:3e:f9:
62:0e:d7:f8:ef:17:76:16:6d:20:1b:d6:79:9c:e1:4a:21:10:
44:c8:18:29:91:8b:fc:19:f4:c7:f5:45:c0:e8:b6:7e:b1:e7:
7b:a9:b0:41:fa:07:bf:74:0f:2f:16:21:cf:c9:f8:2f:36:87:
df:80:9f:89:e1:b1:8f:18:20:f3:78:0a:56:86:c1:4b:69:ec:
a6:0e:78:bb:13:3d:72:26:05:fe:88:d4:7e:12:95:95:12:57:
bd:0f:92:0b:80:60:74:f9:15:85:91:40:1f:52:62:dd:e9:e1:
04:e0:6c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:27 2025 by rpki-client