Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: PWwlQ9wammkdRNrbNzaMCpJAACsf+VOVt+oMO1JI5RM=
Subject key identifier: 83:5D:3B:75:97:0C:E5:8C:C3:B9:A6:51:D7:47:F6:48:A2:A4:B4:83
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 0198D473D5FF25917A505729936DA15DE0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 0829
Signing time: Sat 23 Aug 2025 01:03:37 +0000
Manifest this update: Sat 23 Aug 2025 01:03:37 +0000
Manifest next update: Sun 24 Aug 2025 01:03:37 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: VWI90z25fyOZoDM7PWpA3bCeynxJ07M77dXREgHvSxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d5:ff:25:91:7a:50:57:29:93:6d:a1:5d:e0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Aug 23 01:03:37 2025 GMT
Not After : Aug 24 01:03:37 2025 GMT
Subject: CN=835d3b75970ce58cc3b9a651d747f648a2a4b483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:0c:20:d3:d2:da:b0:87:88:5d:b2:3b:83:
6d:90:21:a1:c6:3b:37:b5:28:91:e0:fe:cd:9a:f2:
af:61:d8:fd:5d:ba:a8:96:44:20:e2:da:d9:6f:d8:
92:8c:fc:8f:12:8f:d1:c4:dd:50:26:4c:ec:d3:d8:
5d:1e:5d:63:e3:73:4b:15:ef:aa:a8:64:88:e8:4d:
7a:c3:5b:36:ba:14:9b:4e:7d:05:3f:14:2e:ed:41:
de:7e:41:04:1c:98:7d:ae:04:dc:22:03:4f:bc:19:
6d:88:b4:ae:c1:41:f2:bf:6e:3c:a3:f3:2d:47:4c:
fc:7d:1e:f9:62:5e:88:6d:97:93:87:ef:d2:70:29:
55:76:f2:8b:65:eb:a4:a7:3d:58:b4:74:fd:f7:1e:
cc:03:c0:f0:8b:9c:e7:80:a6:a9:00:59:ff:6f:b7:
26:1a:99:b4:73:4f:87:4a:7b:95:59:a4:c6:1c:ec:
43:21:2f:07:8e:58:f2:6a:30:c3:cd:6c:7b:36:96:
bb:f7:0f:da:81:82:e3:e4:f7:a8:40:0b:40:00:0a:
86:01:23:6d:fa:f9:1f:7a:89:f2:f1:ad:0e:de:05:
16:5b:0c:19:d6:c6:a0:c7:a3:7d:6a:c1:9c:b2:78:
19:f5:14:4f:6e:fe:97:47:2d:00:b6:69:c6:ff:73:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5D:3B:75:97:0C:E5:8C:C3:B9:A6:51:D7:47:F6:48:A2:A4:B4:83
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:65:79:9d:d7:e4:f1:0f:19:df:f8:b1:34:64:bd:2d:55:d7:
45:4c:62:f3:0c:6f:84:05:e1:61:03:05:34:d4:b2:45:21:4e:
c1:30:95:98:98:38:39:a4:97:09:13:e4:41:b4:20:98:f6:d6:
cb:59:1e:70:79:dc:25:76:f2:06:f3:61:4a:a3:5c:17:4d:f2:
57:2a:57:06:35:0a:81:bc:2e:c9:77:84:ea:e4:ca:3f:a0:9c:
9f:35:ad:1a:05:d9:e8:33:39:f4:a1:5f:9b:d6:d1:c1:22:38:
81:fd:45:3e:01:1b:cd:8e:28:03:14:22:ed:38:60:6c:4a:fc:
eb:5a:b4:17:d1:a3:30:3d:62:03:ff:39:a3:30:30:5b:d4:d5:
b6:f4:84:e7:87:0e:98:50:3a:91:52:b5:73:b6:ef:c7:00:47:
b7:f6:05:5b:e2:7f:ab:f4:5c:3a:97:ba:50:44:d9:49:2c:ab:
11:97:fa:77:e8:30:50:06:9b:a6:c3:96:04:08:3b:46:b9:0c:
f7:92:71:7d:ab:81:43:51:7b:ee:6a:9b:18:40:09:37:48:7b:
7f:f4:5a:82:96:6f:12:f2:49:9b:0e:48:48:47:7b:24:ed:e9:
cd:95:3e:10:b9:21:fe:4b:26:d8:b3:f3:8f:f3:14:00:cc:89:
76:33:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:23 2025 by rpki-client