Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: IGSB0zQ00EDVY8LrFM5TVcsu9Wufaj1dkdf6uUCzi6M=
Subject key identifier: FC:9C:F8:CC:34:91:82:13:72:0E:2C:8B:D4:B6:51:D9:63:B2:44:81
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 0198D705A7143C98DF1FA29CE1AB08A23291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:08 +0000
Manifest this update: Sat 23 Aug 2025 13:02:08 +0000
Manifest next update: Sun 24 Aug 2025 13:02:08 +0000
Files and hashes: 1: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (hash: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: zQEe4kGRUmD1J8Tn35WSqYoZgtJekquWTidJDKoL6p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a7:14:3c:98:df:1f:a2:9c:e1:ab:08:a2:32:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Aug 23 13:02:08 2025 GMT
Not After : Aug 24 13:02:08 2025 GMT
Subject: CN=fc9cf8cc34918213720e2c8bd4b651d963b24481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:93:65:fe:f4:40:e5:3a:17:9c:bd:df:d8:
b4:96:82:94:81:ce:44:25:e1:e4:5e:d5:88:6c:d5:
9c:35:cb:1c:25:a6:b9:c3:a4:2e:93:86:09:fe:71:
a7:d4:ac:e8:77:19:3b:9b:ec:1d:57:8d:ed:39:91:
42:9f:c1:11:9d:60:5a:41:2f:cd:23:4e:e0:1d:d5:
0a:0d:36:b9:75:3d:f7:05:9b:f9:0b:87:2c:3e:17:
58:40:2a:09:7e:38:7d:1a:6b:bf:dc:33:d2:dc:e2:
fa:b8:f1:df:eb:b9:60:9d:84:a3:75:15:5c:85:0a:
c8:3f:af:50:95:da:7c:d3:1e:56:82:64:a9:31:58:
a6:30:3e:62:6e:3a:7a:4e:77:15:1c:f8:6e:4f:4d:
12:1e:63:03:96:83:2e:10:f5:bc:77:5c:6b:77:16:
99:3e:70:6e:5a:36:00:98:61:8b:ab:0b:1d:86:bf:
f9:b7:bf:40:18:13:1f:ae:8c:4f:ce:5f:90:85:51:
0d:0e:b0:30:23:ad:62:c4:d8:64:19:ce:c6:26:9f:
da:ad:51:b7:e0:44:68:ca:45:66:be:08:3e:bb:b7:
29:bf:b4:ad:cb:27:ad:bf:71:00:2b:ec:56:96:0a:
59:94:5c:64:b7:4a:c8:36:3d:50:be:a6:df:76:15:
7d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:F8:CC:34:91:82:13:72:0E:2C:8B:D4:B6:51:D9:63:B2:44:81
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8a:85:67:f5:f2:b3:9f:c7:9e:b1:0b:82:43:82:18:e9:9c:
9c:bd:b4:c7:56:71:da:8b:43:c2:d0:f5:ae:46:0c:11:fc:df:
0f:e4:42:c8:0b:d9:3a:79:97:e5:9e:aa:1b:f3:4f:34:75:13:
dd:bd:fc:3a:b4:e5:6d:70:04:46:9a:13:c8:b0:19:d2:51:bd:
a2:a1:14:00:eb:61:f6:30:7b:5b:d7:33:70:12:a9:62:e1:c8:
5b:b3:b8:d3:58:ec:25:3c:27:01:8d:09:e7:06:64:9e:f4:64:
6b:4f:f0:7c:cf:81:fa:1d:8e:1e:12:5d:5b:64:51:4d:68:71:
55:ea:08:c0:81:af:64:32:3d:f6:30:88:aa:0d:80:44:a5:85:
f2:ae:e3:99:ac:ab:0f:15:36:1e:96:45:a1:07:02:5e:aa:92:
20:c7:97:9d:2d:a0:db:19:01:9b:55:80:cc:1e:ac:8c:53:56:
ef:7a:f7:4e:01:d5:6c:6a:dd:40:1d:5c:35:c7:67:67:92:26:
0f:31:05:d7:58:73:18:77:a8:bd:aa:1f:f0:58:80:1b:f4:01:
bd:f6:bb:8e:0f:0a:f6:96:de:9d:6d:ce:a7:1c:a9:61:a5:43:
44:c5:6a:61:99:56:2a:6c:2f:e5:4b:13:40:67:be:02:bc:44:
80:11:61:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:18 2025 by rpki-client