Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: vMgZBLdDMTRPYTwF+lJBuymp9TxTwrOpG4V+pWJ7I0w=
Subject key identifier: 10:48:9B:12:4B:05:24:89:CF:54:0A:FA:84:A9:4D:01:A5:5C:B0:3B
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 0198D583F39E58746E020EA45ED942922F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 1630
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: 82KbyNfLKkrv/D5Ia6vllykBb2JBwbgme7eq5NC+OP8=)
2: g44wD4exlc1l3mqvr27NiUmB6UU.roa (hash: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f3:9e:58:74:6e:02:0e:a4:5e:d9:42:92:2f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=10489b124b052489cf540afa84a94d01a55cb03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:23:ee:ad:b8:c8:e7:09:6c:df:b0:ca:a1:
db:95:43:74:a5:c0:3f:c9:05:ee:db:7b:58:cb:a0:
4c:bc:53:36:1d:19:c9:ba:34:7b:4d:94:b6:48:80:
47:77:d0:25:6b:0e:e1:2a:c4:5d:77:d5:41:d7:21:
88:68:0b:76:6a:57:69:e3:6a:6b:92:83:23:4e:d3:
8b:ca:54:1e:9a:f7:f1:66:59:48:4b:d7:cb:67:76:
01:20:57:a9:6f:36:4f:fe:f5:3a:81:88:4a:b3:2b:
d7:77:a3:57:09:9f:9f:f7:4d:31:e5:c3:84:b7:a9:
67:c8:4f:29:02:88:12:53:58:2b:18:ce:3e:16:b2:
70:89:e8:fb:8b:66:af:d4:cb:ea:64:14:20:7f:fe:
7d:0a:1f:a2:b3:fa:14:d0:db:fa:98:70:f4:ab:82:
69:ce:b6:7b:87:4a:54:4e:5f:1d:c4:ab:51:cd:8b:
0b:8a:b0:57:76:c6:d5:e2:a3:23:2a:e6:94:05:2b:
27:d3:c2:d4:c5:9c:e2:98:e0:ba:d1:6c:fa:9c:c1:
71:73:a0:87:44:72:ec:5e:a1:17:93:dc:2d:1b:78:
ed:b4:74:cb:3b:a3:08:3d:99:85:e8:02:2d:ff:ad:
9a:04:e0:e5:19:9c:57:19:5b:85:0a:8a:db:6c:42:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:9B:12:4B:05:24:89:CF:54:0A:FA:84:A9:4D:01:A5:5C:B0:3B
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0d:dd:17:e4:79:89:75:59:a6:5d:45:0e:be:5c:3f:a3:1b:
82:c6:dd:e2:50:2d:92:a8:15:f0:80:76:95:5f:00:0a:2f:9a:
b5:75:d0:92:11:a5:9f:ff:90:88:7a:46:a2:e6:1c:e6:b0:bf:
c1:13:18:06:01:f7:44:93:cc:ec:6d:09:19:3d:6b:12:63:0f:
de:c3:6b:d4:15:9c:9d:87:d3:dc:fd:13:79:f0:69:f8:a2:c4:
7c:96:84:e2:ce:5f:cc:06:41:5b:3d:f3:1e:f8:61:33:91:51:
6a:4e:0d:12:6a:de:e2:d7:af:32:e0:89:86:53:68:61:6e:c0:
77:0b:1e:af:04:f0:09:b5:d8:53:68:6c:67:1d:30:56:73:c8:
47:6b:a8:4a:b3:5f:fd:0b:07:87:10:3d:ee:dd:6a:8d:c7:cb:
32:fe:45:4a:7d:0a:e1:14:39:c4:32:a6:2d:db:83:56:25:59:
07:01:7f:5c:89:d7:67:49:08:a0:74:87:d1:67:34:aa:6e:28:
28:fc:9c:97:ba:74:2b:7c:19:e9:6b:54:a7:e8:19:db:5d:47:
fa:0c:a7:6f:e0:89:b6:0f:12:77:b7:c4:d5:c8:a7:aa:85:f5:
24:74:8b:44:68:59:72:9a:ed:49:d1:e6:e9:2b:7d:db:6b:9e:
51:01:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:44 2025 by rpki-client