Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: qeZ7RkZZc4OJeIY5hZhuK3Ki6eW3Xk8GOgBonsc7p9M=
Subject key identifier: 56:C4:C7:A6:D2:5F:5E:77:E6:1E:0C:5F:84:7D:45:52:2E:40:A2:0A
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 0199FEEC128097139D953C4D69CADEFA13B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 16CA
Signing time: Mon 20 Oct 2025 00:01:48 +0000
Manifest this update: Mon 20 Oct 2025 00:01:48 +0000
Manifest next update: Tue 21 Oct 2025 00:01:48 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: TW408zfPOqg/CYZ5TkTp1aWQfcbXhIsnkpnPlXzF2nA=)
2: g44wD4exlc1l3mqvr27NiUmB6UU.roa (hash: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:12:80:97:13:9d:95:3c:4d:69:ca:de:fa:13:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Oct 20 00:01:48 2025 GMT
Not After : Oct 21 00:01:48 2025 GMT
Subject: CN=56c4c7a6d25f5e77e61e0c5f847d45522e40a20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:ba:a1:29:8c:69:ea:30:6e:d6:1e:24:86:
46:d9:46:f5:46:3c:f0:ad:b0:07:ae:02:91:b1:ca:
bf:60:7e:51:7d:e6:93:9c:5b:b6:c5:b9:f4:e7:15:
d7:4f:32:b6:57:f9:02:b5:fe:ae:a9:99:fa:b2:06:
01:db:0e:6f:55:f0:e1:81:23:7d:21:0c:fe:ee:13:
f2:8c:fd:59:68:fa:39:e8:3b:03:eb:34:49:82:55:
00:10:52:62:fe:ed:44:9a:05:7f:02:c7:8d:de:2a:
e2:44:b9:76:17:a4:35:a8:9c:56:e6:25:6b:54:24:
29:2d:c4:14:8f:cc:e8:ff:d2:f9:7d:d9:19:92:82:
c9:15:6e:cb:8a:e1:29:6c:55:92:40:55:a2:ce:49:
43:1a:94:db:d2:33:62:7f:ca:7b:6a:b7:e5:5b:f5:
2d:6b:c0:56:96:b7:56:96:9b:03:88:00:d3:ea:00:
ac:fb:c6:d8:a2:56:cb:6b:ca:6f:54:75:72:29:44:
f4:aa:f8:02:d0:d2:05:55:35:7c:51:53:b2:4c:a2:
da:f3:a7:b0:b4:c6:0c:54:2a:29:ff:80:c3:84:66:
f8:9f:c1:e9:e8:98:64:f0:ed:a6:41:c2:ef:6f:4a:
bd:09:07:92:49:d4:88:0e:6b:79:a2:ca:17:f8:86:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C4:C7:A6:D2:5F:5E:77:E6:1E:0C:5F:84:7D:45:52:2E:40:A2:0A
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:de:10:ef:ac:22:72:c8:86:14:62:c5:97:83:58:c2:d2:
df:f9:56:a0:6d:48:60:37:0f:12:33:7f:ed:9a:24:79:aa:c5:
92:60:2d:fe:8f:12:7b:12:b0:51:5a:a4:60:28:33:39:9f:b2:
6c:46:48:a5:fb:e4:bf:e6:72:8b:5f:0f:38:70:1a:de:ae:a6:
a8:01:3d:4c:ec:7c:ca:53:2e:5a:66:08:c1:ee:55:f5:30:17:
a7:05:e2:df:2d:69:b1:95:c6:58:db:30:b5:71:49:c6:74:88:
00:49:b2:f1:2e:b6:31:80:53:45:2c:f0:f1:a2:2b:2f:9c:b6:
d0:f1:9d:e4:37:60:2f:38:f6:44:aa:d6:b9:fc:82:5c:9f:a2:
3d:2b:d1:a3:4a:01:f9:ad:7b:79:31:04:ba:84:db:d8:3d:08:
7a:73:86:cf:0f:be:2f:7a:a8:5e:00:bc:f7:83:3e:1e:17:cb:
9e:2a:c7:a1:0f:92:b9:5a:da:47:bb:02:de:78:96:46:a5:6d:
9c:6e:74:35:2a:55:35:5f:fd:bd:4b:d4:49:9f:d9:fa:de:37:
0c:65:0c:47:2a:09:c7:82:4b:42:6d:e2:c1:d5:02:70:86:93:
2d:91:54:58:e4:b2:82:11:b6:4d:75:3c:d0:91:25:42:79:5d:
1d:8f:2d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:18 2025 by rpki-client