Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
File: rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft (raw, json)
Hash identifier: NA4XfBW72U36HDlfsKR+bVTw+63qeO23ng0x6LREHtc=
Subject key identifier: FD:BD:18:EB:C3:ED:03:3F:0D:86:ED:F9:54:D0:E0:28:89:4B:DA:8F
Authority key identifier: AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
Certificate issuer: /CN=acfbbca852b957385909f6bd288cdf363f218b06
Certificate serial: 0198D7A921CED7F48CF0497ED0D7986F98E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
Manifest number: 1320
Signing time: Sat 23 Aug 2025 16:00:42 +0000
Manifest this update: Sat 23 Aug 2025 16:00:42 +0000
Manifest next update: Sun 24 Aug 2025 16:00:42 +0000
Files and hashes: 1: IsJ0c25oEMcq2hs62WVn3JnR5kc.roa (hash: FVZnWTpWqx/hdTsogFHC4HE54Isaap3vLQprMcgXpZE=)
2: rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl (hash: c9awgVLyCCjIvV/TWmi7raxwAhyjVW2DeKE5hp/AqII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:21:ce:d7:f4:8c:f0:49:7e:d0:d7:98:6f:98:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfbbca852b957385909f6bd288cdf363f218b06
Validity
Not Before: Aug 23 16:00:42 2025 GMT
Not After : Aug 24 16:00:42 2025 GMT
Subject: CN=fdbd18ebc3ed033f0d86edf954d0e028894bda8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:be:19:36:55:d1:60:06:42:66:4f:0e:79:
b5:24:4e:fc:40:a6:80:f0:f2:d5:fb:de:b7:67:5f:
19:ac:ce:d1:7f:cb:b0:63:af:43:32:47:46:3d:72:
17:14:70:f7:07:10:54:d5:27:28:42:b6:4d:37:98:
13:ab:48:6a:b3:ed:d9:03:25:b8:b2:68:c7:4a:06:
98:de:02:76:4a:e0:9c:b5:91:69:b2:73:b1:bf:39:
ea:be:7a:a3:53:24:e2:86:93:99:26:33:79:73:89:
a2:76:ba:28:dd:cf:e0:8b:5e:00:3b:3c:5d:c7:fe:
e3:45:8a:dd:50:40:9b:2b:52:cf:1c:1a:67:e7:13:
93:31:4f:64:c2:4f:8f:fe:47:53:55:68:e2:1d:5e:
1d:a7:55:c3:16:37:c5:8b:8f:5b:9a:31:f8:97:3a:
fb:ab:f3:34:04:d4:59:a6:51:81:e4:7b:75:3c:d8:
ac:4a:03:d4:8b:70:49:26:ff:1c:a3:06:fd:05:9a:
71:f3:1e:2b:5b:58:57:a0:61:fe:36:be:71:18:65:
54:01:c4:c8:07:d2:b6:7c:de:b1:11:f7:84:64:c7:
aa:20:c6:a9:97:f2:48:19:14:a6:0f:8a:6e:98:aa:
fe:69:78:62:4b:3c:41:4e:24:46:5d:fb:27:a5:66:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:18:EB:C3:ED:03:3F:0D:86:ED:F9:54:D0:E0:28:89:4B:DA:8F
X509v3 Authority Key Identifier:
keyid:AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1a:7b:32:54:f0:51:8c:d9:61:b4:ed:b6:5b:6a:69:ca:dc:
c2:11:02:72:48:30:3b:6b:99:06:68:a5:f1:5f:72:07:13:d4:
49:cb:4b:5b:ac:0e:f9:81:6a:3a:3e:c6:a2:80:bc:b8:81:7f:
14:1d:b2:cf:ac:42:4b:60:bc:85:23:fb:7c:3b:69:cb:2a:e6:
2b:2e:49:36:11:ef:04:83:d0:06:8d:e2:62:29:01:fc:78:a8:
09:14:19:2a:8f:db:2b:66:96:d5:47:4b:1e:61:a5:05:3f:1e:
d6:24:a6:3c:b3:13:7a:01:7b:a2:aa:fa:52:39:c6:99:c8:30:
aa:3f:c2:88:0c:59:d1:6c:d3:5c:b6:41:a1:42:16:c1:b1:64:
1e:9f:fb:cc:7f:ad:27:84:7d:71:b9:99:58:14:26:f6:0d:bb:
c9:03:60:ca:ea:da:ca:00:e1:44:e8:49:fe:03:12:67:c8:97:
63:24:8c:14:15:0e:d4:93:7d:55:cd:39:e5:86:91:16:77:1c:
89:93:a9:b8:ee:55:67:33:03:3a:88:4e:4e:3f:c1:89:91:7b:
f1:0f:78:af:f2:b4:7d:00:41:01:8e:ff:23:b7:a1:02:23:4d:
af:a0:23:32:3e:ed:e8:95:60:9f:2c:8c:5e:d3:27:43:b8:c5:
1b:a5:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:42 2025 by rpki-client