Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
File: flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json)
Hash identifier: PRBmi/FXDMsBfiMNanJP8gkda6oMgnsC5eGkATXJdtc=
Subject key identifier: 38:A8:4F:F9:9F:D5:4B:74:8D:6D:59:B2:7F:FA:93:21:3C:DB:31:AE
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial: 0198D5BB910CF009C5012C339BCA521EB522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
Manifest number: 0952
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: 7NZ3oQkMOQoPZU36C6qwxb2VoVE.roa (hash: 47N6P40TbSFw4GF5u3qAezQZQpvVncE6hSSscr+AiT4=)
2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: zEaxSeAkiXT16kMJavwQMr1M3kId6frOROgJM2aVbsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:91:0c:f0:09:c5:01:2c:33:9b:ca:52:1e:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=38a84ff99fd54b748d6d59b27ffa93213cdb31ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:f6:fc:af:76:54:e0:34:82:62:d2:7e:59:
18:ff:95:16:38:c0:50:86:f9:ae:6f:a4:9e:9e:ca:
ee:a0:0a:1a:23:c5:81:72:c4:9b:69:a5:f7:d5:31:
40:7b:7e:77:b8:09:3a:3c:a9:80:d0:1d:3b:81:b6:
ee:d7:04:c5:60:9b:60:b6:74:1d:90:50:fa:13:e7:
15:21:40:d1:ec:c8:b6:db:1a:29:15:c4:cc:0a:1c:
10:60:f2:cb:3f:1e:ff:d2:0a:64:fc:5c:f4:10:e5:
c3:38:34:6b:dd:6c:8a:e2:1e:1d:fe:0b:5a:27:51:
35:d8:d1:5f:cb:6d:1e:a6:f9:7a:e7:dd:ae:93:61:
97:66:f7:4b:73:fc:e8:9c:37:02:6d:4e:37:b6:ef:
cd:cf:3f:86:f8:52:7f:43:f0:6e:a0:63:31:78:35:
ff:7e:ec:69:f7:ab:3a:86:f6:75:8a:14:53:d3:5a:
4d:a0:34:e4:f4:ab:b3:d9:92:50:c8:44:97:e0:18:
83:57:d7:e0:1f:2f:ed:4d:7b:14:40:0b:d2:e6:77:
09:38:ac:34:2c:b3:25:96:d9:6b:ea:bf:10:fb:db:
b7:e5:8d:4e:d5:f9:4e:eb:af:d7:7f:5e:13:35:14:
e2:e2:ac:1e:eb:ce:3c:d9:af:84:7b:56:1a:a5:af:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A8:4F:F9:9F:D5:4B:74:8D:6D:59:B2:7F:FA:93:21:3C:DB:31:AE
X509v3 Authority Key Identifier:
keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9a:4f:88:1b:f3:59:28:27:49:43:f0:c9:aa:d7:65:94:59:
05:d0:52:15:de:aa:86:a1:3c:5f:21:61:4b:b1:e1:a2:f2:4e:
5c:c0:bb:09:d7:ea:bf:ce:cd:be:74:35:1b:39:09:80:15:a9:
52:f9:90:b3:38:47:44:f7:0d:dd:41:da:d7:fe:c6:dc:40:fc:
55:98:9b:1d:3c:e5:9a:4c:a3:5b:a5:f6:8d:de:99:cb:21:15:
de:1c:f8:3b:6e:ff:70:4e:26:07:81:af:96:d3:4d:05:85:0f:
85:cc:33:43:59:14:ca:58:30:f8:06:94:23:15:d1:aa:98:d3:
df:77:94:f8:44:cd:00:e7:a9:3b:e3:bb:11:81:28:e7:ea:53:
79:12:61:e5:ad:8d:7c:ad:bc:6e:c2:64:c0:c7:f8:80:e9:2a:
ff:0a:31:cf:63:ab:5c:be:dc:76:e7:12:46:b0:f6:d8:4b:aa:
8a:3e:ed:86:e4:c7:db:d9:b3:d0:6d:31:c4:2b:7d:ef:52:36:
da:88:ae:e9:26:94:2f:43:ad:2f:4e:97:27:33:c7:a1:2e:35:
be:b9:84:d4:ec:6e:01:0d:1d:72:69:aa:6e:50:18:e1:51:df:
c6:58:a4:dd:6d:76:fa:9b:f5:6c:8c:e5:b6:a1:dc:fc:85:42:
27:de:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:47 2025 by rpki-client