Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
File: fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json)
Hash identifier: eJZxTKllpeEejUaph1AcBbBzAQPqYhHIsyWuacztifE=
Subject key identifier: 4F:32:01:7F:95:E6:1A:12:39:C1:21:9C:0C:36:CA:9C:14:C7:16:70
Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
Certificate issuer: /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Certificate serial: 0198D7739EFA3710D5B86E175E83DBBDD8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 15:02:15 +0000
Manifest this update: Sat 23 Aug 2025 15:02:15 +0000
Manifest next update: Sun 24 Aug 2025 15:02:15 +0000
Files and hashes: 1: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: MNAzBjmnc1koog961JmGk9cTYlA0WrEefYqNk4dplKo=)
2: gq5QbYLmKExu3_jiX8nvuPbkj4s.roa (hash: CUD+O9KICmmQQx1gdUSevF1umi42aYgBLH/jxWWsdAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:9e:fa:37:10:d5:b8:6e:17:5e:83:db:bd:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Validity
Not Before: Aug 23 15:02:15 2025 GMT
Not After : Aug 24 15:02:15 2025 GMT
Subject: CN=4f32017f95e61a1239c1219c0c36ca9c14c71670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d1:78:6b:08:39:79:5e:6b:91:a7:ac:3c:c3:
51:d3:54:5d:fd:d1:2d:72:0d:f2:52:31:2e:fe:6f:
14:d4:7e:25:93:a4:2f:02:ee:60:7c:f1:2f:16:37:
5a:71:d8:4c:98:37:80:28:ab:24:76:57:8a:99:b3:
69:c9:64:cf:6c:c4:bb:dd:4d:96:3c:79:07:f8:b8:
f6:70:09:f4:20:8e:62:e8:79:c8:28:e7:ae:8c:16:
ea:d8:75:7c:43:e6:da:9f:ef:3b:a8:a6:2d:a5:98:
92:80:ff:9a:d9:5f:0a:3a:d2:30:a0:32:d4:77:b3:
64:97:9d:f9:7c:04:cf:fd:34:e5:0d:d9:86:6c:48:
6b:38:52:c8:ec:e1:8e:1a:f7:7d:32:0e:8b:f5:53:
c9:52:2f:26:71:26:d2:6a:0b:78:93:2d:6f:4d:62:
a4:06:12:e9:60:5a:4f:06:84:48:e1:09:f5:54:b0:
6e:fa:de:d3:15:e0:7d:e4:b3:58:e3:7f:10:37:bb:
e3:62:56:31:96:38:b7:e1:27:6f:8c:96:5f:cb:eb:
1a:76:7a:14:1b:0a:af:44:e6:46:11:94:35:79:b2:
c2:98:01:38:10:35:6b:3c:6f:79:39:f0:97:ff:cd:
9d:96:36:c4:27:bd:69:04:4e:9d:92:c6:b5:3a:e8:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:32:01:7F:95:E6:1A:12:39:C1:21:9C:0C:36:CA:9C:14:C7:16:70
X509v3 Authority Key Identifier:
keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4e:b4:c7:6e:a7:87:44:d5:6d:e8:6c:56:c4:52:2e:04:d0:
3f:ca:4a:56:b7:d2:f6:34:7e:22:e7:45:4e:bf:c1:36:f9:c4:
a2:f0:f1:89:c4:12:71:40:ce:7d:13:c1:f1:24:e3:91:28:72:
d2:32:41:b2:28:fa:85:d4:83:e1:71:1b:f4:21:38:e2:b9:b4:
58:51:d0:29:95:bc:61:d6:0b:57:d4:6e:47:70:f0:08:cd:95:
b5:2f:2c:13:c8:54:ca:29:64:fc:97:af:3b:e4:72:82:3a:65:
8c:00:4f:c1:85:ec:97:98:38:d9:8a:92:c4:bb:9b:d1:d5:22:
54:f7:34:9b:48:cf:70:41:48:62:62:54:d9:d1:57:70:68:15:
00:9c:66:84:b3:4c:87:85:47:35:25:a3:d9:5d:d4:3c:49:7e:
0e:8b:59:eb:92:25:bc:ec:35:30:a2:95:3d:35:18:26:68:8a:
ee:a8:d2:95:40:03:4f:c7:df:11:cb:d0:5f:8b:f1:5e:bc:ba:
c8:27:b8:76:8b:8a:e7:91:4f:8c:bd:9e:6f:d5:b1:21:ed:d0:
70:93:0f:0a:ee:7b:8c:3a:e9:a1:12:e0:ae:29:aa:ae:41:42:
63:10:84:7c:5f:10:01:ae:92:bb:ac:0e:b5:73:5e:e9:d1:29:
10:22:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:52 2025 by rpki-client