Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: +YWY0UxE0J8okfcS7FvBLvZRBjauXe0qTU+rvxPILNE=
Subject key identifier: EC:28:C9:B9:F4:22:FB:AE:28:21:E5:10:00:5A:5C:27:EB:AD:8E:01
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0198D58390431384ADF55103E3B4C96DACB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: xuwmTkvLkwUfAhIheN2GG/WUpMSe3ApbIBqB11w1Gjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:90:43:13:84:ad:f5:51:03:e3:b4:c9:6d:ac:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=ec28c9b9f422fbae2821e510005a5c27ebad8e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:d7:8b:66:ac:2a:34:01:f8:67:bd:64:fc:
79:e0:7b:68:ce:ad:2a:d1:4c:56:bd:e5:e4:10:85:
cb:ab:6f:10:f6:39:e1:28:bb:cc:62:43:10:b4:a7:
61:33:6e:3d:3c:29:e8:e4:40:65:30:ca:37:65:9e:
9e:f4:20:81:93:45:dc:fd:06:71:f9:ad:95:77:fc:
c4:11:b2:09:cd:7f:80:39:21:4c:b9:1a:28:4c:0f:
91:7f:70:05:47:b4:90:6b:bd:ba:82:6f:3a:63:ff:
8e:13:7b:4a:25:06:e7:b8:e3:bb:32:62:97:25:be:
2c:fd:1a:93:48:2c:9e:9c:89:a8:83:8e:a3:c4:1f:
0c:4d:63:8c:00:8e:fb:8b:12:83:bf:44:4c:f9:02:
17:f5:db:a9:1a:a0:40:c9:b1:7e:22:84:b1:74:09:
aa:4b:50:dc:e5:65:2f:ee:00:18:6d:36:d0:ba:9a:
d8:00:b9:51:69:60:b4:32:b0:e6:8b:2f:75:51:72:
ab:c1:d2:d3:79:07:4b:00:d1:da:9d:36:2e:74:1f:
67:a6:82:e5:25:46:0a:8f:68:d5:75:6d:1e:f8:74:
2c:fa:0a:7b:4b:8b:0f:ba:6b:10:c0:37:3b:c0:08:
6c:28:ca:b9:d0:04:e0:2d:12:0c:1f:2e:74:22:16:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:28:C9:B9:F4:22:FB:AE:28:21:E5:10:00:5A:5C:27:EB:AD:8E:01
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:75:e3:2e:da:a4:cd:91:92:79:95:bf:b1:6d:bb:bd:63:d7:
8b:a4:bc:4d:bc:d2:e0:1f:6f:d2:fd:26:3f:94:50:b3:48:d3:
e9:09:25:a4:b0:2c:f2:ac:c5:43:d7:a9:a3:b6:2a:7a:81:4d:
29:89:c7:6a:65:e6:b6:4a:57:7a:fb:9b:77:cf:d3:ac:64:a3:
bd:77:dc:7c:53:de:27:41:de:1f:32:e0:b5:f1:6c:5b:df:f6:
bd:23:0f:e4:38:e0:9d:a4:fc:f0:ec:17:e8:c1:3d:35:c3:bb:
3d:c1:c8:f8:71:6e:28:39:bd:4d:7d:fd:3b:f7:ce:73:5e:5b:
3a:6c:1f:81:00:d9:78:89:86:9d:eb:34:a5:57:50:b3:ad:a8:
68:72:01:50:47:e9:e6:da:77:30:78:bf:bc:7b:83:28:e7:fe:
34:04:30:f8:6a:b1:7f:d1:86:97:68:0d:f0:78:5e:bc:54:5b:
c9:99:64:4a:b5:3f:ce:3a:33:cc:d2:c6:1d:d5:cb:ac:66:3e:
ec:69:88:a4:58:7c:92:eb:75:53:38:72:da:a3:b4:0c:43:87:
12:52:7b:7c:d3:78:a3:5e:74:8b:c1:b1:a8:15:fe:80:07:06:
15:28:8a:b5:79:9a:b6:c7:d5:74:19:bb:aa:86:13:46:3a:b5:
bf:fb:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:53 2025 by rpki-client