Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: 64DmUGRxTtuLDmI0NRiRgjJwMsXmuxNMvvXlLQCmUxM=
Subject key identifier: 01:11:3A:22:11:99:3C:AE:5A:E3:CA:D8:CC:D3:21:72:77:83:BC:E7
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 0198D5F14754621D971305C40348F96711FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 08:00:16 +0000
Manifest this update: Sat 23 Aug 2025 08:00:16 +0000
Manifest next update: Sun 24 Aug 2025 08:00:16 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: 7SWwwNfPjYvFFX9qpR56tRJlyP3WPcLZKrdhbMKB3UU=)
2: O3vVokpmMILfLuCvtK11xQ6QzgQ.roa (hash: QJ033XApjs5jTBUXlpnVdiwOxF+/6PemalcFTFglCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:47:54:62:1d:97:13:05:c4:03:48:f9:67:11:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Aug 23 08:00:16 2025 GMT
Not After : Aug 24 08:00:16 2025 GMT
Subject: CN=01113a2211993cae5ae3cad8ccd321727783bce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:17:52:83:30:fc:30:08:26:ea:69:8d:e0:
7e:44:eb:b6:7a:75:35:65:bd:a3:c8:65:a9:0e:9c:
d0:dc:20:61:72:d2:cb:1f:5d:81:44:ef:d7:bf:d2:
61:02:c1:17:44:6c:95:61:56:54:fc:f7:cf:1c:fc:
5c:a3:4d:26:1d:c3:19:19:7a:1c:8b:53:d7:b2:ea:
57:fd:f7:32:49:03:43:e4:ae:86:6e:e3:d7:a8:a5:
d6:34:49:a8:ab:3d:44:bc:25:b6:ce:52:e4:ef:b0:
2d:2d:51:cc:d0:0a:5d:a6:2a:c2:58:18:7b:a1:0a:
f3:9b:ef:b5:c7:80:09:3b:97:7f:34:55:fa:9e:df:
de:97:c9:42:d6:59:86:f9:50:c1:c6:b5:bc:48:c2:
70:d3:00:a0:83:d4:85:20:1e:58:70:f7:fb:31:d1:
f9:26:90:32:04:41:36:20:e4:d6:45:1b:5b:84:90:
a9:f7:42:85:bc:e0:a1:0a:4e:d4:ba:41:4b:8d:05:
5c:70:03:f4:97:c4:ee:ad:2c:a2:8b:e8:11:45:70:
64:c9:b2:2c:89:cb:ac:fa:60:56:4a:48:ae:8a:d9:
69:51:41:eb:57:46:73:1f:45:ac:8f:1b:fb:4c:0c:
c3:35:a4:3d:c9:46:ff:aa:e8:a4:04:3a:36:ed:83:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:11:3A:22:11:99:3C:AE:5A:E3:CA:D8:CC:D3:21:72:77:83:BC:E7
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2d:44:61:2d:b7:5f:b5:94:c8:1a:2a:0d:c6:ce:08:52:a2:
ac:88:87:0b:dc:57:a0:95:a2:27:16:85:c4:17:ec:18:1c:26:
96:bb:3d:e1:fb:ec:50:ef:1f:41:08:7b:2c:52:4c:8f:32:77:
80:ff:37:96:4f:f3:d8:13:d5:0a:e9:8d:01:51:e6:5f:37:fa:
b7:70:c0:e9:44:91:4e:f6:f2:22:ee:44:cd:e9:bd:a4:e3:96:
db:ff:97:d9:8a:5a:cf:7d:1c:c6:16:e2:dd:0d:e5:2a:44:25:
3e:e6:23:3f:d8:86:46:8e:be:15:3c:50:b1:cc:77:1d:4f:df:
0e:ee:e0:2e:9c:c3:24:7e:48:37:34:f5:8e:1f:2d:14:38:7d:
46:ff:8f:8a:08:e5:0e:3b:55:d2:4c:2e:70:33:d9:6e:ed:a5:
3d:89:f1:d2:86:0b:d3:29:17:ed:a9:2e:16:07:13:e8:35:97:
48:e0:67:8b:6f:50:40:cb:4c:ef:07:d5:85:73:01:13:98:f4:
11:44:1c:f4:3f:5c:3c:98:ae:2b:6b:07:36:f8:30:91:8d:84:
9b:70:28:6f:da:9d:d8:ba:18:23:a7:aa:f2:7a:cd:59:44:f3:
1a:ee:e2:00:bc:d7:4b:df:3e:30:28:b6:6a:af:c3:21:e0:b9:
45:cc:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:14 2025 by rpki-client