Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: urijBsGcc2o8n8rcvBVjEt2EkPbCpl+ZAxZk1Qjitoo=
Subject key identifier: C0:17:F9:EF:E4:0F:D1:C6:8A:C4:7F:28:56:5B:F4:A0:49:D3:F0:C5
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 0198D7A8D774F0B681880BCF8C2E6671E259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0C7C
Signing time: Sat 23 Aug 2025 16:00:23 +0000
Manifest this update: Sat 23 Aug 2025 16:00:23 +0000
Manifest next update: Sun 24 Aug 2025 16:00:23 +0000
Files and hashes: 1: 5sCkK7bklit8UCUa80RZqIi-t9k.roa (hash: x447DPcTaj4M634Ku+wuq5YFVtP2ChxFRDLcvpSmPLg=)
2: B2JmCPoyhnai-DrPu98QS4-q4eY.roa (hash: woSQjHInZQrl0IFraZgxQZSnFc0QedADaWjQdsYiLbY=)
3: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: Dvg6UkBJaAvW4FTagVOaIxLtiHW1cg4CACkRtsb2dww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d7:74:f0:b6:81:88:0b:cf:8c:2e:66:71:e2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Aug 23 16:00:23 2025 GMT
Not After : Aug 24 16:00:23 2025 GMT
Subject: CN=c017f9efe40fd1c68ac47f28565bf4a049d3f0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:31:72:4c:c5:fd:3b:d5:19:4c:d8:46:c0:
57:e3:b7:dd:f2:07:be:59:a4:1c:af:de:68:0c:38:
69:77:88:b1:fe:82:14:f6:b2:60:7b:01:be:9a:37:
7f:24:d7:d3:6d:1a:4b:ec:77:04:1c:be:60:d5:6f:
26:9b:ad:31:84:76:70:63:ed:be:4a:d9:3b:7e:75:
2d:ea:04:e9:74:22:05:7e:53:9a:1a:01:e6:e1:1a:
3e:ea:e1:2e:f4:0b:18:32:3a:e5:64:48:70:54:8d:
f9:bc:48:02:42:f4:3a:1c:e7:e8:89:41:be:63:9a:
c1:ad:09:0e:ac:95:91:1c:e5:30:33:0a:3b:49:be:
23:6f:26:0c:06:18:68:e8:8b:88:ea:18:c1:ae:8c:
a5:4d:1b:35:93:0a:ab:21:0b:ac:2c:f0:db:ac:8a:
fd:cb:81:c7:d4:10:30:39:c6:a0:3e:2c:c0:32:c8:
07:58:e1:e7:4b:84:50:e0:90:e0:2b:18:41:b7:b1:
e3:04:7d:f7:88:57:ac:9a:63:5d:6e:1a:ae:dc:ad:
05:d5:40:65:2d:63:e0:71:85:2c:b1:05:d7:2e:e4:
91:c8:93:2c:40:9b:83:72:48:38:23:a5:65:2f:86:
07:17:1e:c5:fd:a1:51:c0:6f:4b:b7:87:ae:51:31:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:F9:EF:E4:0F:D1:C6:8A:C4:7F:28:56:5B:F4:A0:49:D3:F0:C5
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:af:c1:f3:18:df:26:b3:69:2f:4c:86:d4:e9:12:57:7a:
a2:86:51:5c:13:a6:2c:25:10:c6:96:aa:03:73:29:a0:d6:25:
44:f5:b7:a6:54:f7:21:39:2d:b3:e8:78:80:86:aa:af:15:ad:
bc:2d:a0:6d:6f:fc:00:f0:e0:26:9c:50:5a:cb:ce:70:05:3d:
d3:38:37:6c:2d:46:2d:0f:ff:1f:e8:88:91:8c:e8:dd:ce:a6:
86:c0:4d:5a:a2:de:91:a0:e3:c9:6c:2a:77:20:77:8c:5a:28:
96:73:9a:cf:37:e7:38:83:de:3e:86:4b:84:ab:ce:83:27:1b:
3d:cc:b9:9d:a3:dc:a1:1c:fd:36:65:1d:b6:a1:f0:54:ca:23:
d2:6b:a2:ba:03:05:e5:49:35:48:8b:22:61:a2:83:ee:8b:3c:
fd:18:cf:90:46:0e:36:25:2c:0a:b9:24:3e:f5:41:f5:de:5b:
18:62:3d:77:99:85:19:19:8a:80:b3:10:70:9a:a6:90:55:7d:
1d:82:75:75:45:a2:f6:06:74:df:46:8f:00:4b:3c:23:15:5c:
1f:3f:bb:06:55:18:1a:42:26:eb:e8:33:22:db:96:c0:65:38:
34:b2:ee:9f:67:b5:46:df:65:ac:f7:11:8b:48:ce:50:37:95:
ce:f5:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:31:16 2025 by rpki-client