Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: nXUt97mS1VnKh47R8JTnV52IUKXz2KV1Hkl71gEDYB4=
Subject key identifier: CB:D1:03:E7:CE:24:3E:4C:62:A2:13:5E:36:FF:64:0B:EA:F3:0A:35
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 0198D4DFD7C660D2889BC5B8AEF397E5D0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 0AF7
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: 9Wo0RQ9v4ARtHX/R0RsmnHTotOl9YvoScuJyImzthU0=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d7:c6:60:d2:88:9b:c5:b8:ae:f3:97:e5:d0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=cbd103e7ce243e4c62a2135e36ff640beaf30a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:74:ad:30:c9:a5:fb:9c:f2:4f:96:d7:9f:
a7:bc:75:58:55:a0:c5:10:2d:6e:ba:c6:fc:c9:db:
d0:8a:6c:50:45:d4:9b:dd:b0:d0:e2:1a:ee:f5:12:
f7:1a:07:e8:43:b1:d9:6c:00:6a:1f:72:89:be:58:
7a:c5:b3:8f:da:e9:cf:ad:bc:ca:89:56:06:86:6b:
fd:13:68:e2:75:a9:dc:c3:a0:27:90:17:02:03:b6:
e7:bd:93:8f:a4:bd:44:c8:fc:c3:2a:97:a0:5a:af:
7b:31:59:9a:aa:04:f7:b4:ce:09:5d:9e:18:f4:0b:
68:c1:a1:27:99:73:cf:c3:70:d6:57:d8:64:a4:b3:
34:f1:68:6a:17:7d:56:54:56:51:ce:2b:62:01:c5:
31:b3:49:ab:9e:30:a2:ca:70:fc:8b:8d:7b:1b:02:
3f:ae:f8:40:c3:8d:b1:6d:15:c0:45:d0:59:71:e7:
e8:9a:c0:bf:23:6c:ce:be:05:30:18:56:ae:b9:01:
52:63:e7:69:ca:e6:86:59:b1:db:07:b2:b4:02:2e:
3e:49:e0:d2:d7:7b:bc:f9:17:62:48:9b:09:d5:e6:
07:b3:bc:c5:0d:c7:a9:9c:09:c8:84:8f:ed:99:64:
74:d7:3d:92:45:00:40:87:a7:be:5e:99:42:ec:ed:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:03:E7:CE:24:3E:4C:62:A2:13:5E:36:FF:64:0B:EA:F3:0A:35
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2e:d1:5b:d5:3b:96:4a:10:7a:13:17:1a:ed:39:56:99:1f:
23:f3:87:c1:70:92:49:07:b8:dd:e5:a5:8d:6d:c5:f8:c0:88:
f3:1a:38:67:83:98:43:56:1c:b3:a8:ea:48:d8:3d:b6:17:1a:
2d:91:ef:5b:26:0c:50:e7:1d:0f:de:b9:30:04:04:18:f0:48:
6e:06:04:5c:47:65:b8:93:86:0b:d4:6a:d9:95:72:28:a4:0a:
84:b1:9a:c7:2d:ab:95:60:0a:2f:06:00:27:4c:2f:d8:14:63:
dd:61:e8:1f:2f:4e:f0:9e:be:74:92:2e:09:4b:9e:df:83:c0:
fc:6b:a9:72:3e:16:b8:2e:12:ea:bb:e1:88:8c:b1:07:8a:09:
8e:18:1b:74:52:64:f0:58:90:9b:f3:c6:0d:d0:ab:17:31:5a:
15:62:3d:74:00:12:5c:20:09:7e:ba:dc:50:87:7f:78:7d:51:
3b:b3:1a:dd:4e:ad:05:78:ce:3a:2f:a7:e0:50:cd:fa:d4:72:
9e:9e:c9:54:64:16:cb:a4:94:20:9e:01:30:0f:53:d9:6c:35:
89:bb:37:51:97:5f:14:dd:de:a8:a8:27:4c:ed:1b:9a:64:c8:
e0:ab:7c:7c:6b:40:e9:50:29:f8:13:f6:ca:81:6e:f7:9f:8a:
63:ea:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:49 2025 by rpki-client