Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier: 0aL8D2PyNOUBHBQm6gaHng8IL5C2JGdyJhpUDLfH5vM=
Subject key identifier: 02:98:98:88:00:E5:AA:AB:09:87:A4:86:30:C9:59:25:E4:0D:4E:AF
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 0198D47416299BBAC47B2EE8E0A6F493FBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number: 0BAA
Signing time: Sat 23 Aug 2025 01:03:54 +0000
Manifest this update: Sat 23 Aug 2025 01:03:54 +0000
Manifest next update: Sun 24 Aug 2025 01:03:54 +0000
Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: CiCoYS812vSNtynLAPhEc+LrHS2KMTI43Z2Nt+ugmXk=)
2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:16:29:9b:ba:c4:7b:2e:e8:e0:a6:f4:93:fb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Aug 23 01:03:54 2025 GMT
Not After : Aug 24 01:03:54 2025 GMT
Subject: CN=0298988800e5aaab0987a48630c95925e40d4eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:bd:26:79:76:2f:7a:6a:f0:ba:4c:69:81:
c7:3a:41:35:83:f3:48:6e:a1:16:96:c2:21:db:c3:
3f:9e:dd:33:f8:69:5e:8b:43:e3:e9:29:37:b4:19:
27:51:70:15:38:37:16:2f:a7:5d:3a:d0:e7:7d:33:
d7:eb:cb:26:80:60:fc:65:e9:a9:1c:29:99:24:20:
d8:45:24:cb:d8:de:82:3e:ae:bd:a4:5d:9c:59:42:
df:73:3d:5c:6b:70:99:90:39:4a:3a:5d:77:fc:b7:
82:a6:64:0b:04:d2:83:24:c4:e8:09:44:67:7a:89:
65:cf:e8:ed:22:08:1c:06:46:ee:69:47:c9:0d:0c:
db:bd:20:5f:b4:af:9b:dc:41:2c:1c:b8:43:f3:a6:
8e:5b:43:15:56:5a:3a:c9:d3:5a:0b:b6:49:93:66:
74:99:dd:a1:dc:23:bf:e8:98:8f:52:69:45:36:2d:
20:a9:49:86:e5:c2:e9:8d:40:f0:73:6b:fa:6f:ab:
2d:88:ff:5b:19:db:c6:ae:ab:88:6a:ce:ca:1c:5e:
9e:5a:3e:5b:12:b6:7f:b7:4f:13:42:81:06:86:cc:
e2:e1:8c:5f:17:4a:af:1d:bf:56:67:75:6b:67:56:
af:0e:44:19:3e:b5:4e:7b:f6:9f:02:94:a3:0b:a3:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:98:88:00:E5:AA:AB:09:87:A4:86:30:C9:59:25:E4:0D:4E:AF
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4f:5e:08:55:6a:a2:2b:4a:e9:f2:f9:a7:89:9b:b4:38:15:
35:90:36:62:8e:0c:c1:38:d8:6d:a5:27:c2:1c:cc:59:d1:10:
87:71:ba:8f:cd:a7:f0:b1:cb:69:e1:51:29:0b:20:04:c2:34:
5c:69:58:f4:47:31:1b:94:dd:a2:16:73:88:ae:1d:1e:c9:88:
99:77:a0:53:06:98:4f:b3:bf:6e:4a:ce:a4:eb:8c:a7:8c:4a:
31:a5:ee:b4:71:74:61:41:0a:77:81:14:25:70:48:15:cb:37:
d8:81:01:9c:92:1a:49:67:7e:c3:95:e9:cc:f9:ad:41:3b:75:
37:9d:76:7c:d6:a2:88:7e:31:cd:80:a4:75:45:c8:57:7a:12:
ea:d0:39:b4:d1:98:a0:6e:cd:0e:27:0a:ac:c4:60:49:69:a8:
1c:86:f5:7e:38:d7:23:46:d0:7b:ad:1e:cd:bf:18:27:24:c2:
88:0d:9f:7d:0f:94:fe:1c:b4:8f:6b:2c:2d:79:b7:14:6c:fe:
45:87:57:dd:c4:77:0e:c1:27:61:b6:34:3b:7f:dc:b4:18:80:
fb:31:ab:a5:33:58:e4:6a:d3:03:14:f5:c2:f4:6f:0f:be:2a:
1a:45:de:1c:f3:fc:c0:f3:56:27:97:95:5d:f5:43:49:ef:d8:
e8:03:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:18 2025 by rpki-client