Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: hS48qb1w5UpoRc/IfJq5sfuqME3rzNF5LuOO3p5KqHc=
Subject key identifier: 35:79:46:FA:29:1C:F2:3C:F1:06:C8:49:40:78:2A:2E:6E:92:B5:63
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 0198D4A7C1D892A11C1CAD63A0B30D767678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 09FC
Signing time: Sat 23 Aug 2025 02:00:20 +0000
Manifest this update: Sat 23 Aug 2025 02:00:20 +0000
Manifest next update: Sun 24 Aug 2025 02:00:20 +0000
Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: j+qgaa/6Xxm9qF8HIpVDNmLhpKPVpDCU+2LL9kszXuw=)
2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c1:d8:92:a1:1c:1c:ad:63:a0:b3:0d:76:76:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Aug 23 02:00:20 2025 GMT
Not After : Aug 24 02:00:20 2025 GMT
Subject: CN=357946fa291cf23cf106c84940782a2e6e92b563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:b9:f7:30:83:7b:e4:22:23:e9:af:4e:38:
18:f2:2f:8f:81:94:1c:32:b3:3c:72:8b:73:da:64:
ba:b2:40:4b:15:1e:4d:aa:8c:dd:18:26:d2:f5:47:
d1:d8:e0:5c:99:ee:d7:3d:fd:88:6f:0c:5d:05:3e:
ce:0d:31:8b:0f:f3:4c:f8:9f:ed:90:02:9b:bf:32:
af:2e:2e:3c:a3:ce:07:93:8b:25:59:2c:3f:af:35:
bc:2f:e5:50:5b:05:cf:67:eb:61:74:86:6f:1e:31:
87:69:ce:01:a8:7f:30:9f:69:1a:22:30:6f:77:5b:
73:01:bc:bc:6c:06:71:78:9b:9b:29:09:02:56:8b:
d8:ec:40:20:24:05:fc:04:1f:7e:04:1c:de:cb:e3:
5a:6f:62:a2:35:9a:10:2f:98:6d:60:e2:3d:24:dd:
1e:b9:40:ec:6a:41:c9:9b:c7:af:d2:9b:d8:67:8a:
bb:8a:80:39:3d:c5:aa:31:21:76:28:74:8e:e1:ec:
76:09:0d:27:bc:7b:b4:a3:d6:3c:e7:dd:42:ea:d4:
66:b5:a0:bd:a5:bd:02:65:32:e1:7c:b5:14:2b:e7:
b3:94:81:30:cd:ff:ae:c9:a0:40:7b:90:0e:fb:ed:
c5:3b:1b:f9:ba:18:3e:2b:b0:50:f7:2e:2f:f5:07:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:46:FA:29:1C:F2:3C:F1:06:C8:49:40:78:2A:2E:6E:92:B5:63
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:60:d9:fb:3b:18:4f:c7:16:b2:3e:1d:3f:b1:da:46:d7:56:
da:1b:98:60:ab:c8:9e:1b:6f:12:04:e4:0f:95:20:dc:23:74:
e5:94:32:6b:a1:f2:8e:3a:9e:80:69:67:1c:97:59:75:18:8f:
90:66:1e:45:3e:bd:1b:ac:90:a5:cf:f9:11:12:da:b6:7a:65:
dc:29:7f:fc:46:a2:df:fc:21:d2:51:2f:ae:f5:c6:6a:3f:3f:
b1:a9:66:cd:27:24:92:93:29:55:ab:74:d6:7f:2a:7c:47:56:
22:21:e3:28:6e:3b:3a:ba:65:51:38:9e:08:2c:51:47:43:37:
58:17:3d:00:d0:12:0d:14:9d:d3:e4:87:c2:da:82:ef:c5:19:
1e:b9:04:a3:f4:d6:6a:73:69:52:02:e3:2a:1a:ff:52:00:db:
97:5d:1f:dc:39:b9:2b:f8:f6:bd:c6:1c:28:6c:e1:94:26:cc:
76:1b:22:32:c0:cc:6d:48:04:a6:b1:0a:61:79:52:6c:7b:91:
cf:a8:19:ec:89:0d:f3:7d:38:2c:9b:60:f8:69:aa:4e:87:12:
41:74:76:83:29:48:8c:72:d7:da:d4:9f:3c:62:83:24:85:0d:
a5:5c:a5:08:83:09:36:9d:c9:17:aa:be:d7:ef:36:d7:b8:5c:
c1:ab:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:51 2025 by rpki-client