Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: LtQ1eCAHY5zLriv/LHYtJGjsURL466QhdcQ8gkUr+t0=
Subject key identifier: 8C:6E:CD:64:13:39:93:F5:7F:24:72:E1:98:76:DA:E1:A1:F5:A7:50
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 0198D66011EAD22078ACAED440249AB1D874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: Nq9IxwtLuGEeu+eTaggi1x9aw986XpK2MFFGFzCEa1E=)
2: _ryT7JJRyl2zbDlcHLiieOVaWDE.roa (hash: aYopHcEKoiKmgUw0u7ZqiunqjMA1+tPcCa/wAYiX86g=)
3: cmxdqS626N731JSDXMkhCrtA4_Q.roa (hash: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:11:ea:d2:20:78:ac:ae:d4:40:24:9a:b1:d8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=8c6ecd64133993f57f2472e19876dae1a1f5a750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:64:17:6f:67:32:48:9a:e5:43:5a:cb:b9:
4f:bc:a2:65:4a:eb:92:d5:cb:0d:5e:60:d1:49:d3:
0f:68:50:c4:e9:0c:c4:c1:c2:14:82:73:5c:ba:d9:
33:b0:f6:61:27:f5:99:7f:dd:a3:e9:2d:79:28:40:
62:fd:87:de:24:c5:ab:3d:de:df:c3:9c:7d:06:8f:
63:e5:0c:c3:7c:6e:78:84:3e:c6:be:36:dd:a7:6c:
fc:ec:f7:d5:55:02:e6:78:39:3e:09:e7:9e:3a:86:
31:c8:60:02:17:10:f1:9f:e2:6e:88:f9:81:7f:dd:
52:fe:26:12:e8:12:d8:b9:d7:3c:1c:24:74:14:95:
f3:54:11:7a:e3:0b:bc:5f:e1:2c:91:af:0c:e1:77:
28:12:52:a9:8c:97:12:14:f2:2c:60:cc:97:ae:40:
ca:d2:e2:2e:bb:d5:f2:2c:ea:b9:a0:12:89:44:f0:
17:18:88:ed:ae:c5:b8:9e:ae:d8:2b:85:bb:12:00:
ec:96:6c:52:6b:38:04:e8:73:29:fd:1e:2f:79:6a:
b6:74:f1:c7:ff:36:80:71:c9:ff:17:b6:3b:eb:53:
c4:7a:37:24:16:4d:17:ba:14:d8:e6:21:b0:c9:42:
ad:f4:c3:11:89:c4:e1:3a:00:fc:1b:3c:6d:cc:ed:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:CD:64:13:39:93:F5:7F:24:72:E1:98:76:DA:E1:A1:F5:A7:50
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b5:0d:89:8d:9f:21:2b:4d:3b:64:56:2c:20:99:93:4a:61:
d5:ba:77:f6:ae:00:4d:63:6c:bb:dc:19:04:8a:9c:35:2d:9a:
5c:01:2f:bc:53:ba:6f:9c:70:92:72:06:6a:99:a1:a8:db:71:
f2:a2:22:e1:18:21:a8:37:9c:30:7a:78:fb:99:08:51:42:37:
b6:1b:12:4e:df:96:50:84:9b:13:ba:b4:87:10:9e:35:9e:d9:
d7:02:e8:bf:84:04:d7:2b:c3:86:d9:db:fe:74:82:ef:86:cd:
73:c2:c2:df:71:28:05:5d:0a:fb:e8:9e:2e:cf:76:69:f6:35:
fb:70:a4:dc:4d:02:7c:ab:44:98:c7:76:5e:c6:e5:7c:81:b2:
0e:80:84:4b:bb:60:c6:24:6a:9a:df:39:f3:1f:f0:39:7f:1c:
38:3c:78:df:a3:df:a7:a6:af:f3:b6:e9:e0:e7:59:ba:11:fb:
67:3d:cd:82:3c:76:3e:55:7c:94:0e:c0:be:dd:e3:89:35:7b:
52:18:65:83:d9:8f:a5:b2:a8:d3:24:e3:b2:d5:30:fa:ee:8b:
3e:91:26:03:75:2d:49:8b:d1:a4:b9:24:2e:b4:20:4e:42:28:
07:6e:ad:d3:9e:c2:9d:8a:80:50:a0:bf:74:48:3a:2a:54:20:
a7:74:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:47 2025 by rpki-client