Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: mUfD7E8lY955NPfcceScgLe1q/c+o9LzhZh85V3d4qM=
Subject key identifier: 3A:B5:03:9B:96:DD:2E:FA:F1:C5:3C:0C:8F:0D:56:80:D9:67:45:A0
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 0198D65F1F2D698C68CF185DF51465765D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0F36
Signing time: Sat 23 Aug 2025 10:00:14 +0000
Manifest this update: Sat 23 Aug 2025 10:00:14 +0000
Manifest next update: Sun 24 Aug 2025 10:00:14 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: /+6ttFzgkFEA1RIb47Yu09gkN6g0MhCYNghar9O7bnw=)
2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1f:2d:69:8c:68:cf:18:5d:f5:14:65:76:5d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Aug 23 10:00:14 2025 GMT
Not After : Aug 24 10:00:14 2025 GMT
Subject: CN=3ab5039b96dd2efaf1c53c0c8f0d5680d96745a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:11:96:14:5c:e0:c4:d1:52:ab:97:1b:d0:
dc:79:57:b7:40:8f:19:57:21:31:5b:71:f2:bc:68:
a0:4d:48:d8:c6:34:b4:ea:2a:ec:1c:49:2e:7c:f5:
7b:3f:0c:02:52:5a:a6:64:05:de:34:9b:9d:da:a6:
06:f1:37:45:f8:79:00:49:2b:c9:2b:89:0d:c9:2b:
2a:06:28:50:f4:3d:dd:b9:2f:4e:15:6a:77:23:04:
76:e1:30:c3:2b:bb:cc:f6:b1:f0:27:52:8c:ec:5a:
62:84:dd:5f:af:0d:25:cd:6d:6d:e2:bd:4a:d4:79:
c2:4e:15:b3:69:e3:38:74:d1:58:0c:36:64:50:2d:
2e:4c:78:52:12:c3:47:8a:31:d3:7a:cd:21:e9:c8:
22:30:5f:99:49:0a:4f:c0:9a:61:7b:6c:88:a7:f7:
1f:75:c9:47:01:01:56:39:e4:83:10:13:96:7c:7d:
b2:2a:6e:d4:10:a2:df:9c:9d:73:7a:56:93:17:22:
51:12:65:02:9f:d0:5a:42:fd:2b:f5:74:ca:57:f1:
3c:85:ea:15:6b:2a:29:fd:79:e8:2a:cc:1c:63:d7:
43:b5:30:e5:6f:26:39:8d:82:a3:bf:d8:c4:78:aa:
45:a9:f3:dd:97:24:96:e0:a4:94:57:04:82:0a:76:
31:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B5:03:9B:96:DD:2E:FA:F1:C5:3C:0C:8F:0D:56:80:D9:67:45:A0
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:74:5b:08:fd:7f:d1:2d:bc:b1:c2:ce:b3:08:2d:b3:e9:e2:
17:24:e5:66:3d:93:b1:67:e7:d3:67:02:28:21:74:82:62:04:
57:4c:60:a0:03:fd:e7:3b:29:80:00:4d:8b:a2:2b:6e:8e:b0:
78:e9:8f:55:5a:36:4d:2e:9c:73:3b:fe:2d:c1:72:c6:96:52:
49:c4:46:cd:b5:3c:27:fd:66:58:eb:b8:3c:0b:af:d9:1d:96:
35:7d:68:b6:58:36:12:55:f2:50:a5:9e:ca:04:08:27:2d:80:
50:9a:b4:e3:95:fc:9f:2c:f1:af:26:08:52:36:da:24:57:c4:
17:fd:a9:57:73:86:58:d3:f5:9c:e9:48:88:55:1f:13:b3:7a:
95:9b:fa:24:ec:b6:ff:58:be:01:1c:9d:9c:92:e1:bd:78:35:
3b:7f:ce:f1:88:6b:a6:f3:4c:7b:49:75:6b:c9:2a:68:8a:1f:
e3:28:e6:95:04:a4:16:56:14:23:c0:da:44:ce:4b:49:fd:30:
20:ae:55:09:b1:11:7a:8c:42:9b:6e:7f:79:62:23:cc:f9:d2:
e3:44:6a:2e:fa:15:17:18:3a:62:2c:7e:42:0d:a9:c7:7e:18:
9d:a5:56:62:1a:57:49:7e:ea:14:ef:f7:10:b9:58:48:29:47:
b8:35:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:39 2025 by rpki-client