Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: v16rcyPFNbVjxckrsZsv+JQ0bE55cHF9jH4ON81ST8Y=
Subject key identifier: 28:FB:74:8C:12:8C:E6:87:F1:E9:FD:3A:F4:94:8E:9C:C8:0D:0D:AD
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 0197B7B2FD8EA1E0CE9152143BA4359C72D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 107A
Signing time: Sat 28 Jun 2025 18:00:50 +0000
Manifest this update: Sat 28 Jun 2025 18:00:50 +0000
Manifest next update: Sun 29 Jun 2025 18:00:50 +0000
Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: helH8OPaiTp7+RYrcEF5tHeMAGPLkCC5LYjfx3LQYUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:fd:8e:a1:e0:ce:91:52:14:3b:a4:35:9c:72:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Jun 28 18:00:50 2025 GMT
Not After : Jun 29 18:00:50 2025 GMT
Subject: CN=28fb748c128ce687f1e9fd3af4948e9cc80d0dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:4f:dc:79:b1:45:0f:c1:ce:8f:a6:42:34:
75:5d:bb:c9:a0:9a:02:aa:03:92:15:bb:47:5d:e8:
62:58:f9:2b:c3:e9:9c:5f:b0:cf:47:fe:77:43:49:
29:91:df:78:53:01:9e:fc:0e:0e:4e:41:ee:24:a1:
64:49:c2:f5:3c:70:90:5f:d4:f2:87:c7:48:27:69:
a2:8a:23:4a:8c:ca:09:ac:1f:fc:e4:b9:47:ab:92:
db:c5:31:fa:de:ef:e8:ac:a3:04:bf:2b:14:ae:60:
13:78:5a:27:38:a6:d2:ee:de:ff:17:08:1e:e8:12:
63:14:bc:e8:b7:6b:b6:86:c2:ff:d3:49:fa:e0:ab:
76:90:ff:9e:87:99:56:c2:c6:28:cb:44:e5:e0:29:
ec:3c:b4:ce:c6:f4:bd:24:c2:f4:75:7d:df:18:71:
d0:61:5e:c4:1d:90:88:e7:92:e9:2c:0e:94:d8:f9:
6e:ba:5e:12:57:87:4f:7c:af:94:d5:b9:37:d3:13:
f7:70:79:4b:16:c0:e2:9f:39:8f:3d:6c:38:26:d3:
d4:83:70:6f:5b:d8:e9:64:9a:f2:e2:f1:e5:24:d8:
01:f1:18:32:2c:a4:5c:66:f3:cc:3c:cf:d0:f7:1f:
0f:fc:99:e3:9d:36:a2:ad:f0:5e:32:bf:3f:7b:31:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:74:8C:12:8C:E6:87:F1:E9:FD:3A:F4:94:8E:9C:C8:0D:0D:AD
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:82:eb:0d:ea:64:67:13:7e:47:53:e6:04:19:bf:f1:67:88:
16:df:fa:cf:c9:de:d7:50:12:6d:34:fd:4e:c2:5c:ef:71:9a:
35:fc:bd:f2:83:60:a6:b7:0a:bc:18:d6:26:c3:69:5a:6a:5e:
4d:d0:72:c0:d9:85:14:fa:1e:75:8d:fa:35:ba:69:e6:4a:2a:
cc:84:b8:b5:32:16:ad:c9:fc:9b:e7:be:3f:66:33:a9:29:7e:
c2:db:4e:41:84:50:ff:9d:a2:b0:ff:60:87:c8:52:72:70:6f:
67:71:75:22:01:a0:19:82:25:53:10:e8:98:05:9a:e0:8e:9d:
a3:e3:e5:25:9e:5f:04:d4:29:8d:f6:6f:67:5c:31:c3:60:c4:
d9:cc:a9:14:d2:84:91:17:45:b5:97:00:5e:eb:d8:11:76:65:
b0:81:d9:a6:88:41:0b:1f:ae:df:85:02:9c:f0:5c:fc:fa:87:
61:7d:52:c3:02:65:59:67:35:ae:38:d5:d9:c1:36:fd:ae:36:
8e:9d:3a:1e:76:55:bc:67:34:fa:39:9a:e4:66:51:1d:df:67:
c4:0f:be:5c:9a:23:7a:2b:9a:8a:ff:4c:29:08:e3:35:7f:3b:
48:d2:d4:aa:8f:b1:70:75:33:71:3a:05:d2:90:db:f9:ed:46:
40:4a:4b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:27 2025 by rpki-client