Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: 5TRL+9J67Bn5HhoO+ST51YZ4yWeLdpLqA9MwIPsCQ+U=
Subject key identifier: 52:C1:65:F6:5C:2C:26:C7:1B:D7:4E:17:DC:85:B0:E9:3A:42:63:75
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 0198D473EE925AC3F498430893F881769D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:44 +0000
Manifest this update: Sat 23 Aug 2025 01:03:44 +0000
Manifest next update: Sun 24 Aug 2025 01:03:44 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: 5GDaF+xT2XPm84OtbohsUGummTBURuYn3Z7Bz9LUJAM=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ee:92:5a:c3:f4:98:43:08:93:f8:81:76:9d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Aug 23 01:03:44 2025 GMT
Not After : Aug 24 01:03:44 2025 GMT
Subject: CN=52c165f65c2c26c71bd74e17dc85b0e93a426375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:c4:f6:37:d7:17:06:0c:41:25:5d:68:37:
2c:e7:00:93:dd:2a:92:0b:07:3a:1e:46:de:53:53:
53:b2:28:3b:b6:c7:4a:d7:96:4e:0c:d5:8b:0b:81:
98:ed:1e:c7:ec:7b:9e:3f:81:6c:36:e9:97:e5:af:
a9:5d:b9:b4:76:64:c4:d2:8f:16:ee:9e:c8:2e:7f:
08:06:c5:dc:84:df:f8:a8:74:ae:ba:f1:68:4e:d4:
8b:00:8a:92:6e:e9:d3:b7:2a:b2:bd:16:00:2c:7f:
3f:f5:ee:16:b7:21:da:3e:72:ff:70:0c:0e:7c:82:
99:c1:5f:ca:ae:90:d6:29:63:1e:45:62:a8:56:72:
8b:80:72:e6:bc:75:2e:cd:42:22:21:a1:0a:aa:dd:
99:08:d1:89:0e:36:23:1f:12:80:85:a7:8e:44:27:
22:33:8c:98:cb:d1:25:3d:9c:f7:e9:f6:d5:1a:fa:
8b:a5:c6:4f:ef:bc:62:b5:1f:ce:cf:90:6f:a4:a7:
91:5c:79:69:44:bf:ce:16:86:39:4a:89:93:9f:ce:
2d:48:8a:23:b3:80:e6:a1:1b:7c:3f:58:eb:76:f0:
d0:76:cf:24:8e:a6:66:4d:c1:55:c2:0a:a1:92:a6:
17:2c:34:78:92:92:6c:54:16:fb:04:1e:1c:4a:2f:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:65:F6:5C:2C:26:C7:1B:D7:4E:17:DC:85:B0:E9:3A:42:63:75
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ff:61:d8:13:85:57:a4:67:04:a4:6c:5e:67:b8:63:02:e5:
bd:38:e5:c2:6f:41:69:12:8e:fe:b9:c4:04:af:64:2e:a4:4a:
14:10:0a:1f:70:00:e2:03:e4:61:f6:aa:9a:5d:34:b5:7c:3b:
9e:cc:bd:bc:3d:da:0c:16:3e:b2:2f:f7:77:fe:4b:79:38:ed:
1d:48:11:c6:ca:2e:38:9b:01:44:3e:19:20:25:c7:58:6b:8e:
25:30:26:f6:bd:5d:62:16:9b:35:e1:b9:15:8b:ed:25:f3:94:
25:36:81:8c:3a:3f:c0:66:b2:48:ea:c5:68:29:44:cb:03:dd:
11:51:d4:62:79:a6:9d:2b:41:45:bd:25:df:92:00:20:a2:a9:
ad:f9:4f:8a:83:2a:51:41:bb:a0:7c:3f:9b:90:51:bf:bc:17:
c5:3e:d2:13:18:ce:48:d2:11:42:40:71:31:0c:06:51:21:36:
3c:e8:b3:0f:ab:43:f5:9b:8d:2c:85:99:57:d1:93:e5:cc:7d:
a6:41:77:6a:b8:7f:81:67:56:92:2f:b8:9a:64:de:22:dc:1b:
83:ed:d4:0a:76:a4:6f:7f:3c:ab:61:13:b2:83:7d:59:13:12:
7f:8d:cd:43:6b:62:61:28:ef:df:6e:79:1d:bf:73:3c:32:d3:
9b:80:36:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:38 2025 by rpki-client