Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: L3HKwV8tXK3gQNshYRkccddC5A2rO/nw9n4tUoqEA9c=
Subject key identifier: AA:6D:2A:ED:09:60:10:61:BE:B3:28:FA:04:F3:EF:D1:F8:A7:69:0B
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 0198D4E091C19E3D9693869CD8503C284F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 0EA3
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: FzugDDKp3WbUq8kbpeNN3MRYW1dO8yP5WY31EvKfgec=)
2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:91:c1:9e:3d:96:93:86:9c:d8:50:3c:28:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=aa6d2aed09601061beb328fa04f3efd1f8a7690b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:14:3c:12:e2:4c:5b:76:28:09:dd:12:43:b6:
73:51:14:d8:ea:9e:7d:f7:b5:93:58:a3:f4:38:97:
77:d8:3a:04:44:50:34:da:3e:ad:6a:d9:b8:11:b3:
51:c7:02:f1:f7:55:10:e5:57:24:99:cf:1f:e6:4e:
7f:9c:1f:2a:37:7e:57:d4:7f:50:46:54:3e:d1:40:
97:8d:38:19:5f:fd:7f:c7:77:3c:79:01:d7:ce:4a:
c0:84:d8:b7:76:04:b7:42:b1:1d:5c:d2:34:28:f1:
4e:6f:ab:ad:03:ba:6c:5d:49:c0:d8:95:69:cf:43:
72:77:7b:90:1d:2d:49:10:92:03:19:1b:e6:ce:28:
59:e0:c7:d7:63:5c:c5:16:c2:72:72:e1:c4:0d:2f:
c9:1f:83:d8:c4:0b:6b:b5:37:f8:30:8f:a9:f3:80:
60:16:22:da:02:de:1e:65:24:d6:37:59:33:9b:38:
e7:b0:c8:95:33:84:ba:ac:eb:85:f7:50:25:f7:b6:
5f:cc:38:36:12:71:b2:14:a7:d8:57:b6:c3:bb:19:
3f:27:8f:bc:b8:f4:47:07:79:84:c0:39:00:46:c5:
df:b4:ce:9d:92:75:42:c9:64:6a:4e:dc:e1:54:22:
31:47:be:a7:ea:94:07:a1:af:93:76:d8:11:b1:72:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6D:2A:ED:09:60:10:61:BE:B3:28:FA:04:F3:EF:D1:F8:A7:69:0B
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b6:08:c6:b2:4b:e4:2a:a1:34:85:97:9f:c6:cf:34:c8:8d:
ab:e3:75:61:e4:9c:cf:36:77:cd:7a:4b:d9:8c:b3:8a:ea:d0:
78:38:89:1c:0d:da:4d:c6:96:d9:85:93:7d:f6:7a:e3:cc:8d:
2d:f1:bb:83:9c:26:88:5f:f3:a5:14:12:a1:c3:0c:8d:83:3c:
ed:e7:40:ae:45:20:51:fe:50:8c:a5:78:50:fe:18:09:4d:21:
d7:b1:7e:54:e2:3a:fa:9e:22:60:26:61:e0:59:c4:97:14:5f:
3e:0d:87:25:64:68:5f:f7:90:74:f8:12:36:d3:6e:df:72:d0:
c6:06:f5:72:b1:8a:28:8a:86:4f:b7:fa:15:c8:1d:a9:06:e6:
65:77:61:43:b3:8c:40:57:0d:11:1e:a7:a1:95:17:ed:b7:1b:
93:48:ff:45:f2:5d:a5:b1:de:1f:2d:a0:74:a5:c1:48:2d:91:
a8:90:0c:8e:2a:46:d0:bd:a3:93:72:9d:67:c8:da:ae:48:eb:
e8:86:a6:2e:06:be:b1:40:25:54:2b:c0:c6:17:ec:1d:02:ac:
68:c1:15:0c:02:4b:04:6b:31:01:8f:98:cc:8d:04:d9:4c:e6:
bc:b4:35:b4:78:a0:13:57:b4:93:1b:94:b9:4b:c3:82:88:ef:
8e:de:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:14 2025 by rpki-client