Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: GpWKgOS/jYvW3Sp/NgMPMRuP7jFWA+EVam6xV+yTAG4=
Subject key identifier: 55:50:5B:60:E5:91:2D:D1:5F:78:09:0E:6E:E4:01:DA:5B:72:EB:15
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 0198D5156D79E07B168EEF9B79D8AF54686A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 1348
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: 9bbjwhr+f2K9y5IB/GBnnZgL+7NQrTGXjTBfFwpVrlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6d:79:e0:7b:16:8e:ef:9b:79:d8:af:54:68:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=55505b60e5912dd15f78090e6ee401da5b72eb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:c6:29:43:5c:8c:30:05:32:24:59:16:63:
cb:2a:a4:c0:03:58:8e:84:a2:a6:c8:59:69:73:96:
83:d2:cb:66:bd:00:01:fb:1e:0d:bc:81:25:3c:6e:
70:69:f7:af:d1:92:3b:d9:a2:10:53:fa:7f:18:d9:
8a:df:a5:52:7c:a3:e5:b9:9f:62:c1:98:06:27:cd:
fb:50:ec:6e:26:9f:06:b7:a6:6d:05:31:98:5d:3d:
26:72:26:8e:f6:e1:8a:dd:d0:f9:97:53:e7:5a:0c:
5f:96:81:e6:4d:de:47:06:86:75:a6:57:cd:e9:72:
7d:86:ff:9d:e9:c5:a6:38:51:ea:ed:e2:e1:ad:c3:
9e:62:b4:64:0a:80:03:14:f6:2e:57:a7:75:41:3b:
01:77:6e:a5:5a:a7:d0:5c:62:66:82:a9:d9:8c:15:
cb:d2:6d:cb:08:29:38:57:ac:ff:5b:4d:37:af:1c:
75:81:16:7d:2a:c1:06:d7:2e:de:07:e0:d2:20:66:
a9:c4:99:1b:e1:63:bd:b8:f8:3c:51:a7:29:ab:bb:
2a:87:89:63:98:19:8c:36:1c:16:d5:4d:c1:81:21:
08:40:b0:c1:26:3f:53:8b:75:7f:d8:81:2c:bd:95:
a2:55:5c:71:e6:16:2c:c1:24:8e:7b:6f:53:d2:f2:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:50:5B:60:E5:91:2D:D1:5F:78:09:0E:6E:E4:01:DA:5B:72:EB:15
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:13:52:75:e7:d7:15:ff:3c:c2:e8:40:65:6d:5f:4a:c5:5f:
0d:8c:83:62:e3:06:a5:07:f6:1e:e9:47:5e:0a:eb:04:5b:df:
15:a3:be:96:e8:e9:86:a8:42:6a:1b:7e:d5:41:2a:d9:f2:7c:
c5:27:91:91:44:b7:98:07:17:18:eb:a3:7b:d8:b6:ec:2b:a9:
2b:1a:72:d5:08:36:c5:95:46:80:c9:ef:56:c8:29:02:b8:12:
10:98:d7:b5:60:07:86:87:5d:28:0c:2c:16:d0:e6:9d:3a:d4:
b9:a7:17:3f:6a:19:58:a3:83:f6:59:6c:8a:0c:ad:bb:ae:ae:
67:9e:41:fc:3d:8a:6a:6d:d4:22:cc:1e:c4:2b:b4:8a:77:0d:
4b:e4:b2:ad:3c:4b:98:b0:73:47:1b:e2:70:91:da:a4:65:d1:
52:90:20:d6:98:7c:72:1d:df:3e:fa:3f:6d:92:29:4b:af:29:
f4:64:5e:bf:5e:c7:f4:e8:a4:59:9f:c4:ef:41:f6:3d:8f:32:
b3:23:90:29:dc:a7:08:7b:d7:38:66:7e:42:f9:b6:7a:32:63:
2e:b3:ff:62:5c:9b:29:6b:c2:b3:2f:5b:9d:4b:54:63:db:de:
0e:59:6d:57:57:83:bf:90:97:0b:65:5a:51:56:e0:44:0a:ce:
b7:cb:76:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:36 2025 by rpki-client