Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: LmgNmgSqUfZIq/KTTJ0nAM2WuX5ar8vzpTbEm5ce+OA=
Subject key identifier: 31:A0:37:BC:6D:B3:34:0F:59:CA:F5:8B:1E:DB:BC:5B:A6:C2:97:E6
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 0198D6297FDD98DAFE634A552851CEE2DDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 0351
Signing time: Sat 23 Aug 2025 09:01:40 +0000
Manifest this update: Sat 23 Aug 2025 09:01:40 +0000
Manifest next update: Sun 24 Aug 2025 09:01:40 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: 8FoCE+nBBdyzP6RU+D5/LecJWjwI2DW/9OhOo75wUjY=)
2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7f:dd:98:da:fe:63:4a:55:28:51:ce:e2:dd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Aug 23 09:01:40 2025 GMT
Not After : Aug 24 09:01:40 2025 GMT
Subject: CN=31a037bc6db3340f59caf58b1edbbc5ba6c297e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:5a:fa:be:26:bd:9b:a5:a2:31:44:67:cc:
49:0e:8c:5f:0b:1d:d7:0b:fb:45:52:b1:e5:b7:28:
23:fb:f0:7b:99:66:86:4c:3d:e1:51:bf:50:37:e9:
dd:c1:63:b7:1f:9d:74:85:c6:35:68:96:84:27:b1:
9c:49:d7:5f:4a:71:6d:dd:cc:db:99:e5:3c:89:ea:
0f:89:33:22:c2:c9:56:e8:47:9b:e6:60:a0:92:bc:
82:60:4b:f2:96:a8:7c:39:5a:a2:9f:22:8f:47:cf:
b4:99:f6:02:f0:a1:a7:34:c1:79:a8:a6:f2:0c:df:
73:5d:94:b7:c7:0e:6b:bf:b1:f8:c2:74:33:36:66:
ae:d9:7a:4d:08:c2:4d:f5:78:f6:fa:61:de:a4:6f:
7c:6c:56:63:e8:51:97:25:e1:88:7f:41:97:fc:0e:
63:d8:ab:82:f1:6d:0d:c2:2d:36:d5:85:fa:12:a7:
06:65:41:d4:e4:bb:7e:f5:2e:a3:d1:72:53:a8:7b:
73:74:34:59:b1:70:da:c3:79:09:de:3d:2a:86:f8:
b6:00:dd:e7:73:56:69:90:3e:39:e4:6b:1e:b4:5e:
4f:6f:65:85:6b:e2:3b:2d:9a:d1:ef:56:3c:bb:3e:
e5:d0:1c:d2:a4:eb:bc:e3:aa:85:87:a2:00:53:e6:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:37:BC:6D:B3:34:0F:59:CA:F5:8B:1E:DB:BC:5B:A6:C2:97:E6
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:61:07:fb:32:c4:12:7c:3a:33:96:c4:b6:f2:35:fd:1a:f0:
7f:16:db:b8:cf:a0:9f:96:4a:61:2f:74:bf:af:51:43:f4:b6:
b6:54:b0:95:8f:d7:21:bb:9a:13:eb:b7:e6:05:9c:cd:78:39:
75:12:87:07:fc:ec:64:ec:f7:e2:cd:a1:5b:85:e3:2b:83:ce:
31:1a:7b:dc:b0:27:44:6e:65:f7:0a:22:46:94:33:43:eb:01:
37:15:0d:5d:47:74:3e:26:2b:b9:90:a3:0b:e5:87:a0:89:79:
c9:17:94:eb:27:8a:08:b6:97:0b:15:a1:b8:b8:6d:79:90:b8:
4e:0a:7e:ab:36:22:49:9e:b8:2a:bd:4a:20:68:60:c4:d6:04:
5d:a0:4f:d4:a8:5b:14:0e:06:76:0c:2f:9e:1a:10:63:d7:db:
e3:ba:55:fb:e6:33:0d:5a:53:39:6c:97:c9:c2:2c:f9:b5:ef:
58:5a:5b:ed:8e:09:49:61:54:5c:a2:66:29:92:df:dc:f1:dd:
c3:5e:9d:fa:c8:e0:ef:29:90:0d:6a:cc:d0:c0:8e:a4:e1:ba:
30:2e:66:9b:74:8a:d3:2d:ba:f4:2f:ec:da:91:a8:98:4b:75:
1b:a8:d3:10:4d:7b:48:6c:54:b3:f9:6a:24:5b:e4:4f:2e:0c:
8e:e1:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:39 2025 by rpki-client