Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File: FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier: BWlvYkO0zZPmoVtTHLPZT6NRcxPcZ9bDKmtBf41HHEM=
Subject key identifier: B8:C7:98:9F:F5:F8:7C:4F:C3:3F:EA:6A:03:9B:65:A3:F0:5C:A2:1B
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer: /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial: 0198D5BB8DBB544DE450E285322661B92031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number: 0601
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: pgfmFDJWbkO8jcYB0Zgbl6SMSYiX77uVi65wCZJPw9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8d:bb:54:4d:e4:50:e2:85:32:26:61:b9:20:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=b8c7989ff5f87c4fc33fea6a039b65a3f05ca21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:63:56:c3:d7:ba:5b:6e:b0:13:79:c2:3b:
f8:ed:3c:29:ef:fc:2a:bf:0d:7f:ad:74:5f:a9:ef:
ae:a9:da:b1:f7:b2:8c:bd:04:05:e2:39:ef:ac:53:
5f:79:51:2b:c8:cc:ac:e1:6c:6b:17:cb:10:ed:69:
5d:ab:37:77:16:2c:cd:0e:07:7e:70:7a:e3:f4:6e:
79:d9:56:9b:ff:3f:59:dd:bf:cc:fb:81:88:54:70:
9c:72:00:2b:16:8f:6c:e4:0c:6f:dc:06:22:31:2c:
b6:0c:e0:90:01:4e:9e:13:4e:a0:d7:ab:c4:8c:47:
f7:b6:a9:8c:59:07:7a:2d:a5:d7:68:43:a3:23:a2:
fd:df:4c:46:9c:7d:54:d2:c7:d6:02:39:7d:46:66:
9a:02:fe:83:c4:0d:9f:2f:67:ce:60:88:fb:0d:23:
d9:3f:96:fb:06:e5:dc:4c:f7:1c:cf:8a:fa:ef:0a:
e9:2d:5d:e5:78:ab:b9:1b:90:40:a5:5d:95:b1:20:
21:51:ae:56:76:51:84:62:8b:a6:5e:7a:e2:c2:64:
d2:38:76:e3:49:c5:f0:cf:f6:b0:be:5f:46:ab:bf:
77:a1:8c:10:ae:5b:48:72:3d:7d:67:b4:d4:60:89:
86:25:af:10:d7:6b:ed:9b:7e:e6:64:96:45:32:12:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C7:98:9F:F5:F8:7C:4F:C3:3F:EA:6A:03:9B:65:A3:F0:5C:A2:1B
X509v3 Authority Key Identifier:
keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:82:f5:89:76:21:3e:6e:f7:7f:6d:47:42:50:7e:4d:aa:41:
ef:be:6f:f5:86:92:d8:47:ef:d1:cc:58:69:d3:ad:a5:99:e9:
e3:df:8c:04:46:de:81:14:26:23:eb:c3:57:c4:09:e5:ea:18:
33:83:ae:46:ec:c2:f1:52:dd:5c:b3:ed:68:f6:e6:7b:30:b6:
2d:4e:07:22:be:8c:54:42:a4:89:59:0a:04:62:5c:32:36:09:
2e:a9:39:f6:e8:d8:c5:b2:b5:96:85:91:8b:6c:a5:4b:47:b8:
e5:9e:87:6f:5f:82:27:cd:b5:a5:0d:53:e8:04:5f:ec:92:43:
2d:1d:2a:72:9a:b6:9a:e0:7f:74:6c:17:d6:70:6d:05:ac:23:
5f:aa:2f:df:5b:ed:9a:33:1c:f7:75:93:af:87:f9:9e:9f:06:
7e:02:6d:53:03:b9:f7:66:dd:a0:61:84:f2:de:78:4e:40:e9:
6b:df:c5:6e:b6:5b:11:9f:98:ec:2f:0b:f0:ae:9a:43:af:02:
b0:e3:47:d7:ce:92:10:15:6c:57:de:0f:bb:ab:9c:9b:ff:a6:
d3:bc:a7:60:d9:7f:d3:26:9e:de:a1:e2:03:88:8a:40:1b:c8:
df:3e:d4:8b:b1:6b:25:ff:34:c6:c5:45:e5:e5:e0:20:58:24:
df:d5:f6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:52 2025 by rpki-client