Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File: FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier: KkFiv6ytcrgqSMJiKf8CoeZXm9OIfviptjrkXt0uSKY=
Subject key identifier: 34:CA:10:EC:83:2F:67:27:A8:6F:A5:65:0E:A0:85:71:9E:1C:13:D7
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial: 0198D54DD2A5F15A5C7CE32C8AEA90BB9A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number: 11E5
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: E3L5dg5X3rqNLqYU8O9X1WsszW4.roa (hash: OcbMuDrIfD/A7RNsLFSYw+FRN5f4hK+YArdJTnwQdlk=)
2: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: czKNsKIInf9sgEVkvXsjOZf/dQpReuSTDsKILYOxgfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d2:a5:f1:5a:5c:7c:e3:2c:8a:ea:90:bb:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=34ca10ec832f6727a86fa5650ea085719e1c13d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:a8:c8:11:5e:f4:39:16:15:ce:a3:ca:4a:
4a:82:82:27:f3:ff:ec:43:02:86:6c:30:40:fc:a4:
6d:f4:87:b3:e0:03:07:6a:da:a2:3c:6b:45:8c:30:
5d:52:2a:1c:5c:b1:3e:a4:53:76:e3:62:22:93:aa:
cc:92:94:26:ad:fd:4a:a2:ca:ec:40:56:ee:27:9b:
2e:69:b2:4f:91:ac:85:33:93:95:73:4e:56:19:01:
b2:67:72:33:03:a7:de:59:c7:5b:8b:88:67:e0:5e:
a0:b5:98:8b:c4:68:8a:7d:d6:a8:9e:2b:1e:bd:dc:
16:d0:83:21:1c:f5:74:5a:52:dd:c4:7b:12:8a:af:
bc:4a:6f:d9:bd:3b:57:38:c4:6b:99:40:55:f2:5a:
9c:76:33:1a:15:2d:d0:91:e0:0b:68:e8:37:07:0a:
e0:3e:5c:96:69:c6:21:7a:66:c2:fe:ef:aa:32:1a:
e0:f4:4c:4c:c7:e5:83:3f:3c:98:2a:6d:c9:5d:f8:
d3:34:2d:d2:d0:16:66:b2:d9:d7:c2:d1:b7:7c:a5:
03:9d:96:c8:ac:af:6c:9e:c2:f1:60:90:e3:4d:c0:
78:1c:f4:ec:22:fd:ad:65:a4:9a:78:5e:65:b4:f9:
22:e1:28:18:93:b7:69:68:6b:47:d4:27:f7:e8:07:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:10:EC:83:2F:67:27:A8:6F:A5:65:0E:A0:85:71:9E:1C:13:D7
X509v3 Authority Key Identifier:
keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e6:5d:32:34:ef:0d:4e:76:54:6f:39:f3:7d:f2:a0:36:6b:
d8:c5:ad:1c:1c:a8:7f:db:38:11:9d:95:35:92:30:ee:5f:ee:
3a:78:29:0a:26:f8:20:01:21:b9:21:8a:0f:31:8a:e0:7e:79:
f3:9e:a2:b0:6e:4e:6c:eb:86:2e:23:eb:ad:01:de:ad:36:81:
c3:16:d3:e9:6b:da:2b:69:5c:61:93:f2:62:b2:32:79:9c:03:
4e:37:09:63:3f:7a:ff:f8:a5:22:28:88:9e:8d:c4:85:7a:8a:
64:29:13:65:f5:f3:d0:4d:51:06:31:24:7f:54:bb:c0:86:80:
1c:06:5a:bd:32:f7:cb:fa:b9:8a:9e:8d:5f:6a:4e:cf:3b:ee:
5c:b8:99:5d:3f:36:4d:11:70:53:12:1b:51:13:a8:d4:19:5a:
e8:75:bb:0c:e0:ec:83:cd:82:9a:f0:cd:1a:da:5b:b5:44:26:
16:12:35:9d:56:d2:cd:45:0e:7a:24:c2:4b:6a:86:8d:1a:85:
e6:d3:d1:a8:fd:7b:fe:8d:63:ed:67:35:67:60:48:83:ef:a8:
29:55:a2:4e:e4:7e:63:34:8e:e2:6c:0a:90:b4:4d:01:66:04:
32:60:77:0c:67:4a:43:c8:54:52:14:e7:24:b9:25:f4:ed:3d:
e8:2e:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:33 2025 by rpki-client