Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: iCCWsbmf27o75p0KuRPB1OL2M1QocriqPhi1lq1CO7A=
Subject key identifier: C4:5B:8F:EE:E7:40:A5:EA:78:4B:9D:AA:9E:96:CC:E7:45:11:6C:64
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 0198D40444A2129B7146139E22C57DC01FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 06D7
Signing time: Fri 22 Aug 2025 23:01:46 +0000
Manifest this update: Fri 22 Aug 2025 23:01:46 +0000
Manifest next update: Sat 23 Aug 2025 23:01:46 +0000
Files and hashes: 1: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: xQeIr9c6+DQBt5SpEuQyXPKn1LwfAJoaR4NpIuJsDXQ=)
2: KxRNTvfcdP27-i8KDlCuxj_UX9s.roa (hash: olLk9GQzBEMbkOZCVQ+if+KnQS1x8YbAz2sIcJuFwbg=)
3: TTEx5Tf_ryhhBEghXe_juH2H65U.roa (hash: 6yFkwOTsWr11Au8Jovaobg2AJZpMXPDe7vY/stuVAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:44:a2:12:9b:71:46:13:9e:22:c5:7d:c0:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Aug 22 23:01:46 2025 GMT
Not After : Aug 23 23:01:46 2025 GMT
Subject: CN=c45b8feee740a5ea784b9daa9e96cce745116c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:05:98:08:b5:81:13:ec:72:4e:db:7d:90:
db:38:48:b0:e4:0e:62:24:a7:bd:9f:bb:33:43:26:
ec:df:cd:da:3f:97:08:c5:35:07:8a:79:60:c2:a5:
0a:af:14:6a:c9:b7:ab:a0:d9:4a:5c:b0:05:2a:2c:
db:69:11:10:d3:c9:5e:4e:04:e4:44:a6:21:cc:77:
76:51:c6:7a:7d:48:71:85:eb:90:d6:c5:4d:9c:b4:
df:70:28:d1:86:10:50:1f:6a:94:0e:c8:47:3f:ee:
2b:48:8a:32:9a:30:1d:8a:bf:b0:ee:8a:f8:fd:dd:
3d:83:30:a7:95:a4:87:ba:c7:ab:18:e3:cb:e4:db:
1a:14:14:7a:19:60:87:1a:a3:31:98:5e:45:65:f0:
1d:77:74:f8:b8:23:5d:51:45:fb:d9:ee:47:01:11:
20:29:be:57:7a:88:66:fb:8e:4b:58:51:dc:8e:f8:
08:89:89:7f:9d:91:47:62:5f:3b:33:95:7b:44:7a:
d2:98:cc:7d:ab:55:01:1e:c3:ac:43:09:98:9c:6d:
86:82:e8:82:eb:36:71:2c:00:39:f8:dc:cc:87:eb:
1a:a8:11:56:77:28:8d:ff:3e:8f:d8:de:60:86:b7:
f3:ce:69:ad:70:0a:1c:98:5d:16:43:bd:10:e7:e8:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:8F:EE:E7:40:A5:EA:78:4B:9D:AA:9E:96:CC:E7:45:11:6C:64
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d6:86:6f:69:29:64:2a:c0:36:fd:f1:63:e0:34:d1:2d:35:
52:32:75:ff:94:c5:69:35:74:a2:a2:c5:59:aa:a8:b0:04:09:
3c:c0:6e:14:de:f7:20:ee:ab:ee:df:4f:c6:5d:c5:06:dc:bd:
37:39:31:5b:0b:4e:80:a5:bd:a9:d0:79:a6:cd:7d:53:ed:2b:
a1:9f:49:13:ed:b5:32:6f:91:cf:ea:93:42:af:ac:83:03:57:
28:66:a3:f5:4e:91:f5:af:19:10:8a:93:26:a6:0e:f8:f2:98:
dd:84:36:60:ee:30:86:05:d6:9f:b8:19:34:09:c4:f6:ee:c8:
ff:51:1c:fe:0e:46:39:7f:a7:29:dc:64:0e:77:60:b6:12:a0:
49:ff:71:6b:ff:41:e9:23:2e:72:d8:0d:89:a9:90:c6:8e:7f:
b0:2d:30:da:be:3e:dd:0e:15:ed:c2:c5:cf:53:dd:cb:41:b7:
63:0d:c5:3d:54:5c:f3:1d:bb:2d:42:99:e8:64:71:30:97:67:
26:73:81:f3:74:67:0f:08:1d:06:e5:5f:bf:59:96:3b:1a:76:
37:e9:52:8f:9e:77:0c:d2:4c:a7:a2:e3:49:db:75:a2:a3:68:
4e:e8:bd:a7:7c:fd:c1:82:44:38:9e:94:cb:8a:b3:6c:08:61:
60:48:4a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:13 2025 by rpki-client