Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: bjh1sPWec3/u0sc6Z3rAh8l/tDNboeDAY7NMwRsJw0c=
Subject key identifier: 6D:F9:12:FA:F5:CE:46:89:64:3C:A1:05:96:0E:B8:2F:94:DE:66:29
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 019848F7843C0A989168243BD8C48EE4E6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 1606
Signing time: Sat 26 Jul 2025 23:00:37 +0000
Manifest this update: Sat 26 Jul 2025 23:00:37 +0000
Manifest next update: Sun 27 Jul 2025 23:00:37 +0000
Files and hashes: 1: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: /USlBnoR+XIiNFcavBdj+Y6a4oNFgubYA7sl64ZC624=)
2: O5ilAJzp4Fiady6OzW8y6F-h2tk.roa (hash: 5NXhQBooraxn6sup0YPIQ8njZP6A7m2bDKaKDs+Nqts=)
3: QwSiPMgCrnV_t6yAUHlhkg3u_jM.roa (hash: hYyVlbmE/pf2k4j7NJjebHsv7m2YlTW7LKuiiP6VfuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:84:3c:0a:98:91:68:24:3b:d8:c4:8e:e4:e6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Jul 26 23:00:37 2025 GMT
Not After : Jul 27 23:00:37 2025 GMT
Subject: CN=6df912faf5ce4689643ca105960eb82f94de6629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2f:2b:36:2e:1f:c8:c1:02:22:76:00:4c:81:
d6:f1:99:34:13:27:5a:37:2d:38:2f:2f:81:eb:a1:
d4:58:73:72:db:d6:38:07:ba:5a:dc:74:55:2b:e2:
37:e7:3a:43:34:15:2a:62:ad:b0:27:b3:90:78:9b:
f5:c4:3d:ff:93:f9:d7:a4:33:0a:46:49:ba:ff:d8:
72:1b:23:4b:b9:5c:a2:35:a1:a6:d9:90:85:0c:28:
92:42:df:72:40:7d:ce:58:28:d4:c2:ae:07:78:d0:
27:93:e5:58:6a:ee:45:13:c7:1f:ba:af:04:38:e6:
6c:ac:36:e6:54:5c:dd:a9:e9:ec:a5:0f:cb:51:fe:
27:19:8f:da:d8:fa:fc:ed:5e:da:ad:e5:0a:2c:db:
51:2e:0b:dd:1b:52:07:bf:8e:e6:25:4c:a0:d8:d2:
c4:03:c3:af:48:d8:2d:4c:9d:19:76:f8:57:77:ae:
f7:5b:72:53:d9:da:81:94:36:0c:e6:ee:8c:c5:89:
9b:c2:34:69:46:43:3b:c5:aa:bb:42:fd:92:93:cd:
b4:03:4c:b5:ee:8f:1a:fd:ea:36:de:1a:69:6a:66:
01:e3:65:a2:4d:b7:0f:a4:d9:52:7c:31:1e:b2:82:
d0:70:e6:54:44:55:9b:6f:37:a1:b8:b8:14:9e:8a:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F9:12:FA:F5:CE:46:89:64:3C:A1:05:96:0E:B8:2F:94:DE:66:29
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:80:d5:df:e7:cb:2f:4c:61:56:6f:9e:5e:cb:36:cb:d2:
ad:56:7a:92:b4:48:8c:e0:be:1f:0c:bf:78:78:d7:1c:a6:30:
35:ae:e5:c2:5e:40:cf:fe:b7:45:98:71:83:f3:08:a2:51:7c:
dc:ef:21:e0:6b:ef:11:1d:3c:59:40:cd:5e:4f:86:b0:d9:1c:
75:31:16:83:8e:6e:7e:e0:b8:fb:27:0b:c4:07:4f:23:93:10:
49:66:9d:54:a9:e2:44:f8:54:46:5e:66:e0:38:3c:6b:c3:f8:
6f:9c:fa:1d:bb:f6:01:2b:f7:8b:1c:4e:62:9d:25:f7:fb:04:
48:ba:c1:5e:5c:22:6f:06:20:2d:a2:3e:de:59:7c:62:42:9b:
ed:88:ea:41:a8:2a:64:a0:c1:3c:f6:0e:19:e9:12:04:0f:fe:
07:9b:01:15:34:77:66:4a:7a:77:c6:69:f4:42:f8:07:ed:21:
9e:0b:61:73:69:e6:04:4c:61:52:f7:4e:14:c3:e3:4d:c0:c7:
f1:05:a0:79:ea:a1:f6:73:7a:6d:c1:9a:4c:22:37:c6:40:da:
a7:eb:5f:a5:34:f6:f0:87:5f:ba:12:30:c3:94:ad:c0:07:62:
bb:ac:11:f1:15:ca:57:fb:9b:b8:8e:da:25:fa:74:70:95:a6:
a0:94:f9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:25:31 2025 by rpki-client