Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: m/REevW5BSw+/FIJs1IRHWsUlMr4xrjOgN1+TKn2NBk=
Subject key identifier: 74:26:0E:AA:5E:08:76:CD:0D:5B:7E:05:C2:A5:BA:C5:72:EB:92:29
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 01984964F858A02C9D0714EDB26A15F3739A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 1595
Signing time: Sun 27 Jul 2025 01:00:10 +0000
Manifest this update: Sun 27 Jul 2025 01:00:10 +0000
Manifest next update: Mon 28 Jul 2025 01:00:10 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: KD8mlA9sDTuR/sDCwFYGBmaYinp+hQ42XJGRtyO0xOQ=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f8:58:a0:2c:9d:07:14:ed:b2:6a:15:f3:73:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Jul 27 01:00:10 2025 GMT
Not After : Jul 28 01:00:10 2025 GMT
Subject: CN=74260eaa5e0876cd0d5b7e05c2a5bac572eb9229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:fb:27:75:52:82:12:08:c9:e7:c5:56:20:
2b:1a:c6:6f:8b:37:2a:47:7f:aa:c8:1f:4c:65:48:
63:f7:45:23:5c:0f:fe:e4:82:89:91:d3:16:c7:53:
63:31:0d:67:66:f9:12:ec:82:73:80:98:29:61:0e:
a3:6b:dd:55:6e:14:63:73:85:ce:69:80:dc:00:89:
69:cb:a7:63:99:fd:d2:48:62:47:5b:d7:e6:73:ac:
d2:e9:85:4b:14:4c:ae:0c:93:65:62:bd:23:55:71:
8b:ac:78:7f:1a:d1:51:88:0f:e9:94:72:2e:66:b8:
f3:c6:0c:56:89:9b:8d:a2:37:65:2e:55:4f:88:5c:
86:9f:4f:ab:55:ce:77:9a:9b:33:a4:25:fb:87:6f:
0e:e3:00:15:7f:ab:ef:5e:f1:9c:2a:cf:a4:6c:b2:
3f:14:1d:a2:6a:9f:7f:10:b5:65:31:7c:3d:b0:fa:
17:3a:95:5b:d0:4c:03:e8:ac:8f:47:c6:88:c1:7e:
b1:e8:df:4e:0a:23:6b:99:02:c1:8e:8a:8b:dc:5b:
f3:d3:82:45:9a:25:85:80:31:c9:3b:10:ff:19:35:
f2:de:f9:09:0a:95:ef:09:87:9a:53:be:e8:1b:8a:
03:7d:f6:6e:61:f6:30:f1:cb:b7:33:29:5c:4f:0c:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:26:0E:AA:5E:08:76:CD:0D:5B:7E:05:C2:A5:BA:C5:72:EB:92:29
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:89:b8:6b:a4:70:6c:00:b8:37:6d:dd:7c:98:13:e3:38:c4:
d8:6e:87:c5:2e:8d:d3:6f:d5:b8:61:83:95:ce:5d:e7:37:a9:
a4:a4:cc:d8:65:0c:8a:67:27:61:3e:9c:2a:62:ba:19:d4:94:
8e:87:49:29:ec:2d:56:e9:a7:51:7d:70:e5:72:eb:9e:26:83:
f6:d6:06:22:42:0c:28:00:12:89:9c:0e:83:c5:9e:5e:b4:4f:
36:17:fa:4b:3c:d9:36:48:5e:ff:1c:5d:1a:52:fc:a0:e8:88:
a5:c0:88:da:dc:a4:4a:0b:60:17:2d:43:7c:fa:05:f3:a7:16:
a5:b5:8c:f3:00:9f:79:8e:77:67:30:f9:40:e4:00:a5:5b:0d:
4b:7b:a5:18:ce:2e:ef:fe:1b:87:d8:c1:e4:f9:74:9c:03:9a:
ef:ca:40:de:d5:5c:49:76:54:9b:e9:df:ac:8d:d6:2c:dd:8b:
f4:fe:0b:fb:dd:c2:52:65:6a:89:be:04:e1:4c:b9:c8:4c:2c:
c7:41:38:a0:19:a1:de:69:5b:c0:33:17:9e:13:43:7e:23:46:
5e:8d:94:f3:67:b2:9f:ca:66:70:df:53:66:49:71:76:f1:f2:
cd:b3:9d:15:83:90:5b:27:17:17:c8:93:9d:8f:ed:f4:bf:8b:
70:ce:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:38 2025 by rpki-client