Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: fuVOP0IQHzteYUWPBmDLorpdq5EHXwmlDGFtwmKxLRw=
Subject key identifier: 76:1E:1D:3A:88:1F:3F:8E:D3:A0:97:A0:B5:3C:7E:E5:18:2C:A8:51
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 019849D36D836DAF37A8D8B2C1BF9183B383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 1107
Signing time: Sun 27 Jul 2025 03:00:49 +0000
Manifest this update: Sun 27 Jul 2025 03:00:49 +0000
Manifest next update: Mon 28 Jul 2025 03:00:49 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: hgmnGTf8jOxhBmgicaBxiYmDlMJjlgxMiVpICI4ghqA=)
2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6d:83:6d:af:37:a8:d8:b2:c1:bf:91:83:b3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Jul 27 03:00:49 2025 GMT
Not After : Jul 28 03:00:49 2025 GMT
Subject: CN=761e1d3a881f3f8ed3a097a0b53c7ee5182ca851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:48:c7:9b:68:c2:7f:0b:e0:75:29:6b:2c:
0b:c1:2a:43:f5:b3:de:48:0f:15:4e:67:3a:8b:b8:
de:65:06:e6:8a:ce:49:7f:27:87:d3:e4:61:83:b3:
06:db:c3:1b:1d:66:34:9b:6a:8b:36:a7:43:43:5d:
fb:27:78:8c:d8:dd:65:43:97:65:ff:04:49:8f:85:
fd:bb:c7:7f:92:da:17:75:9b:f9:3f:cd:45:87:c5:
29:09:f6:09:6e:f3:a7:65:1f:13:8f:03:12:02:c4:
5a:e7:94:8c:0e:c4:ea:dd:26:4d:75:76:30:07:7f:
10:c1:e2:fe:83:9d:e0:cd:91:28:78:b9:4e:9b:47:
15:6d:87:60:75:67:ca:f1:49:4f:44:cf:a0:31:6c:
de:d3:bc:71:90:c7:d0:59:87:22:34:69:ed:9f:96:
e2:5f:1e:e7:b7:40:5e:44:a5:98:77:44:00:c8:35:
19:63:e6:72:10:54:62:b7:2a:b9:04:f9:2b:de:f0:
9d:7c:87:4e:52:35:b9:08:44:b1:6b:9b:59:50:5d:
5b:0c:d0:3f:f9:57:85:f7:d8:34:d3:e9:fc:c8:02:
48:d1:99:81:0f:60:1f:b8:dd:97:9c:42:ec:d4:f9:
a1:0d:5c:b9:ea:8b:7c:7f:b6:01:8f:47:3a:2f:f2:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:1D:3A:88:1F:3F:8E:D3:A0:97:A0:B5:3C:7E:E5:18:2C:A8:51
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:32:72:bd:6a:ba:9f:73:7f:c7:b2:c7:40:89:a6:f7:92:
a8:0e:8b:09:8d:c8:23:d2:9d:05:cd:cd:49:50:09:ae:da:a9:
19:80:cd:de:24:55:40:da:70:ed:f4:a3:0b:3b:75:6f:bc:58:
c5:f6:f1:2d:5a:de:31:0a:90:39:32:40:4f:96:ad:fd:c6:ed:
75:a0:a0:a6:01:09:11:31:49:44:76:53:66:c5:87:d6:b1:10:
e8:51:d5:cc:a6:4d:53:1f:1e:49:ee:1d:42:43:23:4c:a8:fe:
3b:0d:41:2b:1d:3f:f3:32:c4:d2:61:75:cf:b6:3e:dc:ea:92:
5e:ff:18:f8:e9:a5:9a:63:06:9b:5f:01:04:ba:96:dc:99:a3:
de:fd:f4:34:65:60:16:6c:fe:f1:42:45:06:b3:c0:70:61:1a:
06:f9:85:13:47:8e:e9:ed:08:24:71:66:9a:19:63:1c:bc:36:
1c:a7:09:74:7c:c0:c2:a3:8e:91:9f:68:64:c9:a6:e5:f1:73:
ce:d0:85:30:14:22:a9:13:4b:34:f1:3f:9d:44:10:6b:31:f0:
e9:28:b6:0d:a8:1c:7a:f3:d1:c5:c4:cb:bf:eb:da:fd:28:3a:
83:63:eb:da:e5:60:6c:7b:16:f5:b4:85:fd:c8:f1:97:c6:ff:
75:30:dd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:06:52 2025 by rpki-client