Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: V6JEAkPSTc+tbTrsDLcLm2p8f/JcFQmiAe0vewPW3v0=
Subject key identifier: 98:F0:2A:62:1E:EA:C0:D3:26:AD:D1:72:00:33:98:A3:2E:E2:31:0C
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 01983727CE0EC59261D7209B027B522F99AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 15DE
Signing time: Wed 23 Jul 2025 12:00:12 +0000
Manifest this update: Wed 23 Jul 2025 12:00:12 +0000
Manifest next update: Thu 24 Jul 2025 12:00:12 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: b7eApJahn+aSMg0bFbsURbtms9FZAYUvVheJ+EmbmNQ=)
2: g44wD4exlc1l3mqvr27NiUmB6UU.roa (hash: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:27:ce:0e:c5:92:61:d7:20:9b:02:7b:52:2f:99:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Jul 23 12:00:12 2025 GMT
Not After : Jul 24 12:00:12 2025 GMT
Subject: CN=98f02a621eeac0d326add172003398a32ee2310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:08:6a:83:37:48:e2:8b:8b:e3:9e:dd:4d:cd:
7e:9a:2e:8d:3d:23:59:24:de:f1:48:c5:d2:7c:ab:
32:6d:35:79:db:d7:13:a8:a3:62:d3:ac:e0:36:11:
08:1b:91:31:7b:c2:c4:99:9d:8d:e9:ef:8f:a2:d7:
f0:e6:a2:30:fc:8f:26:48:47:1d:be:bb:97:ed:e0:
a4:fa:8f:7e:b3:6c:e1:d1:ed:45:6f:e6:b7:c6:68:
b4:5f:b7:33:5a:23:33:39:6e:e8:67:e6:95:99:78:
ad:26:c7:40:1b:4d:e9:83:f4:2e:54:de:59:21:8d:
b7:19:91:26:fb:f5:9e:0f:6e:84:bf:ee:ce:3e:96:
74:2c:de:c6:71:3b:37:1b:cb:ee:e7:06:cf:ce:2f:
ec:65:82:f6:58:06:2c:53:60:47:ee:81:ce:e5:89:
08:e6:7c:9d:2c:82:72:45:b0:8a:1b:69:d5:57:18:
6b:38:af:22:37:0a:36:f5:53:09:87:e8:0a:f5:47:
2d:5e:07:d3:66:e6:f0:04:21:a1:c3:3b:89:02:0e:
fe:43:53:01:b8:67:cc:21:55:4e:c9:03:5c:bd:1e:
71:e2:7f:54:7b:e4:e2:91:f2:ad:d5:5e:d2:2a:08:
39:c1:48:de:21:52:40:20:70:2d:95:67:23:cc:a2:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F0:2A:62:1E:EA:C0:D3:26:AD:D1:72:00:33:98:A3:2E:E2:31:0C
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ce:e1:a2:c4:0a:ce:3f:5d:27:f6:1b:77:7c:ba:bf:43:1d:
17:7b:a6:41:f5:03:64:7d:72:e6:7a:54:24:dc:a3:ad:92:ac:
8e:3d:eb:38:01:32:ef:28:93:a6:3d:9d:0e:94:ef:a9:e0:02:
e4:a8:49:ee:c4:2a:fc:04:df:51:24:76:ee:76:90:57:09:a9:
40:58:c7:43:b6:a1:36:b2:ab:c0:5e:c3:30:17:08:43:ac:79:
13:2e:44:b7:a3:f0:e5:86:0c:96:24:e5:5c:11:86:b0:ee:c4:
b5:9b:f5:b9:c4:10:05:42:f8:a4:56:fb:f5:1f:77:c0:a2:37:
54:34:9a:5d:b8:2b:d3:22:60:8a:6b:a2:2d:57:eb:61:1b:ec:
cd:b7:0d:2e:af:6e:0c:5a:b6:af:09:d4:47:13:e4:75:41:76:
10:ce:76:54:95:c4:3d:03:7f:fe:5d:1d:2a:34:e2:bd:aa:07:
29:00:ec:36:e3:80:19:84:46:1e:1d:5c:66:e1:a9:75:75:9e:
0a:2b:55:81:52:bc:52:b5:7e:c1:2f:31:12:2b:3d:ff:91:a8:
13:c6:f6:f7:2b:01:72:0e:23:ae:7b:31:72:5e:be:a6:1c:8a:
bf:04:02:d7:25:59:bc:fd:d7:67:61:24:85:20:d4:ef:2d:44:
5d:41:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:34:21 2025 by rpki-client