Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File: FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier: MctKOXI2bl+tVzWYkMLnuwC2U0DAGcVoD0ZhUUssqag=
Subject key identifier: B8:87:99:8C:A1:2A:12:D1:10:93:6F:92:3A:7D:BD:0F:97:9C:C9:4C
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 01984B54C6CA1E0DEEE28DD607158A415DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 10:01:43 +0000
Manifest this update: Sun 27 Jul 2025 10:01:43 +0000
Manifest next update: Mon 28 Jul 2025 10:01:43 +0000
Files and hashes: 1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: LETmQta3rZ6moTHZFT7U5LbClA/7y0NwUec922w+tAw=)
2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:c6:ca:1e:0d:ee:e2:8d:d6:07:15:8a:41:5d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Jul 27 10:01:43 2025 GMT
Not After : Jul 28 10:01:43 2025 GMT
Subject: CN=b887998ca12a12d110936f923a7dbd0f979cc94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:ff:95:42:df:ec:5a:e8:02:ac:79:de:ad:
34:8f:f9:bc:41:2d:ee:67:bb:6c:ce:c6:0b:25:fe:
06:c7:ce:5e:7f:5a:16:32:2e:26:4d:ea:e5:f6:ba:
a3:35:8d:78:37:01:92:33:5e:f5:ce:05:c0:43:81:
8b:00:6d:3e:99:bb:2e:3f:c9:9a:9c:0a:53:e0:92:
22:bb:10:0f:93:54:a5:89:93:37:40:58:ec:27:a1:
c0:82:e2:bb:05:c3:13:89:93:d5:f9:3a:cc:09:ac:
42:9e:3b:48:de:9a:d8:46:74:8e:61:14:6f:9d:be:
f7:09:d2:74:2c:61:f2:ef:1a:07:4a:22:69:a9:11:
2b:03:e4:65:b1:77:fe:d3:08:8e:4e:60:85:e7:86:
31:e4:ae:70:a1:f0:d9:fe:00:ae:71:32:b6:bb:a3:
3c:d7:c6:1b:d7:d9:46:05:ea:53:d4:a4:22:e8:f2:
33:16:ae:2b:bd:33:d5:bd:51:46:73:3b:2a:7e:ae:
dd:ee:1f:e0:68:31:dd:e3:ee:94:d2:d2:24:0b:f2:
7f:91:30:7e:78:99:2b:d9:d7:91:ec:9a:a7:26:3a:
1f:a5:ab:a0:0f:47:f5:92:c4:1a:5b:a6:13:b2:4d:
28:9e:61:9a:9c:4b:67:c5:fa:ef:50:f3:1f:43:ad:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:99:8C:A1:2A:12:D1:10:93:6F:92:3A:7D:BD:0F:97:9C:C9:4C
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1e:3e:9a:09:e5:a6:1c:db:ed:5c:47:8a:3b:27:ea:3b:58:
85:54:a5:ec:84:59:d8:d6:8b:8c:d6:fe:0e:08:5d:b7:a4:48:
b5:4c:86:37:5b:cb:7e:71:11:cf:ee:32:83:71:28:f4:57:7a:
c4:dc:9e:eb:18:af:ed:b3:2f:fd:06:8c:74:7f:0b:36:e3:d2:
f8:3c:d5:4f:7a:ed:90:6b:c7:30:9b:b0:36:41:6a:60:f3:5b:
82:2c:77:29:4c:fa:a7:6b:dd:4e:88:fc:ef:60:06:73:65:56:
9d:77:38:d3:5b:fc:31:a4:c5:45:a0:e6:e5:fd:fd:63:72:29:
1e:eb:37:c9:e0:02:8d:a6:48:e8:36:54:33:21:aa:ea:1d:37:
88:4b:13:ef:57:3e:63:df:67:81:68:b3:88:6d:c2:0b:6c:79:
cf:1b:e8:78:c2:63:de:17:36:74:26:9f:46:00:d9:07:33:6c:
bd:1b:90:a1:29:04:b9:95:e0:bd:b8:3b:a2:bc:54:10:33:04:
d1:f1:fd:41:ae:c7:59:a2:f5:48:0f:9c:e0:f5:4e:3f:aa:70:
31:f0:d1:f1:aa:42:93:6d:c2:d0:11:3b:01:6c:d9:77:11:a2:
3f:64:f0:a6:e0:ec:4f:7a:91:73:ad:34:43:6b:57:70:c7:94:
a3:bd:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:13 2025 by rpki-client