Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: 6r6oe+1yHHlSOftF2vMgVxKSV20ySn/hHJMlkeTIth4=
Subject key identifier: 23:F3:D1:73:2D:6A:88:EC:01:18:20:AA:0A:D4:02:56:55:38:9C:C8
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 019848F777ED441CB7D89524D8A20DBF4439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 1590
Signing time: Sat 26 Jul 2025 23:00:34 +0000
Manifest this update: Sat 26 Jul 2025 23:00:34 +0000
Manifest next update: Sun 27 Jul 2025 23:00:34 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: jea2A5XuN3soN6ZFTYYgYVeAaD2ezsOwjuEIyJb5Cro=)
2: O3vVokpmMILfLuCvtK11xQ6QzgQ.roa (hash: QJ033XApjs5jTBUXlpnVdiwOxF+/6PemalcFTFglCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:77:ed:44:1c:b7:d8:95:24:d8:a2:0d:bf:44:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Jul 26 23:00:34 2025 GMT
Not After : Jul 27 23:00:34 2025 GMT
Subject: CN=23f3d1732d6a88ec011820aa0ad4025655389cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:45:2c:be:22:09:bd:ba:de:89:cf:27:f0:
9f:88:57:13:b0:a8:52:59:d8:8b:b6:45:15:25:7c:
c3:6b:98:dd:5c:54:34:1f:3d:df:15:2f:eb:6f:ed:
35:8e:df:1b:ff:df:b4:10:02:77:89:47:09:ec:34:
1d:21:57:12:2c:93:9f:78:87:75:66:47:a4:57:c8:
54:c3:1b:46:4d:bc:cf:54:de:ae:84:f4:93:6f:08:
91:f6:76:82:ef:02:34:34:a3:a1:94:42:c7:ff:6d:
ec:14:34:d5:29:83:ed:07:ae:ad:39:ce:76:a6:d0:
79:b8:7a:e9:c4:c1:9b:ab:9c:23:14:01:21:78:6b:
ad:42:e6:8b:ad:b0:d1:5e:67:22:ae:8a:ce:4a:f7:
b3:46:75:7d:54:5c:30:70:37:1c:1b:3c:02:47:1b:
8a:99:3d:10:58:42:d0:b4:3b:ae:fd:03:8c:34:a3:
60:8b:0a:7f:db:b5:a6:2c:85:10:40:7d:36:75:b3:
e7:aa:4d:fb:9e:dc:32:f0:c2:9a:ba:7a:33:cf:0a:
df:e2:d2:64:a0:56:ed:1b:af:35:71:1a:b4:b4:52:
3b:e3:da:4a:0a:4f:76:6a:4a:c1:64:64:9e:f3:5e:
b2:b1:12:fb:23:8e:52:41:b8:7c:95:eb:bc:5b:7d:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:D1:73:2D:6A:88:EC:01:18:20:AA:0A:D4:02:56:55:38:9C:C8
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:46:a3:08:d6:04:8f:9e:2b:57:d7:4e:52:fd:42:1b:f9:
78:f9:68:be:0b:3a:3b:f9:45:a7:a6:78:93:e2:b0:fa:88:47:
d0:8b:3d:7b:5f:80:27:2c:6f:c8:b8:b9:99:dd:27:ac:bd:5d:
5f:cd:e9:ce:d0:8e:9e:39:c1:e5:5a:3a:6c:af:d9:2f:c1:44:
f4:38:d0:9a:96:44:29:4c:fd:80:bd:55:b1:7a:27:e6:6b:cd:
c6:90:17:b3:49:fa:6b:69:ff:ea:db:63:c7:18:93:24:1f:83:
23:3c:5b:5f:c5:22:70:07:76:9b:e3:58:85:a3:80:8e:93:04:
2e:84:8b:ec:59:ba:b5:40:42:9e:9c:22:78:b3:d2:7d:59:73:
2f:69:62:88:52:e3:5e:1f:10:7c:9f:b2:d3:59:e2:5a:0f:9c:
8d:db:bc:8d:40:b0:70:fd:69:4e:05:29:6e:c7:e1:26:fd:1b:
bd:a9:40:91:c8:6a:16:9d:2b:0a:01:c5:9f:6e:4b:ae:f4:ae:
ad:6f:e3:d9:6c:73:5d:0a:2d:ce:03:33:75:8b:60:e8:f2:5c:
19:53:69:5c:91:7e:29:ef:21:63:6d:78:d4:4f:f2:51:c1:e9:
7d:00:05:f6:3d:a8:87:6c:32:3c:cb:2a:0b:45:3c:da:67:53:
0c:61:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:47 2025 by rpki-client