Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: 7IwV3e+O7GOjbAs8BwIss3pzND8pzJMpm7RAOtzGOKM=
Subject key identifier: DF:6F:9D:50:F9:15:14:1D:CC:19:0F:E1:64:75:4D:73:96:8D:69:57
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 0198499C5B328BE641CE975C1460463AAAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 02:00:40 +0000
Manifest this update: Sun 27 Jul 2025 02:00:40 +0000
Manifest next update: Mon 28 Jul 2025 02:00:40 +0000
Files and hashes: 1: 7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa (hash: 9bGwX0kwTRRgIdjNNDlgMuEQgvhNB3ZWI22IbqLrXvk=)
2: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: ZhGRFTHEqGWFfxsYwvnNjRyt/ie0SJbNBS8u/Twqf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:5b:32:8b:e6:41:ce:97:5c:14:60:46:3a:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Jul 27 02:00:40 2025 GMT
Not After : Jul 28 02:00:40 2025 GMT
Subject: CN=df6f9d50f915141dcc190fe164754d73968d6957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:81:b1:5d:84:ba:f5:ed:2f:55:1b:2d:e0:
bb:43:3f:bc:b7:28:6e:83:dd:c1:36:ca:b9:0f:75:
b5:18:c4:8a:3f:48:d6:ff:06:79:64:58:f1:d4:61:
2a:3b:90:e8:fc:bc:c3:1c:11:73:dc:c6:9a:d3:a3:
36:43:40:13:99:9c:19:ad:c8:f3:f1:87:9c:60:ba:
88:89:d9:c8:07:89:8e:8a:c1:3b:49:66:68:27:a5:
33:42:17:d9:03:0c:fc:71:1d:96:dd:53:dd:50:1c:
a8:a5:02:f5:7f:d4:30:22:aa:f7:75:fb:24:97:a9:
0e:b5:fa:13:8b:ee:58:3d:08:a3:c3:41:d5:8d:6d:
fc:67:28:71:d2:1e:fe:48:4b:fd:f4:3f:1c:c8:11:
17:65:17:51:93:9e:b4:ea:a6:86:34:97:74:f5:9a:
3a:96:84:96:16:11:21:6c:84:74:09:18:4d:ae:58:
e5:4d:99:96:f0:ec:8d:a4:a4:09:82:7c:4b:f3:e0:
bb:f6:4c:8b:4a:b0:5b:32:00:e3:ec:e6:51:6f:67:
ee:4c:c7:80:73:e6:03:38:0d:38:24:83:ea:24:f7:
c6:b8:49:70:6d:c5:b9:4d:20:14:6d:32:3f:bf:b6:
0f:8b:41:6f:cd:89:68:ae:fd:e8:fa:eb:fc:e0:5f:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6F:9D:50:F9:15:14:1D:CC:19:0F:E1:64:75:4D:73:96:8D:69:57
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f4:3c:e0:a1:d5:8c:6b:00:5b:41:e0:40:69:2c:09:9a:32:
a9:8e:64:9a:dc:85:f9:77:68:94:a1:bf:5c:28:f9:97:f6:29:
a9:8d:c5:80:ed:f9:4b:1a:e9:cb:41:90:4e:78:fd:a6:87:df:
a5:3c:65:a6:b1:be:cf:7d:05:be:58:ed:7e:92:27:b5:f1:11:
37:bc:66:bf:85:cf:50:68:2f:28:1a:82:63:9e:8e:dc:2c:37:
85:70:e3:a5:25:9a:ee:fb:51:5b:91:44:dc:aa:9b:af:a3:4e:
04:44:29:6a:a6:2b:c3:21:4a:36:46:f4:4b:20:3b:24:1d:36:
e7:0a:76:95:ad:05:a7:2f:c5:19:7c:17:8d:4b:15:e9:e7:4a:
f2:4e:21:a6:4b:ca:41:f8:9e:df:69:65:77:08:59:a7:ef:22:
ed:d5:81:aa:f0:35:29:2a:21:c4:df:42:45:89:50:6b:b2:f5:
4e:3a:bf:31:cd:60:32:5f:1d:a1:82:19:7c:5c:f3:14:04:f6:
a9:6f:19:36:0d:b2:94:98:de:d0:11:c7:ff:6c:a8:9c:f6:fc:
18:c0:2b:54:1c:8a:fb:57:ad:4e:12:f6:b9:36:b5:d4:bd:fe:
25:f6:b8:9c:d9:f5:d2:aa:b1:77:16:5f:04:2e:80:4b:69:46:
29:54:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:07:36 2025 by rpki-client