Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: LHGt9O7r06vtKBYfIgswTh7h0h3mjgQwa2RMKgy/Rto=
Subject key identifier: 10:9E:3A:F8:78:E9:4B:11:09:18:98:A7:66:00:1A:EC:DA:9F:0A:56
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 01984708E7AB0CE93222017D27301B4874DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 068E
Signing time: Sat 26 Jul 2025 14:00:22 +0000
Manifest this update: Sat 26 Jul 2025 14:00:22 +0000
Manifest next update: Sun 27 Jul 2025 14:00:22 +0000
Files and hashes: 1: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: 4L7iOEkA983A4bCJdZBEsqXPlnEfcJLjimohvuoHkDE=)
2: KxRNTvfcdP27-i8KDlCuxj_UX9s.roa (hash: olLk9GQzBEMbkOZCVQ+if+KnQS1x8YbAz2sIcJuFwbg=)
3: TTEx5Tf_ryhhBEghXe_juH2H65U.roa (hash: 6yFkwOTsWr11Au8Jovaobg2AJZpMXPDe7vY/stuVAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:e7:ab:0c:e9:32:22:01:7d:27:30:1b:48:74:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Jul 26 14:00:22 2025 GMT
Not After : Jul 27 14:00:22 2025 GMT
Subject: CN=109e3af878e94b11091898a766001aecda9f0a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:d7:b0:b6:e2:74:bb:0e:8d:c0:a1:3b:da:
aa:36:ef:f9:12:2d:c7:c4:a1:84:2b:55:d4:cb:91:
e6:a9:43:26:3d:1e:10:1b:d9:4e:d0:f7:3d:76:64:
6c:55:45:5c:f8:51:76:8c:51:51:38:71:23:b4:e2:
d9:7a:df:67:4e:1e:47:13:87:58:12:92:95:94:f7:
c1:b7:f5:c4:2f:45:7c:d7:07:9e:a1:d3:ff:a4:f3:
be:d3:d1:96:cd:5c:dc:90:83:fe:aa:45:7c:12:80:
ca:66:52:28:86:7d:a9:1f:d5:1b:24:94:b7:63:25:
22:6a:a9:4b:b8:22:0b:d6:1c:c7:d7:29:19:63:64:
ae:6e:e5:2a:39:27:98:12:18:41:d9:86:c4:c5:31:
af:e3:c5:28:f8:27:62:4e:24:0a:cd:85:2b:e9:cb:
5c:c2:58:1b:4a:98:36:be:4a:37:09:f2:36:ec:e9:
aa:d9:89:79:8f:f0:8c:6c:d1:13:16:d8:8c:0c:7d:
97:3f:af:2e:8d:e3:b2:3b:37:00:3e:db:c5:0e:ed:
52:64:17:b1:8e:ba:ad:22:9e:e1:2e:d5:88:77:8e:
43:77:4a:5d:a9:81:ec:14:af:56:7d:fa:32:7a:4c:
c0:44:16:72:33:4c:d1:df:f2:53:eb:8a:27:6f:bf:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9E:3A:F8:78:E9:4B:11:09:18:98:A7:66:00:1A:EC:DA:9F:0A:56
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4e:17:d5:2e:0b:a3:07:ee:73:13:98:37:c8:cc:c7:6f:8e:
12:49:94:47:7a:bf:04:c1:4e:ae:8a:69:3f:e7:05:28:77:fe:
2b:32:32:e4:c3:df:83:51:59:ca:e2:2d:b8:2f:ec:84:e5:25:
c0:ad:6f:77:8e:35:8e:4c:e3:fd:75:23:7b:18:eb:f9:2c:81:
9f:ec:cf:d6:b2:9e:7b:36:fc:ac:af:42:0e:0e:db:9e:f5:0b:
45:16:a4:98:06:e1:dc:cd:c4:c7:19:26:a0:75:9e:d2:a4:9b:
b2:47:82:ba:09:e9:8a:b1:2d:98:72:92:57:7e:64:ed:0d:97:
e0:af:68:47:2d:02:0b:3a:d6:ec:16:c7:33:43:b6:c7:eb:e4:
cf:ba:7c:84:f4:ba:83:4a:72:17:58:29:dd:32:94:00:42:f0:
24:de:92:2f:61:08:61:cc:4f:39:18:87:28:fa:1f:2f:a6:a2:
6b:36:08:77:72:28:38:a6:75:78:73:8b:68:b7:6c:b6:62:47:
60:4a:89:04:80:d9:a3:c2:76:65:49:c2:bb:d0:25:ac:8e:57:
5b:44:c6:87:cb:20:29:76:b2:2c:78:e2:38:aa:9c:02:f8:52:
15:1f:fe:05:48:b4:8c:45:45:e9:c5:bc:06:51:fb:02:64:2a:
12:93:a8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:06:22 2025 by rpki-client