Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: /stWNKHUhmRm5gZn091XXZlZnQi7eweoLWV0OMJyxms=
Subject key identifier: F7:F7:47:00:5D:19:EA:96:59:3F:13:C1:00:5B:F4:2B:29:53:DB:E5
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 0199221F04A8A54023287A57DE5A15FBC24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 084A
Signing time: Sun 07 Sep 2025 03:01:21 +0000
Manifest this update: Sun 07 Sep 2025 03:01:21 +0000
Manifest next update: Mon 08 Sep 2025 03:01:21 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: jO9KT7CeIfnFacBnNX3pdPipHZc3GPA982OugVm5yss=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:04:a8:a5:40:23:28:7a:57:de:5a:15:fb:c2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Sep 7 03:01:21 2025 GMT
Not After : Sep 8 03:01:21 2025 GMT
Subject: CN=f7f747005d19ea96593f13c1005bf42b2953dbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:39:07:0d:4a:87:28:27:91:45:be:29:55:
e2:38:4d:d7:b8:2a:93:e2:7e:4c:78:38:1a:f3:47:
2a:d5:92:ff:70:7c:bf:5b:d6:e5:f8:48:6c:40:d5:
b7:5d:94:50:6d:17:88:eb:ea:60:e5:cd:89:df:15:
c2:3e:59:3b:67:7c:3f:e0:dc:cf:53:f7:fd:ab:ef:
a7:49:52:0c:6d:e5:5b:9b:38:7d:bf:1c:5e:ff:cb:
9a:29:52:7b:b2:c9:74:52:f7:f8:7a:93:ae:a5:4c:
f2:d7:77:70:fa:7a:f2:40:b8:58:72:3a:a6:c4:9c:
09:76:c7:aa:bf:5d:39:c5:89:9f:74:a6:cc:59:ba:
7b:13:5f:28:fd:69:b5:db:64:54:69:eb:8d:03:ac:
84:0d:6c:e1:95:2e:35:77:12:e9:ce:21:0f:76:bf:
e2:78:b1:08:d2:1c:50:00:ca:65:e3:04:58:ae:71:
84:5a:9f:b4:8d:20:36:4a:48:4e:45:58:ee:e1:a5:
d5:c7:04:3c:08:22:93:9b:fd:26:55:98:30:d8:34:
40:3e:9f:57:0f:58:88:20:87:7e:68:84:b3:6c:0d:
21:10:71:b4:e2:20:be:80:e9:90:9d:d4:3b:e5:3d:
46:40:c6:b6:e3:e3:39:e4:f0:97:31:c4:bc:00:a9:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F7:47:00:5D:19:EA:96:59:3F:13:C1:00:5B:F4:2B:29:53:DB:E5
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:aa:1f:42:09:41:4d:64:9e:00:15:2c:29:f2:3b:23:57:f0:
11:0b:6d:ae:8a:14:d2:f9:92:44:fa:1d:0d:0f:12:dd:ab:ef:
eb:3f:55:c1:74:af:97:fa:86:c4:a7:10:c3:b3:99:a7:37:f7:
76:99:02:4d:db:b5:da:40:87:94:b1:a4:26:30:ec:f7:c1:2c:
de:a4:bd:be:a3:c4:fc:36:aa:15:fc:50:ea:c9:ac:ad:aa:d3:
73:28:00:93:b2:0a:e9:32:7b:b0:0d:a0:0b:1a:ed:0b:93:96:
46:5f:2e:6d:4c:0e:37:fe:22:c7:34:da:b6:99:63:ea:e6:97:
dc:ec:87:fa:96:fa:c2:48:af:28:47:e7:54:f8:08:e4:7a:49:
86:3f:56:a5:72:e5:67:a3:4e:3b:4b:71:21:e9:90:89:60:c4:
31:09:27:a7:c9:a3:63:11:b3:70:db:af:15:46:dc:91:28:0f:
e7:f0:a5:38:c9:cc:e7:f3:1c:d4:b1:70:39:55:d9:d0:24:89:
78:c1:d1:d8:8b:56:bd:7a:c5:9c:14:92:48:1a:ea:e3:48:70:
0b:07:62:11:18:dd:e5:75:90:27:98:a0:4c:af:32:db:9e:50:
94:06:23:18:07:3a:a8:d0:ea:6b:c2:e3:67:d7:7f:dc:1e:64:
d1:af:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:27 2025 by rpki-client