Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
File: FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json)
Hash identifier: P97ni9RjAnWvhHJwAsYvkzjsQs6ljlKeem2O1rFTZJc=
Subject key identifier: 94:9B:1F:D5:BE:04:DA:9E:32:AC:A0:02:71:D5:02:6C:BB:41:80:24
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Certificate issuer: /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial: 0199239F2BD2F01810F174334104B0FDFBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
Manifest number: 10A2
Signing time: Sun 07 Sep 2025 10:00:57 +0000
Manifest this update: Sun 07 Sep 2025 10:00:57 +0000
Manifest next update: Mon 08 Sep 2025 10:00:57 +0000
Files and hashes: 1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: fy6TlF5QGf6wwC9JaTjkGTaFXGZZjtM+rxTxQhRXr5I=)
2: ZuMY1XotbixRHp-2hF8zeuwVNac.roa (hash: cWcV3AJ97upwcCtlMiiXPFQ1J792OYZqXfGtYafZgg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:2b:d2:f0:18:10:f1:74:33:41:04:b0:fd:fb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Validity
Not Before: Sep 7 10:00:57 2025 GMT
Not After : Sep 8 10:00:57 2025 GMT
Subject: CN=949b1fd5be04da9e32aca00271d5026cbb418024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:95:29:1d:32:0d:1f:7c:10:a4:43:3f:ef:
7b:89:a9:8b:6a:49:3a:94:cc:41:cb:e2:72:74:cf:
4b:30:f7:53:ba:89:2d:5b:d5:a7:14:ed:52:94:2f:
e6:7f:50:6e:d3:32:63:09:fd:d4:5d:ae:9c:a0:12:
7e:39:e2:5d:7b:44:43:23:ac:d9:19:21:1d:c1:e6:
e5:f5:04:fb:64:92:5a:bb:8f:67:d1:fb:4d:aa:ed:
23:ea:b2:d6:78:c8:79:bf:a0:b6:10:b4:85:7c:03:
20:ff:13:e8:e6:25:f0:83:fd:11:24:6a:5c:6f:11:
28:b3:08:d6:22:1b:86:77:2c:95:22:2e:0b:40:ea:
b8:c2:b5:3f:62:4f:ee:69:c6:e4:a6:47:4b:7f:c0:
61:78:14:2c:35:9e:51:38:68:81:42:aa:38:fe:9e:
a1:3a:87:7f:ee:67:59:b1:7f:ba:bc:94:71:ea:33:
70:08:6f:1d:96:60:9e:f7:35:cc:39:07:54:f7:b6:
9c:7b:79:37:fc:6d:84:7c:f2:2b:41:6f:13:be:90:
e3:3a:0d:94:55:19:e5:a1:87:a3:07:6c:8c:e3:35:
aa:57:97:05:c9:cb:69:50:4c:06:b2:fc:65:e6:42:
d3:41:a0:91:2c:75:b2:a1:b8:82:61:ae:ae:ac:19:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:1F:D5:BE:04:DA:9E:32:AC:A0:02:71:D5:02:6C:BB:41:80:24
X509v3 Authority Key Identifier:
keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:64:00:ce:13:5a:9e:4e:3b:b7:22:8b:b4:0c:3b:29:c4:60:
1b:80:29:58:7d:89:49:ac:6c:ca:6d:a8:3c:b0:78:84:59:7b:
8a:24:0c:cb:45:63:42:72:fc:46:7e:ca:e2:b2:9b:59:b2:6e:
34:b5:c9:ef:ac:43:b0:c8:17:d1:7f:46:85:8c:e0:ee:bc:3b:
6b:ee:d2:02:da:3a:27:90:47:c4:46:7f:0f:f8:5f:36:bf:37:
48:e9:1b:e0:af:d1:bc:0a:de:7b:ed:bd:2f:f0:ec:ac:84:91:
f5:f5:1f:52:4a:e0:c7:71:fd:30:f5:1b:63:4a:3c:41:54:6a:
3f:e0:13:b4:81:b0:af:8f:44:2a:39:fb:33:31:c4:1e:cd:b0:
8b:a8:f2:be:64:c7:97:3b:31:69:47:b1:e1:5a:dc:12:fd:89:
54:cf:9d:63:ec:4c:9e:40:6c:6c:91:39:11:ca:1f:86:1a:8e:
5b:4d:d9:03:66:fe:1d:9e:3b:5b:46:b5:9a:bb:0e:ed:3d:7d:
a4:c3:f8:c8:4e:af:87:fd:e2:18:94:6e:56:0e:9b:70:3a:1b:
d0:e1:d3:76:90:e5:b9:96:a8:68:f2:31:aa:0d:59:af:c4:3a:
44:28:4d:9e:66:1d:70:b7:eb:c7:59:3e:e2:7b:0a:f8:50:d9:
51:f3:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:49 2025 by rpki-client