Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: 5QcdsKoUV+x+9rvnPZYqMm8GBMhQY5LjClfKm/FSG2Y=
Subject key identifier: FD:BD:2A:F3:5F:EC:91:50:26:38:0C:AC:1E:13:91:70:D5:9F:FA:CF
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 019922C2ED0E13E86525134CB791B7A8545D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0A7F
Signing time: Sun 07 Sep 2025 06:00:23 +0000
Manifest this update: Sun 07 Sep 2025 06:00:23 +0000
Manifest next update: Mon 08 Sep 2025 06:00:23 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: C7LWBRDpR5j1yZiWszemzyULXtKbzM/Kjt0YIe8M3nA=)
2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:ed:0e:13:e8:65:25:13:4c:b7:91:b7:a8:54:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Sep 7 06:00:23 2025 GMT
Not After : Sep 8 06:00:23 2025 GMT
Subject: CN=fdbd2af35fec915026380cac1e139170d59ffacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:ef:25:a3:8c:f1:53:03:64:c9:f3:e3:12:
b9:c8:bc:73:33:74:5f:5d:6c:c9:94:16:7f:d2:0a:
1f:97:e7:b2:0f:06:ce:8c:c2:64:a0:b6:03:67:2e:
83:81:a5:9b:7d:7a:28:a4:52:2a:65:82:4b:82:6e:
03:b1:f5:52:67:0b:c1:4c:78:6e:7c:f3:f4:67:5e:
a4:e6:fb:21:49:b3:f3:ac:a5:3a:8b:25:26:ed:98:
79:d0:0d:16:35:36:3d:bf:91:aa:b8:14:a0:e0:97:
6e:7f:87:a0:de:08:ba:04:d9:43:45:77:1a:b3:30:
33:dc:22:d5:e4:28:d6:7b:0e:0a:af:7f:aa:03:33:
44:e4:01:5d:d2:be:69:df:58:4a:91:9d:32:71:b4:
bc:0d:6c:03:06:16:0a:e5:46:2f:bf:42:e5:4f:fd:
89:e9:af:af:f1:6c:27:90:c2:f5:59:a9:b9:b0:c0:
69:76:e2:73:de:0a:a7:fb:ff:39:bc:70:cf:74:7f:
40:68:b8:76:36:ff:13:49:8a:d2:05:78:c4:c1:b1:
ef:21:f8:25:75:e9:ae:3c:b0:56:24:f6:19:e4:8f:
82:02:38:45:74:73:6f:eb:10:91:75:a5:9f:f9:63:
c6:8d:05:4e:14:ba:5d:3b:f0:23:6d:ea:7d:9a:8f:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:2A:F3:5F:EC:91:50:26:38:0C:AC:1E:13:91:70:D5:9F:FA:CF
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e8:79:62:3c:7d:51:39:d9:9a:93:81:4a:98:f8:b7:ed:49:
28:c4:28:14:b7:f1:05:f9:e8:d9:82:1a:2e:3e:94:7a:df:02:
84:61:5e:09:06:aa:db:50:b5:72:7f:e0:40:d6:79:75:4d:5d:
66:97:5c:0f:82:8f:64:95:cc:03:9c:ee:67:35:83:5a:30:fb:
89:47:71:54:cd:c8:09:91:15:49:1e:6a:06:eb:13:35:55:55:
45:1b:17:ca:b3:50:d1:38:e6:24:f8:5c:da:ac:eb:7e:33:16:
9e:4d:59:a7:90:e6:cf:65:43:c9:dc:16:db:b3:2c:5a:3b:c7:
67:83:2a:30:1c:80:37:97:e1:ba:21:b2:9e:2f:9f:60:d9:e2:
e2:52:58:1b:f5:f8:72:e1:df:03:c0:ad:61:3d:7e:55:9e:ba:
ce:5a:97:31:1d:44:ce:b0:e0:d9:ff:76:98:64:a4:2e:08:ba:
9a:e1:5a:6a:ca:f8:3a:f5:e9:76:0a:b5:30:6b:84:4b:66:73:
8f:e7:3a:37:71:8d:97:d4:28:04:a8:1f:50:c8:6f:a6:7e:46:
ff:42:93:c7:4a:5d:36:5e:20:0f:27:26:bc:47:5d:b6:78:df:
36:c8:79:9d:54:8e:11:44:d3:d5:1a:33:e5:28:de:37:03:8a:
4c:12:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:47 2025 by rpki-client