Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json)
Hash identifier: 43vDE3ktmxKNtf+BS9ymaMEIj96oAFqKjc67BzJZ02o=
Subject key identifier: 3F:7B:82:69:9E:6F:FA:31:9C:EE:9D:15:94:B0:AB:51:0C:FF:63:CC
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 019923313A7DA0EF5C9A6589AA0B775DA49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
Manifest number: 13FA
Signing time: Sun 07 Sep 2025 08:00:52 +0000
Manifest this update: Sun 07 Sep 2025 08:00:52 +0000
Manifest next update: Mon 08 Sep 2025 08:00:52 +0000
Files and hashes: 1: OwIv7U97sC9dks6Rl4mlkK2f8GI.roa (hash: 8n+wp+UnJSkfB2nwEoGtaJ5dvj8q4nuluWU6IFbCLc8=)
2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: aMvWTBwb2UyCBqJnb+XLVqGTUeiJ+Kj0HIruxUU4Uqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:3a:7d:a0:ef:5c:9a:65:89:aa:0b:77:5d:a4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Sep 7 08:00:52 2025 GMT
Not After : Sep 8 08:00:52 2025 GMT
Subject: CN=3f7b82699e6ffa319cee9d1594b0ab510cff63cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:7b:e5:b2:47:91:90:b3:51:d3:72:48:98:
e9:82:59:9b:20:bf:76:23:7a:92:f3:e9:e0:d5:00:
7e:39:f2:28:fb:db:48:6f:64:4d:b4:a1:50:99:c6:
43:09:63:1c:15:b8:e9:02:77:2f:e9:89:e1:19:31:
d1:5d:a3:e3:e2:79:54:ec:58:72:4e:ff:ce:41:68:
ef:39:9a:b2:c7:14:55:45:b3:95:95:63:b8:87:fa:
a6:c6:c3:66:e3:51:82:b8:ae:84:24:7a:47:b9:67:
dc:3e:e4:07:17:94:41:67:d9:e0:51:a4:01:85:d5:
52:d9:fc:f2:9e:f7:8b:59:ad:01:4e:f8:9d:c7:5c:
e2:0b:86:f4:f6:2e:14:9f:09:a9:59:68:ba:7d:5a:
5d:db:67:a3:42:59:ef:08:36:ec:d3:54:37:6e:62:
66:d1:8e:da:98:e3:0a:9e:92:f2:01:01:16:f0:51:
ce:cc:98:17:74:be:ed:54:46:15:7f:fa:4c:a8:3f:
cf:fb:69:76:77:31:a6:02:4d:0d:13:32:95:a8:48:
27:8e:d1:90:26:b2:c2:50:a5:1b:32:00:59:7c:ee:
70:7a:41:bb:61:36:b7:53:93:de:18:94:84:dd:a6:
db:81:e2:6e:f0:ea:e8:46:96:76:84:f6:a6:b9:c8:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7B:82:69:9E:6F:FA:31:9C:EE:9D:15:94:B0:AB:51:0C:FF:63:CC
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b1:5c:03:9b:62:69:d9:3c:2c:32:1c:3b:9c:88:a5:18:59:
c2:57:0d:1b:6a:98:db:bc:1c:03:14:f8:9d:23:cf:8e:02:28:
ec:42:13:77:fc:66:b3:71:83:ca:bd:ff:d4:f9:9c:5a:af:6e:
93:9e:fe:a9:16:e6:fd:76:0a:56:94:8a:e5:6a:25:85:2d:40:
9b:05:71:2d:d8:f0:8b:6a:1a:d9:c1:43:a2:11:35:2e:0d:6c:
b1:52:a5:e5:6f:e4:41:35:e3:c0:c7:55:dd:a2:52:10:3e:c7:
b6:a5:4d:b7:c3:a7:96:e3:9b:d1:42:c6:4b:69:92:7a:89:4a:
f9:50:cb:80:ab:e6:15:15:49:d8:8b:85:bb:73:8b:ee:b5:5c:
fb:70:0e:2a:d9:e3:b7:85:de:ee:21:b1:7d:2f:38:b4:21:b8:
f7:86:62:c9:60:c5:30:c5:bb:e3:57:3f:fa:8e:df:44:2a:97:
85:46:51:d5:50:eb:e1:01:22:7c:8a:3b:9a:4e:58:29:fc:9b:
9b:4e:c3:c0:3d:a8:d3:c6:19:dd:6e:f1:e8:c8:e0:28:57:b0:
22:d4:f3:56:4d:d6:81:0b:d4:b5:e2:af:9a:e8:84:ae:f0:81:
58:08:7c:0c:b3:85:f5:ce:53:f5:c7:e4:13:40:45:cf:88:32:
94:bc:3a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:30 2025 by rpki-client