Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: jq2OOqZJXuk2Lkil8/B7JuwIShuSoioi3SKwfWnhRBg=
Subject key identifier: F1:2D:F2:EF:1B:50:11:75:A6:5A:3A:95:7B:A5:0D:06:2C:F2:0B:5D
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 01992E2316825370E95B8C738351581A001A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 1682
Signing time: Tue 09 Sep 2025 11:01:15 +0000
Manifest this update: Tue 09 Sep 2025 11:01:15 +0000
Manifest next update: Wed 10 Sep 2025 11:01:15 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: 141Vq+6QOid5oUsi6xAf4Gr3TBS3U8BCbuyVjHU2BPk=)
2: oc8JdJXemfH1vBBwa9gjuC7ZzP8.roa (hash: uxtVzPlkNCLudyDBzCoWRWmDXs6tfGV7X2Z5QJKK/Eg=)
3: r4X2HvAwh5ygol1cL2nGNDVz3U4.roa (hash: 7aCXdpb3SzbFP3HJ9KQNb5y78LcqzI5vEIV6FBttc2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:23:16:82:53:70:e9:5b:8c:73:83:51:58:1a:00:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Sep 9 11:01:15 2025 GMT
Not After : Sep 10 11:01:15 2025 GMT
Subject: CN=f12df2ef1b501175a65a3a957ba50d062cf20b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:7d:0e:0b:73:e7:19:2c:08:4f:ab:57:a7:
d4:f3:a1:b8:cf:7a:3f:c2:34:33:75:90:a0:59:eb:
8e:e1:ee:27:52:02:9f:82:79:98:e3:a5:28:5d:b7:
c4:0f:d8:af:7d:9c:aa:a2:6e:34:54:d5:8e:c2:bc:
a4:fd:0a:fe:69:dc:fa:80:b1:48:22:78:fd:23:fe:
ae:c6:3f:94:12:58:af:ab:02:65:2f:65:5e:57:6a:
0d:6f:be:c4:6a:a4:24:ec:33:8b:d3:ee:69:0f:77:
c4:dc:87:36:e0:ca:fd:b7:65:19:59:af:97:dd:0e:
da:b5:07:95:1e:5c:28:e9:94:6d:91:7d:47:75:3e:
ad:b0:24:73:2c:f8:58:eb:72:58:9c:1b:d7:a8:e6:
bb:47:18:c9:e5:3d:3a:b5:35:b3:af:c0:05:f5:90:
bb:39:ee:95:13:f6:f4:2c:81:11:b9:b1:dc:86:87:
36:1b:23:52:6a:0e:26:35:c1:c7:29:f5:44:69:f2:
50:e6:2c:b3:63:7a:cb:4d:71:49:75:fd:47:dc:fc:
ab:ae:77:15:67:c4:e8:59:7f:5c:73:54:b3:83:ac:
1a:a4:cf:e1:97:c5:31:db:a8:e7:e6:73:98:6b:fb:
72:02:dd:22:b2:d6:4f:70:28:d7:d3:75:ff:d3:71:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:F2:EF:1B:50:11:75:A6:5A:3A:95:7B:A5:0D:06:2C:F2:0B:5D
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:61:49:6a:38:41:81:52:75:bd:2f:49:d8:c7:3f:64:23:3f:
fa:42:9e:4e:d3:b1:7d:2c:0f:2b:0d:1e:e1:8e:0b:f6:c3:21:
79:6a:95:cd:d9:34:d6:29:02:16:db:fb:6b:20:40:26:db:db:
ba:3c:75:85:1f:df:86:4b:1d:00:60:16:2e:56:80:54:ae:c3:
5f:da:67:b5:18:e2:0c:46:e3:0b:d4:f4:30:53:91:2e:03:41:
2b:da:7a:8e:3a:80:ad:fe:17:a5:1b:7d:f2:12:3c:12:92:61:
d5:b5:97:79:5a:c7:7f:77:e6:9a:a0:1e:9d:a1:6e:9b:09:96:
c1:98:6a:46:29:b9:b9:1b:c2:31:66:c7:d5:09:72:37:84:26:
f3:c1:ab:8d:fa:ff:54:9c:24:88:dc:64:7b:6b:9f:0a:66:83:
47:f7:4a:12:1e:c9:55:2e:59:91:91:bc:3a:c7:0e:f4:51:e5:
f1:03:dc:6d:f9:21:ad:7c:7d:f3:a3:ad:2d:f9:14:8e:1a:50:
4d:54:34:a9:07:67:e1:b2:84:56:07:55:46:13:92:70:36:01:
5b:21:56:66:71:e9:4d:54:6a:4c:ff:d3:47:96:9f:e5:b2:60:
3c:58:d9:d0:3d:ae:12:14:cb:ce:6f:29:31:21:2c:da:76:f3:
40:67:e6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:37:50 2025 by rpki-client