Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: NGZBUlyGo450mONf3qHcWXb59jOKJrVyQje/IagSCbo=
Subject key identifier: DD:1C:29:D5:6F:34:20:BB:49:00:1F:C9:FA:3D:97:83:E6:DC:EE:42
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 019936F02768F350F581FED8613FE2F3E0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 09A1
Signing time: Thu 11 Sep 2025 04:02:12 +0000
Manifest this update: Thu 11 Sep 2025 04:02:12 +0000
Manifest next update: Fri 12 Sep 2025 04:02:12 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: 79wGhrdXPRUzlLoigymFyfl1+5ylHICFC71ekLa33G8=)
2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:27:68:f3:50:f5:81:fe:d8:61:3f:e2:f3:e0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Sep 11 04:02:12 2025 GMT
Not After : Sep 12 04:02:12 2025 GMT
Subject: CN=dd1c29d56f3420bb49001fc9fa3d9783e6dcee42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:05:08:22:fa:4b:37:0d:b8:c5:44:37:f7:
06:c0:0d:5a:f4:c4:a6:33:3e:2d:0a:c2:7d:bd:32:
e7:0b:63:64:e1:51:7e:1c:84:78:e8:4f:49:5b:59:
60:69:52:3b:ce:dd:d4:94:8f:bf:21:e7:55:2b:01:
75:8d:d2:cb:91:df:72:57:24:a8:eb:a8:10:51:a3:
26:a9:2a:62:b9:fd:7b:e7:21:b9:7e:90:b6:a5:b9:
1f:39:60:7c:6c:35:0c:84:89:6e:6b:d4:aa:45:bf:
3b:19:55:33:9a:01:5c:a1:63:2f:e0:65:6c:96:6a:
7a:6e:f5:aa:c5:d2:2b:71:e0:ae:fb:e6:3a:3b:9f:
53:94:a7:b9:b4:fd:0d:05:41:4b:e0:59:02:e9:b7:
62:dc:d4:99:d1:ef:9f:b7:a2:42:32:88:d5:a5:9e:
66:a4:2d:87:a0:3b:d3:e7:2a:c6:ac:17:9f:d0:83:
1c:69:c6:b1:3e:1b:e0:e5:d6:0b:73:a6:a1:9b:31:
60:5d:5b:fd:9b:8e:2f:48:46:18:fc:4c:57:71:2c:
9f:ba:12:34:34:6f:5e:b6:a3:53:9d:4b:7c:3e:57:
66:77:f7:cf:ff:d9:2b:95:2e:fc:4d:83:8d:64:22:
28:6a:7f:6f:2a:70:f7:fa:f5:d2:4d:83:64:6e:d9:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1C:29:D5:6F:34:20:BB:49:00:1F:C9:FA:3D:97:83:E6:DC:EE:42
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:27:56:18:78:14:88:dc:bb:94:6f:35:6d:40:1a:55:25:26:
56:a6:7f:75:e2:a7:89:6e:6e:88:f3:e3:f1:eb:50:8c:71:e2:
54:fe:94:0b:01:73:7c:2e:20:c2:cc:a9:45:fa:06:93:fa:95:
da:1f:c1:b3:2a:b5:80:2a:d1:83:b9:2c:e1:50:18:16:04:e5:
af:89:67:93:8d:4e:7a:05:99:79:ff:28:2f:82:33:5d:82:8d:
c9:2f:8d:0e:7d:5f:e9:9d:2a:ee:aa:69:59:e2:21:09:41:1f:
df:1c:41:5d:36:5a:63:ce:6a:97:58:1f:93:21:05:66:63:1e:
15:1b:71:e1:26:90:a0:bc:cd:29:ea:19:5d:c2:fc:72:c9:47:
60:9f:af:c3:18:2b:3f:27:dc:75:25:4c:6e:d2:e6:c8:c5:c8:
52:40:c6:da:bf:16:a9:fc:43:4f:d3:e2:78:8d:0c:3b:47:89:
8f:5f:60:67:1c:e9:0e:84:ca:85:b6:f9:df:3c:d8:29:00:c4:
20:d6:fd:25:29:01:64:5c:11:93:81:08:c0:91:06:3b:61:f1:
91:66:17:ef:f4:5a:a9:8c:a5:c8:8d:23:4f:83:a4:33:20:07:
9b:90:33:a4:af:65:4c:f6:75:bc:97:ab:65:3e:c7:81:b7:72:
fa:00:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:06:22 2025 by rpki-client