Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: XPkGXkwR0PrCaf6dx/WH84csSDvxFlVsIO+XgzaBMko=
Subject key identifier: F6:EF:D9:6A:A0:39:C3:EE:99:1E:5E:3F:51:17:77:F3:D0:F8:14:F4
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019918ADDE3A392176C5024F8C45191BAFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 1644
Signing time: Fri 05 Sep 2025 07:01:11 +0000
Manifest this update: Fri 05 Sep 2025 07:01:11 +0000
Manifest next update: Sat 06 Sep 2025 07:01:11 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: 5cjqCD66KirXoX+QeI7iam+wZisFDxP0zM/bYNODncM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:ad:de:3a:39:21:76:c5:02:4f:8c:45:19:1b:af:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Sep 5 07:01:11 2025 GMT
Not After : Sep 6 07:01:11 2025 GMT
Subject: CN=f6efd96aa039c3ee991e5e3f511777f3d0f814f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:18:7a:ce:ed:60:4a:ce:6a:fa:ba:3e:92:
51:8d:c4:3f:31:20:1b:6f:91:85:08:ea:07:48:9c:
3b:0b:9e:bd:70:91:fb:61:1f:99:85:23:8a:0a:1e:
a6:21:d3:5d:54:12:7d:ab:7f:f8:5e:2a:bb:a2:db:
b8:ee:e6:ee:bb:b6:98:08:4a:c2:74:24:8c:55:e1:
79:c2:47:bf:e5:90:6c:8c:d2:ff:1a:cb:5f:2e:0b:
04:78:bd:cb:e5:46:33:76:42:a2:5f:b3:04:11:c3:
cf:be:f2:a9:6b:0c:83:29:a8:35:56:b9:c3:41:e7:
da:13:dc:a1:ec:aa:78:2e:5e:4d:6f:c2:35:7a:27:
75:43:71:77:92:95:5c:62:e4:89:b4:af:31:34:58:
5d:bc:7d:be:6c:29:37:54:c9:91:ad:be:20:c6:ac:
24:00:72:22:5e:88:4e:7c:e9:d1:9e:ef:4b:62:7c:
0d:e1:74:4c:f3:82:ac:62:bf:bd:77:d6:a4:d4:0b:
37:2e:ab:92:38:2a:73:76:ab:61:17:3d:f4:7e:10:
9f:b3:b0:1d:6b:e7:c1:67:82:fb:c4:5d:e1:ea:4b:
ce:eb:99:da:09:8b:9f:57:98:ad:73:94:86:c2:9a:
8f:c6:32:d1:83:55:05:76:62:df:0b:41:2d:e0:48:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:D9:6A:A0:39:C3:EE:99:1E:5E:3F:51:17:77:F3:D0:F8:14:F4
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d1:28:dd:73:5e:9b:6b:29:be:25:10:68:e9:84:35:01:7a:
98:da:a6:3b:92:02:c6:db:eb:06:89:8a:64:43:de:7f:35:79:
85:d8:df:4d:ad:b6:3d:be:33:10:6e:96:f0:47:27:9b:12:d1:
f5:12:67:c0:a5:d0:ae:c2:5b:b5:96:83:ad:2a:69:9b:f4:36:
a6:67:ca:b4:bd:c1:ed:e2:67:eb:70:be:52:a6:b0:45:3b:27:
2e:14:36:73:a7:9d:16:99:7e:95:b0:43:86:8e:cc:2d:c1:c1:
69:af:88:ed:d9:29:07:9e:ae:5d:f2:5c:63:e8:88:8a:bc:bb:
99:d6:17:43:49:68:22:38:14:37:fd:9a:80:41:0e:fe:4f:1f:
b0:38:bf:75:fd:40:c9:c0:7a:2e:c6:fd:52:9d:41:6d:d0:4d:
0e:7a:dd:54:b8:ba:6e:ae:84:79:19:d3:e6:ad:87:41:78:c3:
55:38:4c:b9:a5:de:ec:f2:f8:43:3c:c5:ee:7b:7c:af:3b:0d:
5f:55:81:13:50:67:56:16:b7:75:3a:d2:88:ed:34:89:f8:41:
71:e6:24:78:15:a3:7e:46:4d:c9:84:d5:7e:8d:88:63:2a:e5:
80:e5:66:78:c3:ab:13:00:fb:53:7a:4c:ee:a1:47:24:29:96:
a6:e3:4f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:41 2025 by rpki-client