Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: SddHfxhglz4i1dq+cHZB+l1Q2oZ/cn1VYJZH4AsFVu0=
Subject key identifier: 5B:5A:C5:2C:80:3D:FD:69:4D:BB:DC:F9:DB:CD:EA:2D:30:AC:CB:CC
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 019923A034F07D707BC40FABEEE5F204AF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 1110
Signing time: Sun 07 Sep 2025 10:02:05 +0000
Manifest this update: Sun 07 Sep 2025 10:02:05 +0000
Manifest next update: Mon 08 Sep 2025 10:02:05 +0000
Files and hashes: 1: E7khi_dy64NAplQCGIYWONm6XWs.roa (hash: B7pDURftKO1TVaIjuNJYi/KUiJRc83FFsiFwUHpeKCw=)
2: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: QG1v48guszo6WWlulG1nGvBpzI+PlF5AqL6ZtokUVA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:34:f0:7d:70:7b:c4:0f:ab:ee:e5:f2:04:af:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Sep 7 10:02:05 2025 GMT
Not After : Sep 8 10:02:05 2025 GMT
Subject: CN=5b5ac52c803dfd694dbbdcf9dbcdea2d30accbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:a2:c3:f4:f4:d1:f2:78:51:73:ea:87:e8:
45:8a:d0:a3:40:b6:ac:2c:02:77:44:4d:b3:f9:ff:
4d:40:34:ae:93:63:55:f9:6c:40:86:01:69:0c:2f:
4e:87:59:87:87:ce:61:1e:2f:ac:51:46:33:30:26:
8e:5d:58:c8:94:dc:20:93:5c:b2:b9:51:20:a6:97:
ff:4c:ce:eb:73:2a:08:98:cc:78:65:be:18:0c:3a:
98:07:8e:60:65:c9:7a:1d:02:a6:40:71:16:e0:42:
8b:ba:6a:da:8a:f1:ee:3c:3e:77:24:bc:fa:b3:b8:
53:06:c2:3a:a7:35:0b:a4:84:f7:87:b3:65:b9:40:
06:91:dd:8e:28:b6:c2:84:3b:66:a8:de:3a:6d:5c:
8e:4b:d0:e6:c3:66:86:b3:d5:eb:ef:b3:31:4b:c8:
24:6d:85:02:a5:db:5c:1e:16:a0:9f:0e:7f:b1:cc:
24:22:8d:70:10:00:d2:d7:35:24:f4:aa:3d:f7:5b:
ba:42:de:dd:2b:b4:e8:95:8c:2a:59:a3:66:6c:97:
87:2c:e8:4b:fe:bb:97:7b:f6:e0:8a:6f:5f:cf:31:
be:9b:ce:8b:12:7e:19:fd:fe:21:d8:4d:7c:b4:c6:
1c:bd:d2:fc:a0:bb:08:e0:41:30:63:ca:e4:bd:19:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5A:C5:2C:80:3D:FD:69:4D:BB:DC:F9:DB:CD:EA:2D:30:AC:CB:CC
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:27:51:3f:93:5b:7f:42:96:3a:1a:a6:9d:e1:61:1f:0a:c0:
bc:f1:a2:a3:fe:ea:05:60:44:b6:6a:d4:c9:e7:63:3c:a4:32:
8f:8b:7e:3a:06:e1:e7:f2:e4:9d:85:2e:6b:d8:40:f6:64:c0:
02:a6:51:43:4d:25:6f:b1:55:fa:51:11:79:af:fc:b3:90:22:
1d:63:3b:54:93:31:08:8d:5b:b0:cf:90:15:3f:83:08:45:d0:
42:5b:34:88:fa:5e:58:af:bf:46:58:f6:75:3e:ba:35:d2:fe:
c1:7d:6f:00:87:c0:65:85:80:74:65:a5:f6:14:7e:a6:65:3d:
cc:4d:f0:f4:d1:6c:d8:59:16:69:85:9b:f3:79:a7:87:d5:a4:
cc:2f:73:3c:9f:b2:01:de:8d:25:7c:10:04:83:da:c4:51:36:
43:f1:f3:e1:ac:2d:59:c3:90:92:a7:c7:af:a4:10:3a:32:ed:
d3:94:be:f5:1f:80:33:89:e1:69:40:5b:42:18:22:99:44:84:
04:e4:8a:82:37:6c:95:c1:da:9c:26:6e:77:a9:48:03:86:55:
89:44:0c:eb:64:33:47:5a:bc:0c:c9:6c:72:07:58:ae:6c:93:
8a:a3:6c:f0:9c:af:ab:c7:f1:aa:86:4a:08:2b:f8:0b:a7:4c:
70:67:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:20:13 2025 by rpki-client