Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: 6LtzCLQc1d4jbDNR+Xd+909haadFKHSYYJYcqred3uo=
Subject key identifier: F4:69:36:C0:44:E2:D2:1B:20:4A:3D:50:F5:B6:91:D4:8C:36:1F:59
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 019922559231CB2CD2145F37564F69856DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 0EF7
Signing time: Sun 07 Sep 2025 04:00:57 +0000
Manifest this update: Sun 07 Sep 2025 04:00:57 +0000
Manifest next update: Mon 08 Sep 2025 04:00:57 +0000
Files and hashes: 1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: blJUpP7hHm1FegZ8cSv0AF8b/D8Ihbv3XTAZ6n0i1BY=)
2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:92:31:cb:2c:d2:14:5f:37:56:4f:69:85:6d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Sep 7 04:00:57 2025 GMT
Not After : Sep 8 04:00:57 2025 GMT
Subject: CN=f46936c044e2d21b204a3d50f5b691d48c361f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:27:a7:1a:a8:ce:f8:57:68:15:ba:05:36:
40:e8:bd:de:86:ff:eb:22:3b:e8:66:e3:7c:6d:08:
33:7b:a9:8b:a7:b8:b2:04:36:d2:7c:f1:6b:db:6d:
f8:fd:a9:a6:c6:88:6d:aa:60:4f:be:83:ca:2b:38:
35:eb:9b:42:dc:1d:92:58:3d:49:3e:ef:7d:60:10:
52:56:98:27:9a:49:45:37:40:c3:d7:62:41:ed:62:
ff:38:b1:4a:0e:28:73:52:be:58:c4:e4:97:b9:fe:
26:9c:1e:52:07:7a:37:fc:26:de:d1:d2:b0:1b:f7:
8e:de:f5:17:a1:93:7e:d2:b2:d3:f2:73:cb:15:9c:
d8:0f:4c:4b:b8:98:33:2b:15:fc:92:29:62:14:5b:
e2:87:c9:82:07:e5:d7:ab:87:45:10:01:71:e1:82:
da:34:9c:c9:ca:9d:11:d3:f5:16:35:1d:38:07:d7:
25:8b:80:99:65:97:4d:78:8d:9a:69:49:37:3f:8f:
03:03:a1:28:ef:b1:2b:f2:c0:c1:30:c1:db:89:32:
56:41:3c:1a:7e:e7:20:54:4c:60:a2:70:dd:ae:95:
14:07:a5:28:e6:e8:3e:24:b2:06:d4:f7:22:06:ee:
b4:55:b3:2c:61:7a:17:26:39:cc:e5:be:db:84:98:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:36:C0:44:E2:D2:1B:20:4A:3D:50:F5:B6:91:D4:8C:36:1F:59
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0b:2d:aa:0b:72:07:ec:30:b3:5b:0b:e7:c8:a0:99:b5:3c:
04:7f:cc:1b:97:e3:4a:e1:b0:d2:51:5b:9f:4a:bb:8d:2a:ef:
e1:39:48:42:ee:cb:74:f4:bd:c1:2d:23:30:df:f6:d5:6d:3b:
9a:cf:ef:5c:92:0f:aa:68:a0:c0:99:e0:b9:16:76:9d:bb:27:
1a:49:b1:a4:cd:f9:64:44:85:90:eb:19:9e:28:f4:97:d0:db:
db:ee:31:9b:d7:b9:03:a7:10:b6:b8:8b:55:0b:cb:62:40:27:
05:58:05:68:84:ca:3f:7b:dd:3e:e8:a7:71:5a:14:1b:77:46:
c3:22:fb:8a:95:82:f6:55:b9:a1:08:80:64:99:63:d1:6f:2d:
af:1a:8c:1a:32:b4:aa:46:36:67:64:c4:37:8c:5e:a3:48:ae:
4b:d6:f3:42:ca:2c:13:c8:e1:be:25:27:62:3d:df:a1:52:fd:
7d:0e:1b:85:f8:21:fe:a3:06:42:0d:47:17:0e:c1:d4:93:e0:
3a:bb:0c:0e:4a:82:7f:b3:e6:54:d2:17:a2:59:61:c2:38:14:
8f:85:9a:c4:78:ff:82:c1:82:80:7b:99:40:47:87:5a:79:64:
f8:27:d3:cb:58:a8:ae:2f:4f:7d:33:4b:8c:27:64:93:23:d7:
08:0e:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:01 2025 by rpki-client