Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: u3RmxlZFfuXpZ+WJXQVyTz4K5FFsZoHFLislBAgh6iY=
Subject key identifier: B4:2C:77:50:A4:CC:D5:F4:23:01:8A:3F:6F:F7:CD:CA:29:1D:ED:82
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 0199337FCF10BF8F251BC5B4BC7918EFDB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 0B28
Signing time: Wed 10 Sep 2025 12:00:38 +0000
Manifest this update: Wed 10 Sep 2025 12:00:38 +0000
Manifest next update: Thu 11 Sep 2025 12:00:38 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: KAuhqe/HxdraJa03G/v8KpeL/YhT1IAZSeDiE5hPimc=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:7f:cf:10:bf:8f:25:1b:c5:b4:bc:79:18:ef:db:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Sep 10 12:00:38 2025 GMT
Not After : Sep 11 12:00:38 2025 GMT
Subject: CN=b42c7750a4ccd5f423018a3f6ff7cdca291ded82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:15:1b:89:bd:c9:52:bd:b7:00:81:08:eb:
71:84:ae:8d:cd:1f:3b:c5:6d:68:e6:6e:c6:0e:ae:
75:90:72:c0:99:60:92:47:aa:1d:e5:14:5d:1c:1d:
df:31:d9:61:80:51:76:c5:5b:ad:e1:dc:66:87:15:
1c:db:14:49:f1:a0:d4:eb:0e:dc:e8:34:23:c6:32:
10:2c:f5:f7:00:e6:44:a0:c4:5f:46:f7:6f:7e:d5:
5d:f1:fd:79:db:f0:b5:40:60:20:c0:31:da:90:04:
43:15:f5:df:58:16:7c:ef:b3:1b:ad:28:bb:86:bb:
83:26:09:9f:88:af:a8:5c:0e:06:03:e0:b5:5c:e3:
3e:c2:77:3a:5c:7b:a7:02:69:f8:fe:09:53:25:5d:
06:92:03:80:a0:85:84:e9:e8:72:4a:da:37:05:6b:
47:42:0d:54:02:04:b4:80:47:8b:19:08:df:af:2a:
3b:32:6e:67:55:49:d2:54:be:d1:0e:d0:14:9b:80:
84:e0:46:2e:fc:1f:06:cd:14:28:17:ae:b3:7e:d7:
40:2d:fa:54:79:aa:43:10:f9:bc:33:8e:5d:f0:90:
89:d2:ed:5c:93:7d:42:1d:35:3e:e7:98:fb:fb:0e:
74:e5:c7:05:b4:c2:fe:d6:b5:e1:23:e3:33:2a:ab:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2C:77:50:A4:CC:D5:F4:23:01:8A:3F:6F:F7:CD:CA:29:1D:ED:82
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:69:9d:75:ef:03:d0:8b:3d:81:e4:32:04:54:87:06:b9:65:
1e:2f:6f:d7:de:76:28:a8:6b:52:e2:87:87:93:6c:8e:0c:5b:
1a:cb:bb:d7:1f:60:24:1f:9b:d8:54:44:b6:1f:6d:bd:6a:2f:
39:1b:3d:28:63:12:34:a8:b3:75:9f:ea:68:01:d4:43:0b:68:
45:ec:34:cb:7b:7b:12:90:30:e2:0e:84:6b:33:18:74:03:9f:
19:01:6a:82:8d:73:09:03:cc:78:82:cb:5f:40:b0:b4:1d:cd:
e0:c3:a2:c8:dd:67:c6:7e:6a:0e:33:0a:72:b5:40:5c:14:08:
c3:04:84:73:34:c5:7c:c6:18:bd:2a:a8:9d:fb:c2:e3:9e:94:
45:f3:7f:f3:08:95:7c:d1:f5:1d:cd:e1:36:9a:de:12:a5:5d:
e1:e0:34:02:96:0d:e7:f8:d0:e8:5b:00:03:4c:35:a9:f5:98:
15:77:2a:b2:44:74:f7:43:88:d4:b7:c6:d4:11:0a:ec:72:6e:
d7:c0:fb:ee:c9:0c:7a:ec:27:b5:ec:7a:cc:56:cf:3e:41:f7:
4e:24:64:c1:ea:18:e9:9f:55:68:06:99:f0:dd:d1:82:ea:10:
40:16:c4:f3:4e:51:7b:30:c6:55:dd:d1:1e:15:8e:91:52:d0:
3c:a5:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:25:37 2025 by rpki-client