Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
File: frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft (raw, json)
Hash identifier: 8YAZAVE8RC1zedE4V5YYy9ZDw78myWKBbvy7SlGmc7k=
Subject key identifier: 22:4B:37:0C:26:99:D5:1B:F3:DB:B4:04:01:D9:97:A7:95:41:0F:07
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial: 0199228C6CC3A52773831AC2AF8A82219751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
Manifest number: 0A18
Signing time: Sun 07 Sep 2025 05:00:52 +0000
Manifest this update: Sun 07 Sep 2025 05:00:52 +0000
Manifest next update: Mon 08 Sep 2025 05:00:52 +0000
Files and hashes: 1: D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa (hash: iOwjeX+ly9me24ya3PbZf2MmDFD7bpYOFi09vEBVm6M=)
2: frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl (hash: E3nn9kE2UiTK4H5Ny88rdO4wA2a52xWTvH13jnpj/ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6c:c3:a5:27:73:83:1a:c2:af:8a:82:21:97:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Validity
Not Before: Sep 7 05:00:52 2025 GMT
Not After : Sep 8 05:00:52 2025 GMT
Subject: CN=224b370c2699d51bf3dbb40401d997a795410f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:65:e3:d8:6c:03:22:45:e2:69:c8:f0:e8:
88:b3:49:87:5c:94:a8:ec:ec:1b:5b:c3:52:26:51:
f5:5e:04:18:8d:0a:87:bd:95:6d:85:a3:7b:06:60:
17:14:f4:b5:73:f7:17:fb:ea:93:68:8b:75:de:a5:
11:67:c0:cc:89:48:6c:23:1c:b9:1a:2c:9a:59:9e:
3b:b5:e9:b9:3d:9a:73:32:90:bb:12:3d:85:8c:23:
ec:88:49:58:dd:03:75:52:08:36:8f:e1:ff:b8:2c:
f4:5a:19:73:fb:d4:54:ac:7b:bf:4a:45:dd:e4:8e:
62:6d:c9:96:43:1a:44:20:b2:95:69:f9:4a:29:99:
86:e4:76:0d:90:8d:26:35:9b:96:8a:ed:e5:f4:c5:
15:c8:66:e5:06:b4:b9:2b:07:c3:f9:68:13:1a:a9:
64:e6:50:c2:a3:07:77:4b:1a:6c:ba:ef:fe:d1:fb:
4d:93:64:d1:e6:6a:1f:7b:2a:bd:67:4f:65:9f:d7:
b0:4a:68:70:c3:6c:26:7d:d8:a6:d5:05:f4:3d:35:
32:9f:c4:cd:22:87:a1:10:39:ff:a5:9d:ba:fa:a2:
d0:72:82:f8:23:ce:2d:67:fb:d0:c1:5c:11:ad:42:
36:ae:93:9e:69:6e:e0:e4:16:23:fa:24:f2:19:19:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4B:37:0C:26:99:D5:1B:F3:DB:B4:04:01:D9:97:A7:95:41:0F:07
X509v3 Authority Key Identifier:
keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3c:66:8e:cb:61:7b:b7:ec:7b:0b:9b:0e:22:ce:d5:38:a5:
ff:37:ed:b9:14:5f:3a:60:cc:da:a0:a4:39:94:a5:2c:39:44:
04:50:cf:cc:bb:a4:06:69:aa:ab:0d:f7:28:33:90:1c:08:5f:
06:5a:5d:eb:78:6d:b3:2b:31:3f:3d:63:7c:53:19:21:34:44:
88:88:9d:47:ea:28:d9:ae:46:32:8b:92:f7:b4:ed:e4:36:ac:
5d:c0:72:78:3f:18:65:33:5c:da:97:b5:36:55:cb:5c:1f:81:
20:b8:83:94:e3:8f:bd:a5:cc:88:60:10:38:26:df:af:76:77:
85:06:ad:3e:92:49:a8:ba:30:62:3a:bd:0d:05:f2:44:75:a0:
34:6a:0e:0d:9b:95:08:01:82:ef:ff:6c:b7:44:ce:6a:06:ca:
8e:09:3f:2c:62:9c:77:14:6f:49:64:3b:34:77:38:f5:8b:f0:
2c:ee:ee:66:62:38:1e:a6:f6:b7:65:17:bb:29:3e:d7:dd:cf:
8a:2d:a2:98:eb:54:33:c4:79:22:02:98:d9:e8:1b:61:a8:2b:
13:93:14:60:10:7f:29:81:2e:51:83:23:ca:4e:0f:09:db:92:
80:92:6c:f2:ec:35:de:95:07:2e:de:64:04:d8:57:67:b1:c0:
76:11:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:14 2025 by rpki-client