Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier: 9E+UetIZcdzb5IXPBTvXVYGH9ebMh41LmCUcIsF6Icw=
Subject key identifier: F6:DF:86:01:C0:7F:82:21:46:EE:1C:47:F9:8D:B4:E8:1F:4F:24:F7
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 01992D48D3BFF3D8EB36AAF21E4AB6E0C170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number: 0BD8
Signing time: Tue 09 Sep 2025 07:02:51 +0000
Manifest this update: Tue 09 Sep 2025 07:02:51 +0000
Manifest next update: Wed 10 Sep 2025 07:02:51 +0000
Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: 6Es+/wEGb5Qh4n3Gtjv39zm1Sq0aueMASmkZPeDxH60=)
2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:48:d3:bf:f3:d8:eb:36:aa:f2:1e:4a:b6:e0:c1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Sep 9 07:02:51 2025 GMT
Not After : Sep 10 07:02:51 2025 GMT
Subject: CN=f6df8601c07f822146ee1c47f98db4e81f4f24f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:60:78:0a:ff:20:49:47:6e:53:cc:47:41:
de:cf:6e:60:b9:34:66:fd:10:6d:50:db:1e:4e:2e:
af:5c:33:ec:0e:35:bd:da:b2:84:c3:ac:21:14:e3:
cd:d8:12:a9:0a:3a:85:b8:cc:34:fb:b1:06:eb:b6:
97:2a:61:d0:bf:e8:55:cc:81:90:cc:92:86:d4:97:
a0:4c:17:60:a0:9c:a4:e6:1c:89:f9:2a:fa:cc:3e:
12:83:c5:ac:cc:67:62:0e:c8:98:fc:d5:12:0e:7e:
9a:9f:2d:3d:10:45:cd:b3:ff:d7:d9:e3:21:9b:4a:
a9:a8:b7:53:17:73:47:97:d8:7d:cb:6e:af:75:7f:
84:cb:69:ed:8a:f5:cc:5f:f9:b2:fd:ef:e0:8b:6d:
55:9a:3e:05:23:c4:2f:ac:45:a9:9a:48:49:17:94:
81:1a:cb:b3:2d:0f:49:d8:f2:33:ec:30:45:c3:61:
41:4e:6f:92:d9:9a:94:b9:6f:87:fc:f2:b4:68:59:
d4:2f:63:16:a4:ed:bb:b4:f8:70:f6:7a:9d:b8:a9:
bc:50:0c:d1:9f:e1:46:f5:b3:f3:63:a0:ec:93:a1:
d6:85:c3:4f:4e:90:dd:71:3d:8b:e8:f8:ed:9e:ee:
c6:93:96:c7:68:ac:49:7a:77:48:ae:f4:c5:78:23:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:86:01:C0:7F:82:21:46:EE:1C:47:F9:8D:B4:E8:1F:4F:24:F7
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:d9:0e:64:01:50:47:46:45:a6:1e:df:e5:f3:32:4a:34:
fd:c5:b6:55:1a:48:71:10:01:01:b9:e9:70:c0:b2:71:f0:c1:
19:f9:4a:d7:d6:97:f9:53:2a:49:7c:a7:5a:d9:b3:e6:88:7e:
60:a6:1c:1b:2d:cf:c3:6f:93:6b:7f:fa:2f:3e:f1:7b:26:05:
c3:a0:d3:53:4e:45:5b:04:8b:d2:7a:e9:8e:3a:c3:6f:ac:88:
50:22:84:79:f8:fd:f5:38:d6:db:f9:da:29:34:1a:ab:78:a4:
44:f5:d1:ac:af:94:03:10:0b:24:ef:a4:d9:54:62:8c:a8:08:
58:34:f2:2c:56:c6:6e:c3:d8:eb:7a:35:68:26:e8:68:69:16:
04:c1:73:fb:e5:0b:d3:67:7e:73:b0:f6:e0:90:c9:73:a8:c6:
ca:c9:02:19:e8:84:db:12:dd:09:73:3f:e2:2b:3a:a7:16:6d:
ab:6a:70:3a:f1:84:40:52:e1:61:bb:a0:d1:90:40:a8:1e:1f:
b7:78:c9:c3:c9:24:a0:5e:4f:d2:3f:0d:15:b0:af:95:b6:90:
1e:e9:f5:03:18:79:18:c6:0b:01:1a:06:f6:4c:a0:c2:14:95:
aa:08:ed:fe:8a:1b:61:6f:26:c7:d1:7c:ba:85:36:bd:9d:19:
5e:bf:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:26:18 2025 by rpki-client