Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: oLzU1twiSqpiI2KTF0Yiz6XtgZSqzGI/sgI5UrE/PRY=
Subject key identifier: 4E:A9:4A:47:9E:BE:0F:14:DE:1C:CF:D9:89:66:3A:08:6D:FB:B5:D7
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019923A054D79774ACEBC820465A7237873F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 1602
Signing time: Sun 07 Sep 2025 10:02:13 +0000
Manifest this update: Sun 07 Sep 2025 10:02:13 +0000
Manifest next update: Mon 08 Sep 2025 10:02:13 +0000
Files and hashes: 1: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: XpXsvD68TKTkGWwDWUiKqvKOCuXzWzs55V2f02KGlIs=)
2: _ryT7JJRyl2zbDlcHLiieOVaWDE.roa (hash: aYopHcEKoiKmgUw0u7ZqiunqjMA1+tPcCa/wAYiX86g=)
3: cmxdqS626N731JSDXMkhCrtA4_Q.roa (hash: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:54:d7:97:74:ac:eb:c8:20:46:5a:72:37:87:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Sep 7 10:02:13 2025 GMT
Not After : Sep 8 10:02:13 2025 GMT
Subject: CN=4ea94a479ebe0f14de1ccfd989663a086dfbb5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:ba:d4:e8:0a:22:13:67:a9:f6:46:f3:66:
fd:ff:1e:40:29:d2:5c:92:0c:92:92:d7:3d:a9:6e:
33:2f:d1:23:c0:15:35:c7:58:6b:42:dd:4f:52:27:
5d:6e:ea:bc:5a:af:90:8d:3c:7c:34:b0:6e:c4:92:
eb:32:64:55:bf:e2:13:0a:ab:80:a3:34:c2:5e:bb:
b8:4b:cb:d9:49:67:29:34:9a:9d:df:c9:27:00:8b:
96:73:b8:b9:8c:8f:71:df:e9:88:6c:26:2f:ae:da:
90:74:99:77:27:81:e3:0a:bc:39:cb:bd:da:e3:e0:
e7:d9:0e:e6:5b:62:a1:cc:83:53:0b:65:18:9b:3d:
5e:69:84:e0:28:b4:77:b0:ea:50:8d:33:ca:cd:6d:
f2:fb:29:83:05:e1:77:fb:65:44:e0:5c:36:3d:58:
d7:a5:af:c7:cc:b6:68:2a:2e:40:d7:25:b8:64:a3:
04:68:0f:44:ac:09:66:8c:42:9f:bc:30:da:9d:80:
6b:3c:2c:f6:5d:20:f1:9c:9d:2a:16:4a:58:23:b0:
f3:df:f2:c7:a9:4d:16:b5:d5:ea:5d:b7:da:5a:05:
09:f3:4e:01:4f:03:1e:5f:f0:0b:2f:f7:a3:9c:fb:
13:b9:c6:07:ba:1e:09:b0:06:d9:b9:54:ab:30:d5:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A9:4A:47:9E:BE:0F:14:DE:1C:CF:D9:89:66:3A:08:6D:FB:B5:D7
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:74:f5:28:45:fc:13:a8:63:d9:84:be:65:13:a4:86:b9:2e:
43:50:b7:89:1e:6a:bb:8d:db:e5:94:58:7c:0c:7c:0d:48:1a:
73:b2:6c:5f:92:70:54:e9:8b:87:c5:99:62:16:24:c2:f2:68:
00:3b:d8:81:84:b0:9b:4f:71:35:3a:cb:cf:36:0a:f6:73:88:
e3:43:81:1d:5d:84:7b:b4:2a:d9:30:30:8b:44:09:a3:3b:5a:
57:f7:01:c6:5a:7b:81:88:07:f5:07:76:99:b8:30:30:ad:f5:
8a:7d:9b:18:d9:e0:a8:bc:33:0c:95:76:62:43:20:30:50:77:
fe:ec:e2:0d:2e:6f:28:74:c3:54:8f:fa:69:6d:0e:9d:de:09:
69:ff:53:3d:ae:d6:75:d6:92:e9:29:f7:7f:bc:d0:cc:fb:7d:
8a:e0:11:f6:60:2f:35:83:0e:b7:70:7e:97:ed:fb:b3:15:01:
f0:68:b2:9f:fa:c0:66:d4:35:24:06:ed:4f:00:19:7d:e0:09:
92:49:dc:53:58:d1:62:ad:49:01:3c:14:95:09:a1:43:dd:70:
f2:43:5d:7f:aa:9b:c5:c6:3d:de:b8:a6:70:c5:34:d6:f5:51:
41:c4:04:33:7d:7f:08:05:b8:f5:34:f2:8e:24:8a:ea:8f:92:
7d:59:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:53 2025 by rpki-client