Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: uR+WGz8zNwROFcIRxchMAiKkRAd5+TTkPnTZm/3m6TY=
Subject key identifier: 2E:2C:DB:39:77:0C:84:EB:CB:E8:74:95:62:DE:37:AB:DF:94:A7:A7
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 01991808F0323A1CAFFA5161A75BFA525E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 04:01:02 +0000
Manifest this update: Fri 05 Sep 2025 04:01:02 +0000
Manifest next update: Sat 06 Sep 2025 04:01:02 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: c5ZJ6CWf/EF3ZkgFmNh9OHwgBwM3whEfyOJ72db8LsU=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:f0:32:3a:1c:af:fa:51:61:a7:5b:fa:52:5e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Sep 5 04:01:02 2025 GMT
Not After : Sep 6 04:01:02 2025 GMT
Subject: CN=2e2cdb39770c84ebcbe8749562de37abdf94a7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:5c:68:37:bc:cb:b0:fb:03:15:9e:b8:ce:
0f:64:e5:8f:dc:37:93:97:ed:85:a2:2a:ac:2f:94:
6d:81:22:88:22:0f:43:2d:fb:52:b7:c1:af:75:8a:
9b:84:5f:1a:95:e8:5a:23:87:2b:ce:c4:3f:17:47:
ca:ad:c1:dd:7f:f5:87:e6:c1:94:1c:17:b9:a1:2d:
ff:bd:27:4c:d2:4a:f9:4b:a9:f1:a0:9e:bb:64:b4:
97:75:74:1c:c8:02:e5:a1:a9:9e:c6:3e:11:6d:ad:
e2:ef:f3:7c:8c:5d:f6:f5:db:2d:6e:a0:43:c0:37:
18:21:49:2b:67:bf:b8:47:a3:9b:1b:1f:1f:21:ea:
ae:46:10:f0:fc:6a:c7:34:4e:3e:35:8f:15:d3:2e:
6e:3c:f1:83:77:21:d0:aa:2f:cc:c3:78:f5:da:62:
3a:82:f8:e4:8f:80:84:03:c8:4c:55:57:5b:31:cc:
32:cc:2e:73:37:88:a3:08:fe:a7:44:eb:9f:c0:33:
1c:23:09:0b:86:ea:37:de:98:dd:a5:ec:b6:cd:cb:
10:de:a6:6b:8b:ac:bb:22:fd:02:54:b4:49:d8:67:
d1:bf:56:b0:d1:32:1d:dc:46:9d:54:19:67:a6:c9:
41:3e:04:e6:3e:a3:a7:55:26:51:0d:7e:90:f5:ac:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2C:DB:39:77:0C:84:EB:CB:E8:74:95:62:DE:37:AB:DF:94:A7:A7
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:37:ff:8f:c7:d3:eb:ea:21:af:f7:08:d2:f6:3a:e1:3a:3d:
05:b0:56:73:ed:e1:fb:2e:24:b7:f5:b5:07:1c:ef:3e:6c:3a:
2e:52:10:b7:d6:da:51:cb:f2:32:1b:1e:1a:5b:74:89:e0:d0:
c2:9b:c1:49:79:af:37:e1:17:f0:eb:2e:55:d0:98:0a:57:6d:
66:38:96:90:65:97:04:fe:1c:fe:fe:7e:c1:c0:87:ff:61:1a:
81:c3:89:e3:7b:b9:cb:56:dc:29:75:e3:22:db:8b:6b:26:90:
98:10:16:47:c5:0e:7f:5b:9b:67:9e:86:81:fb:af:8c:82:05:
f9:6a:48:d5:9f:55:9c:a4:f9:41:21:13:a0:b8:0a:17:76:d2:
dd:f6:4b:b8:91:c1:07:17:d0:74:90:55:c5:49:ae:79:51:f5:
02:19:99:17:30:44:b7:98:eb:74:9c:fc:5d:f7:ca:c3:4b:60:
df:a0:f3:22:c0:da:e2:e4:38:b9:76:52:10:f0:1a:81:ff:4a:
9e:05:d6:b3:3a:cf:ee:e6:40:ee:11:3d:64:ba:16:35:de:34:
00:81:7f:c1:22:a2:38:da:3f:7f:4e:29:f9:e8:6c:30:51:49:
65:66:5e:58:96:7a:c0:77:8f:b1:70:23:24:cb:1e:79:54:8e:
63:5d:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:30 2025 by rpki-client