Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: cet/wPXaADCkdDthuh/9PAG/Z5nDGZFOcvM2fHZIPPY=
Subject key identifier: CD:A4:D3:CB:78:F7:10:2E:46:5F:54:E5:FF:34:0F:F3:24:0C:52:47
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 0199349248197452234CE9335D12EE3D8D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 06D7
Signing time: Wed 10 Sep 2025 17:00:25 +0000
Manifest this update: Wed 10 Sep 2025 17:00:25 +0000
Manifest next update: Thu 11 Sep 2025 17:00:25 +0000
Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: u3uOpFJHuTr5FgIE42G2KEouOCZlv0mvZe2ClbEbLjg=)
2: GCjWN1dfacWVs6-dNAwUIB0pPtc.roa (hash: +OOo5n41q6UluB+BR+drcDaI3qsRIhz7e++vaPZKGtk=)
3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
5: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
6: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
7: uMrc6Goc6EcB4BYik3tS4FAFhEU.roa (hash: XOKT7o47MThPABfgFTBszgq+QbxIg28i2iizclcbpXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:48:19:74:52:23:4c:e9:33:5d:12:ee:3d:8d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Sep 10 17:00:25 2025 GMT
Not After : Sep 11 17:00:25 2025 GMT
Subject: CN=cda4d3cb78f7102e465f54e5ff340ff3240c5247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:b7:88:98:63:cd:9e:f3:16:7e:0f:fa:5f:
c5:88:eb:f3:04:c8:05:2c:82:b4:45:d1:5e:ce:e1:
7e:e9:98:94:9d:d6:6c:3c:c0:7c:1a:13:44:c2:d2:
ca:a9:94:bc:ae:0f:ba:81:8d:6a:0c:d8:8f:b1:4a:
d9:69:6f:b3:6c:f4:3a:b8:7e:98:7c:2f:01:ed:65:
51:46:b6:7b:16:43:8a:be:7e:07:c9:1f:41:bd:2b:
12:6c:bb:a9:b6:c3:71:a5:b8:9b:ca:42:71:a8:c2:
d7:47:31:f9:78:af:cd:03:58:61:12:02:9f:85:31:
31:e5:bb:fd:39:2a:57:88:62:6c:65:06:91:d1:aa:
2f:7e:3d:6b:b8:eb:f9:bd:1d:cf:34:5b:eb:48:9f:
a1:e9:14:eb:3b:df:b3:82:5b:b4:91:33:03:79:7a:
f7:0a:e8:68:a2:98:f6:58:ce:82:26:d5:79:b8:7e:
21:1a:be:a3:21:18:67:fc:5e:50:99:dc:f8:43:a3:
9d:51:03:47:2b:27:b0:1e:23:9b:1d:c7:b1:e7:44:
32:7a:85:12:10:88:ec:16:96:01:d1:72:e3:f5:16:
25:a2:af:3c:00:c7:a3:00:80:cb:9d:a3:94:f2:45:
3f:c3:da:b5:7e:bb:90:0a:ef:f7:a8:64:db:a1:cb:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A4:D3:CB:78:F7:10:2E:46:5F:54:E5:FF:34:0F:F3:24:0C:52:47
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:37:34:74:77:cf:a1:e1:74:5a:f7:76:93:60:b3:8b:6c:48:
d8:9b:f3:14:53:cc:94:41:d6:90:8b:6e:c7:5f:e1:3b:45:06:
cc:b3:17:b0:63:13:38:c1:98:01:68:6a:cb:6b:08:0d:9f:93:
3f:66:50:f3:74:c2:11:b1:f9:96:60:eb:f5:1c:ce:1e:04:59:
64:bd:2a:8a:c2:11:65:8e:85:81:db:b2:cb:9b:f1:e6:80:5f:
42:6e:6e:82:7b:83:c2:27:d7:71:e0:69:f8:6d:c4:0e:58:a3:
8e:62:7c:90:14:94:2c:38:f8:21:f2:e7:de:07:5d:03:14:28:
c9:b3:a9:e0:4c:67:4c:7f:94:10:95:a2:9b:a0:f4:78:16:b3:
56:12:52:7c:3d:5e:1a:86:ae:ba:df:bf:4f:f9:38:07:c3:de:
72:07:83:8b:fb:44:60:5c:73:a9:9a:5f:33:2d:f2:23:95:fa:
4a:85:22:6a:13:7f:2a:25:bc:c3:6c:0b:b6:dc:00:02:27:06:
d4:b5:40:3f:f9:9d:60:93:99:fc:10:e5:cf:a5:a1:31:dc:7d:
86:e4:19:59:34:6e:ba:09:ad:19:3a:41:98:3c:48:3d:80:b8:
68:6e:dc:48:e4:64:4b:6c:68:e0:e5:2a:1b:ef:b8:28:12:81:
0f:03:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:36:31 2025 by rpki-client