Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File: FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier: vxmkYpP3uXNHdmzsvIAFOdZKTBmAE8VlDzeLNN0XktQ=
Subject key identifier: A8:94:F6:9A:04:6E:77:4C:73:44:6B:90:C1:EA:CD:6D:2B:1C:63:BE
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer: /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial: 019923317B7B6BB81AD0F0BEDE86188B9C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number: 0AEF
Signing time: Sun 07 Sep 2025 08:01:09 +0000
Manifest this update: Sun 07 Sep 2025 08:01:09 +0000
Manifest next update: Mon 08 Sep 2025 08:01:09 +0000
Files and hashes: 1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: 7EJ4K7juG0+AwUgJ36rsOn3SN4B890Qlsu8COcioQMc=)
2: QNhj8szxUJQB2UJkTSFbnKRcj2U.roa (hash: G9tQdAu6v2DV1kcxNZeTfgXQ9D3NQf3F0+ROvxbmmRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:7b:7b:6b:b8:1a:d0:f0:be:de:86:18:8b:9c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Validity
Not Before: Sep 7 08:01:09 2025 GMT
Not After : Sep 8 08:01:09 2025 GMT
Subject: CN=a894f69a046e774c73446b90c1eacd6d2b1c63be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:c1:41:06:9f:4a:2c:3c:5c:f0:68:66:00:
16:47:f6:d3:2a:8b:3d:8e:c9:15:ac:c1:ef:7d:dd:
86:72:8e:76:18:86:8d:9e:ce:d7:56:15:b8:c1:fa:
24:c3:3d:6a:b9:e8:00:b5:e6:51:75:45:23:c2:8a:
70:65:d0:2c:15:4f:c1:61:2b:19:ab:87:69:ff:28:
c5:ff:15:d4:ed:1a:e9:7c:e9:0e:28:37:a1:7a:3a:
8e:16:d2:ba:d6:d5:cf:c5:fa:2a:06:ef:c8:f2:97:
61:94:df:45:69:df:08:84:e9:d5:28:13:07:aa:f6:
5e:78:aa:f6:fc:9b:8c:12:22:a6:ba:cb:30:67:24:
1e:ad:95:5b:f0:6f:9e:69:92:4e:79:19:05:d7:fb:
72:14:1b:d0:c5:ef:b2:b2:99:40:bb:6f:69:cb:74:
e2:52:1a:b6:ae:d5:f2:0c:0e:da:4b:e7:9b:56:10:
42:75:ab:26:18:2b:00:bd:ee:0e:ef:b1:c5:26:b3:
5f:cf:f1:9a:bb:7f:3e:7b:d6:e5:25:34:d1:e4:2d:
6d:b1:2c:e8:1a:09:c2:73:32:d8:64:5e:d8:8b:21:
98:53:f3:2c:66:fc:5e:89:d5:49:ad:5a:ca:c0:fa:
82:6c:5b:14:f1:6d:37:24:57:83:70:d3:ef:c3:e7:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:94:F6:9A:04:6E:77:4C:73:44:6B:90:C1:EA:CD:6D:2B:1C:63:BE
X509v3 Authority Key Identifier:
keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:0d:54:94:41:9c:d6:7f:a7:9e:da:23:00:52:4d:15:e5:
72:68:87:41:94:2e:93:d3:81:76:31:02:54:07:a6:b8:50:8d:
7b:ce:c8:1c:5e:f1:9e:e1:ae:4b:65:14:f7:3f:85:d7:c8:b5:
8d:a8:22:89:eb:2d:4a:c7:e7:c6:6a:0f:37:38:d2:93:a9:ca:
54:55:3a:5f:7a:8a:f9:24:a8:1e:8f:dd:56:25:59:a2:b2:45:
62:54:b2:bb:6f:54:ce:b3:8a:b8:8f:a4:d3:2b:af:6a:ad:1e:
da:8e:93:a5:a5:51:4a:f0:c2:63:65:ce:19:e5:2a:9b:d1:05:
3b:9a:58:50:d0:e2:d0:27:7b:8d:32:38:39:7d:41:3c:a2:4e:
36:32:b2:75:cb:1e:d2:b3:e7:51:c7:d8:06:a4:5f:8e:69:55:
25:36:63:88:2a:fb:c7:d8:c1:a1:6f:7b:84:42:29:75:c3:9c:
57:2d:6e:01:41:9a:02:9d:38:9c:cb:93:2c:af:c5:d5:20:30:
09:56:84:70:e5:b4:61:59:a7:96:aa:a4:9e:43:59:01:f2:5b:
69:28:44:7b:46:a5:77:bb:37:6a:a0:df:ce:1f:ae:15:1c:32:
79:07:6b:39:d7:c9:c0:f4:4b:65:63:26:d7:a3:5e:a4:b1:37:
c0:60:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:21 2025 by rpki-client