Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: F2PesFv6kzOHs+SKMArHQzjrG8rrEzfcR1t8omQJJ3Y=
Subject key identifier: 5A:FA:76:B2:94:C9:D3:9F:FD:32:90:F0:48:30:23:8F:1D:A9:BE:A5
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 0199239EC44B80F37F00573C51B217E701DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 1684
Signing time: Sun 07 Sep 2025 10:00:31 +0000
Manifest this update: Sun 07 Sep 2025 10:00:31 +0000
Manifest next update: Mon 08 Sep 2025 10:00:31 +0000
Files and hashes: 1: 1tY0n_P9pCmxuMHMwVN4kuuE9Yw.roa (hash: OMoFTls8LA8ewzB3QD+33fEfQjFe6IrAty5YO50hD+U=)
2: 3qpur1zwBPkajyupQYlxerl-sX8.roa (hash: P/ij/bhS3D5UPNfyBQsnXDUHMAdZt5V8V+OvOjXddRE=)
3: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: INHMfufpPZkGQI1ywNx2DIgNYDLQ5ZHk1jGEmRTN8no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:c4:4b:80:f3:7f:00:57:3c:51:b2:17:e7:01:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Sep 7 10:00:31 2025 GMT
Not After : Sep 8 10:00:31 2025 GMT
Subject: CN=5afa76b294c9d39ffd3290f04830238f1da9bea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:31:7c:ac:ea:c8:12:37:e8:46:9a:59:37:
2d:6d:93:2a:6b:a1:1f:96:53:30:f1:09:7f:37:f4:
77:e5:45:7d:51:bc:79:ab:3f:e5:f2:65:63:03:aa:
4c:4d:dc:4c:4f:f2:5f:76:1b:92:23:e3:f9:4e:81:
1e:5b:d1:0b:79:49:bd:65:7b:10:2c:ac:b1:18:fb:
24:25:f1:65:a0:5c:55:91:0e:66:13:87:45:95:d3:
c5:e0:1c:72:87:c5:8b:b8:fd:b3:92:72:95:25:16:
92:dc:d6:09:ae:7b:72:a6:27:c9:4f:b8:02:a2:dc:
44:28:24:3a:05:8e:e6:85:6d:83:95:0c:0e:d1:b0:
b5:e5:0a:ea:25:42:06:e3:42:e5:62:a9:b2:5e:3b:
0d:dc:77:8a:cb:03:df:80:93:73:51:e8:d6:fa:6f:
07:76:12:b2:1d:be:d4:ea:75:eb:e7:f0:67:90:4e:
a7:7a:30:57:6f:5c:2e:05:af:c1:26:78:c4:53:5c:
6d:a5:01:23:26:6a:62:56:79:fc:3a:43:45:70:ae:
3c:9b:7f:2f:ef:e1:e1:4e:68:c3:b7:12:0a:80:ad:
fc:b7:71:f9:24:43:70:94:b9:7b:0d:74:63:41:8d:
7b:ef:e2:43:72:18:ad:51:80:ea:f6:92:eb:77:db:
63:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FA:76:B2:94:C9:D3:9F:FD:32:90:F0:48:30:23:8F:1D:A9:BE:A5
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:d7:ca:9f:ad:d2:d1:26:ec:e2:64:70:08:f5:a1:b6:ca:1c:
a3:00:56:e9:62:1b:79:93:da:a9:35:c8:c2:ef:c3:d3:f7:f1:
fc:cd:0e:79:44:1d:36:ab:8c:cb:15:d7:a3:82:a1:1f:55:23:
ef:97:9c:dc:e3:71:f1:f5:fe:18:3c:46:a2:8f:2e:d0:b6:8d:
e4:0c:b3:17:93:57:94:08:8a:2f:fb:86:80:d8:9c:bc:45:6d:
b4:4a:c0:43:4a:84:e8:bb:d1:cc:09:d1:94:a5:0d:69:4b:e2:
87:c3:6f:93:20:c8:71:62:25:c0:8d:89:45:46:0f:22:6b:68:
2a:92:43:99:17:dd:f1:a5:13:31:d7:f9:bc:b0:c6:b5:12:22:
61:84:d5:e2:dd:bd:40:a5:9f:80:6d:e9:e2:94:d4:b8:82:f9:
3a:55:b4:c1:8c:af:f8:fa:f0:01:e4:0a:d2:88:6b:18:34:f4:
c4:7d:a5:91:4d:b8:99:e8:a7:91:c3:8a:9b:2c:de:63:8a:82:
38:ad:61:af:f6:e5:aa:6c:52:87:8e:81:5e:ed:48:36:57:d4:
17:e0:25:85:3f:73:f6:e7:c8:7a:07:e2:65:cc:a9:32:85:af:
40:39:ff:c8:73:8b:44:7e:5c:f0:1e:4c:a4:01:62:c6:35:14:
db:7e:9d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:55 2025 by rpki-client