
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
File: FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json)
Hash identifier: RGO7kRn061OJJlg6ZsPakj2B2f3/Z/nwzIKpJPQhc0Q=
Subject key identifier: A0:3C:9D:83:F4:59:01:3D:BF:DA:F5:CE:74:B6:6D:45:21:BC:6E:58
Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
Certificate issuer: /CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Certificate serial: 019923A0A55D5CCCFD779DA532684E4ABE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
Manifest number: 0143
Signing time: Sun 07 Sep 2025 10:02:34 +0000
Manifest this update: Sun 07 Sep 2025 10:02:34 +0000
Manifest next update: Mon 08 Sep 2025 10:02:34 +0000
Files and hashes: 1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: DWN+Cn3Ht3mO1OsEqbfaGbMEiKfvm2kVsu8IFUqJwwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:a5:5d:5c:cc:fd:77:9d:a5:32:68:4e:4a:be:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Validity
Not Before: Sep 7 10:02:34 2025 GMT
Not After : Sep 8 10:02:34 2025 GMT
Subject: CN=a03c9d83f459013dbfdaf5ce74b66d4521bc6e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:b9:c4:ee:84:11:4d:b0:36:9c:35:76:ca:
a2:3c:6d:c1:50:5f:ae:a0:4a:ba:53:8c:88:6a:29:
1f:bf:d2:69:db:f1:c9:d8:c3:4f:c9:44:4e:06:83:
44:25:99:03:01:f1:81:9f:45:0e:5f:81:e3:0a:59:
f2:2d:29:f6:c6:55:64:ac:9e:bc:a9:94:ef:dd:01:
aa:e7:d3:3c:d8:eb:1c:26:8f:77:c6:59:af:38:ff:
bb:39:f1:cc:c4:46:69:83:be:d5:e6:4a:35:7f:ec:
f9:14:96:cc:03:8c:d8:fe:b0:05:14:ad:79:51:60:
10:34:ea:ff:43:22:71:d9:77:fd:0f:e2:60:47:59:
0e:eb:4a:89:70:65:a6:0c:47:22:ea:e4:06:77:72:
2c:c9:24:f4:a5:78:fb:49:37:dd:0d:e7:d5:47:2a:
d2:70:9e:06:f9:45:d0:a9:a1:48:4b:0c:aa:f6:86:
f9:dc:72:9d:79:6f:b4:1e:4d:0b:8e:78:11:9b:ac:
0b:2c:9e:30:14:da:17:3a:e0:26:15:5c:11:02:ca:
d1:4d:86:01:05:4f:df:16:0e:3e:de:28:99:42:37:
c0:fb:71:72:af:12:96:7e:37:64:cd:66:73:27:5e:
ba:0e:3e:31:95:a7:f6:0a:fe:5d:65:32:d8:4f:87:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3C:9D:83:F4:59:01:3D:BF:DA:F5:CE:74:B6:6D:45:21:BC:6E:58
X509v3 Authority Key Identifier:
keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:96:d1:e2:a8:61:da:66:0e:f4:0a:0d:7e:3b:b0:a7:63:42:
1e:2b:b6:8e:5e:83:fa:6d:09:4c:75:e6:9a:fd:e5:94:43:9b:
43:ba:95:10:b8:48:c4:5d:2e:c4:87:9b:b5:c6:75:3e:a5:ae:
df:a5:8e:39:eb:e5:8a:9e:cb:5a:89:7c:06:cb:81:fa:76:92:
42:43:69:39:8c:0c:f2:37:0f:92:39:c1:d8:6f:43:b9:35:ea:
8f:1c:9f:54:cf:74:8b:87:01:b4:fd:d6:aa:58:8d:ae:d8:f1:
fc:6f:95:3d:29:90:06:bf:14:20:7c:84:81:fb:61:79:41:17:
41:72:51:54:3a:d2:fe:71:7f:db:5e:48:1c:8f:ed:a2:bb:b3:
24:e8:c6:d8:c6:b5:33:5f:1f:9e:fb:f1:7f:d1:29:b2:64:1a:
19:40:8c:ab:28:9c:13:a9:44:df:ec:e6:4b:d7:d7:06:33:de:
da:ac:56:b6:65:54:65:5a:03:bf:f2:ce:76:bb:42:09:68:94:
c8:af:b5:12:32:d5:90:ac:c5:b3:f8:3f:99:06:1e:31:3f:be:
56:6a:da:f1:cc:54:5d:04:fc:94:f9:e7:4e:78:dd:68:03:8b:
d4:20:99:42:95:74:31:f5:73:81:86:78:31:e2:b2:98:a3:d5:
03:60:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:00 2025 by rpki-client