Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: mAyG93FCPxOfc2ixoAU8pYank8kaEIFcLLEr7jAFcG0=
Subject key identifier: 21:33:13:DB:72:37:F9:1E:74:8D:9D:EA:A2:47:C0:9E:15:33:49:3B
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 019881D540F6987502341BF9AABFFCD691C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 07F7
Signing time: Thu 07 Aug 2025 00:01:33 +0000
Manifest this update: Thu 07 Aug 2025 00:01:33 +0000
Manifest next update: Fri 08 Aug 2025 00:01:33 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: iCRmD8DQCIZK99sVlcNdONZUlKKR174qV6cRwDMnbJI=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:40:f6:98:75:02:34:1b:f9:aa:bf:fc:d6:91:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Aug 7 00:01:33 2025 GMT
Not After : Aug 8 00:01:33 2025 GMT
Subject: CN=213313db7237f91e748d9deaa247c09e1533493b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:88:60:d0:94:50:2e:a6:c1:b1:1e:52:de:
72:69:07:4b:ce:20:86:c3:2f:16:4e:e3:43:52:87:
59:ee:ef:2e:35:73:82:fd:f5:73:da:60:e0:32:6b:
29:ad:2a:1d:91:7f:84:1b:27:fc:9e:d2:49:35:9f:
df:82:b6:7f:b9:be:16:31:ad:65:0a:ee:a0:dc:37:
38:c8:a7:f2:50:8a:fe:fa:a7:a6:f3:42:a9:72:bd:
50:81:b3:39:9e:b4:11:cd:65:2d:ae:c0:3c:47:96:
7f:73:ea:53:82:a6:ad:a9:fd:48:67:7b:64:47:7c:
47:3d:6e:4b:8d:53:d5:57:58:2d:3b:bb:58:7e:65:
25:18:86:4c:f2:e6:61:80:1f:74:e2:b4:a9:41:b3:
73:10:57:41:6f:5f:ba:5a:ee:19:75:bc:12:0d:48:
8e:01:ce:2d:63:df:b2:fb:59:53:cb:bd:a9:10:b6:
eb:c7:80:0d:5e:20:7b:37:32:f6:2f:9b:42:f9:ef:
9f:c2:64:df:68:ab:1a:85:f6:47:2c:c6:fc:ce:de:
45:a7:d1:68:bd:82:77:50:ac:e5:a6:9f:1d:4b:33:
dc:7b:9f:d8:df:ab:9d:2b:77:5a:9e:a1:f8:4a:33:
6f:5a:e3:52:a1:fa:97:55:b4:7d:2a:c9:7f:54:cd:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:13:DB:72:37:F9:1E:74:8D:9D:EA:A2:47:C0:9E:15:33:49:3B
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:78:14:a1:db:df:98:88:31:db:21:b8:90:d4:fb:76:e3:24:
98:81:f7:b7:e7:9a:f4:a2:00:75:a5:72:f6:ad:8e:dd:ce:ea:
ab:9e:5a:4b:dc:1d:3d:ff:1e:2c:4e:cd:dd:6e:9b:6a:23:1b:
73:fd:63:91:2b:3c:ef:bf:d6:64:7a:9b:7c:18:23:ca:c0:8a:
cc:b1:b0:84:2a:f3:93:fe:c6:72:0c:d3:9d:21:08:36:19:d9:
da:62:7f:54:43:8a:fb:22:dc:40:7a:18:42:5a:33:04:13:ff:
5f:b9:31:f9:e5:b4:31:6c:e1:49:b9:43:e2:7c:db:99:45:b5:
56:36:2e:d1:ae:65:09:fc:b0:2b:16:e5:a6:9a:fe:f4:e6:54:
e7:41:58:c1:5a:2f:85:6b:f6:3f:a5:c6:f7:06:86:3c:09:ff:
23:03:79:25:8d:1a:df:5a:0f:48:47:79:52:f3:31:fd:20:69:
58:a8:f8:b3:44:32:a4:0d:66:e7:52:b4:fa:20:c9:96:3b:f0:
84:67:40:61:03:50:b4:19:4f:2b:6f:38:f8:e4:a5:71:9f:67:
91:c3:bd:25:f7:72:6b:2d:d2:7d:01:71:aa:c8:14:ea:e4:2e:
3b:8a:3e:c4:19:89:d9:52:92:ab:87:6b:41:d8:41:6a:78:02:
8a:01:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:19:44 2025 by rpki-client