
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: q05ImpUI5YHupo3jpO8ay24/AWiwGJFY+OEgy2g6juQ=
Subject key identifier: 4C:40:A5:41:06:AB:33:3A:07:76:87:C5:D3:77:74:4D:3A:61:E0:4A
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 01987418D2DC23EC03162F46B66BE0412EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 0EDC
Signing time: Mon 04 Aug 2025 08:00:40 +0000
Manifest this update: Mon 04 Aug 2025 08:00:40 +0000
Manifest next update: Tue 05 Aug 2025 08:00:40 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: yat+jz37sv0dXSz8jWKhH3ZGPPf2fKyvej+GETKTUGQ=)
2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:d2:dc:23:ec:03:16:2f:46:b6:6b:e0:41:2e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Aug 4 08:00:40 2025 GMT
Not After : Aug 5 08:00:40 2025 GMT
Subject: CN=4c40a54106ab333a077687c5d377744d3a61e04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:43:5b:1e:bf:06:c8:48:3c:1e:bd:e0:78:c8:
c3:19:87:4f:8f:16:97:33:52:59:2c:01:17:b7:13:
ce:65:f3:91:41:09:b8:d9:23:69:c6:79:da:be:27:
81:a0:cb:36:75:49:c3:98:28:52:12:60:1e:d4:c8:
bc:bc:b3:25:44:73:4d:73:d7:9c:26:34:ad:74:27:
5a:02:71:c4:4f:1e:3c:e9:73:9a:ae:77:6e:0f:93:
a2:32:9e:e9:e7:2b:47:02:ec:33:ef:83:cb:55:41:
27:f9:17:0a:0e:99:67:ee:1c:47:70:85:0a:9b:35:
de:cc:25:df:f8:22:4a:cf:56:9b:5a:6e:5e:85:5a:
3a:73:36:cf:1e:d3:8b:f1:9e:40:90:d9:73:b5:34:
18:b4:5b:9c:69:59:77:74:91:8f:01:31:e7:de:ce:
2e:46:f9:ad:bb:7d:66:7c:18:75:b2:9d:09:56:8d:
31:2b:f2:a6:29:25:52:6f:5a:e1:5a:a4:85:cd:5c:
3c:4d:60:b7:3f:09:f2:ff:6a:b0:eb:95:74:10:61:
6b:5c:8f:5f:37:70:a3:01:de:a7:79:e3:21:11:64:
e5:41:7d:61:f1:56:5d:03:38:8c:64:38:82:c6:7c:
b3:0e:22:c0:b3:82:c3:71:fe:5a:b6:c6:57:92:19:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:40:A5:41:06:AB:33:3A:07:76:87:C5:D3:77:74:4D:3A:61:E0:4A
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:70:77:00:e0:e5:4b:7d:13:d8:bd:98:eb:a4:9f:f2:c9:
3d:11:46:8b:58:9c:be:b6:16:60:b7:7f:27:b1:98:54:51:7d:
d2:13:a3:28:89:98:49:6f:62:e8:78:c6:d3:66:9a:31:90:37:
6b:c6:d8:20:91:b4:cf:bf:c6:c7:e2:72:db:4f:94:6b:af:d3:
47:1c:05:83:54:ec:22:a3:17:e5:33:de:3a:9a:c6:4a:6d:89:
47:de:fb:96:d5:80:41:d1:34:9f:25:45:bb:3d:2a:81:62:af:
8a:75:04:a0:7f:ca:fa:5f:97:1b:c2:79:90:5b:9c:79:50:1c:
c3:1a:ba:e4:37:8f:17:fa:80:2d:3c:b3:ad:83:63:53:a8:b9:
8b:92:ae:7b:82:61:43:ec:46:5f:c2:19:d8:7a:55:5a:e5:de:
b3:a4:1f:51:ce:a8:93:75:09:26:4e:b6:f1:6a:e8:be:1a:6a:
7d:ac:15:b9:d5:73:1a:57:53:3d:c4:b6:7f:7b:9a:bd:94:b9:
32:36:4f:d7:31:c8:ea:23:7f:6b:12:5a:b4:c5:60:7d:47:46:
a1:af:b9:9a:cb:9d:62:8c:71:69:c8:ad:bc:d4:ae:e8:7e:61:
0d:e0:0e:21:8c:36:ab:8e:0b:24:8c:18:cc:36:70:42:e1:80:
25:16:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:36 2025 by rpki-client