Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: 9qj9aJas89Yvz1QveaKCflE7ds2KRCx6JR/vgjngLxI=
Subject key identifier: 16:3B:6E:F1:36:F4:93:22:FB:CA:1E:75:EF:FE:99:4D:20:DD:30:5F
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 01988A3319657904FE5CF4893ADCD358F64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0A30
Signing time: Fri 08 Aug 2025 15:01:01 +0000
Manifest this update: Fri 08 Aug 2025 15:01:01 +0000
Manifest next update: Sat 09 Aug 2025 15:01:01 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: hW8iDenJdyC8vHVoN+FWeF/xQI7Rbnytn9GZKvTidU8=)
2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:19:65:79:04:fe:5c:f4:89:3a:dc:d3:58:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Aug 8 15:01:01 2025 GMT
Not After : Aug 9 15:01:01 2025 GMT
Subject: CN=163b6ef136f49322fbca1e75effe994d20dd305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:0f:d6:c3:a4:34:9e:21:27:6c:52:96:d2:
fe:3c:8f:6c:90:75:ea:79:3e:bb:40:ff:d2:4a:b3:
c9:61:2d:5d:42:eb:03:47:f3:c9:b7:a9:53:42:9e:
92:ba:b9:1a:c7:3e:10:63:3d:a9:83:a1:c5:86:11:
43:57:b0:18:a9:8e:2c:39:c1:e0:11:26:83:f6:40:
57:fa:39:c5:81:21:50:3e:dd:4c:ea:9a:0e:9b:1d:
77:21:df:40:95:40:c7:f8:42:10:71:cb:ad:c8:99:
25:48:b6:3a:c9:28:a8:ef:c9:4b:7a:f4:93:db:64:
1d:b8:81:bc:da:51:5f:66:42:80:d2:3b:40:0b:ab:
07:75:59:76:56:8c:43:56:1d:8f:c2:b0:fe:96:f8:
cf:88:95:3b:d1:ed:58:e4:33:af:25:74:a8:d4:d9:
b2:9c:74:3a:78:12:96:10:8e:5d:d0:f2:b5:05:7a:
73:8a:dd:4e:da:4c:9c:1e:05:af:5c:2c:56:e0:46:
01:2c:ec:cb:df:c9:37:1a:14:c7:c0:3f:a5:c7:91:
a2:6d:bf:34:d2:e7:c0:0f:50:47:6a:11:0e:99:13:
78:65:79:7a:7e:ea:2f:cf:6a:84:cb:59:55:2a:1f:
c2:a8:1b:50:52:d1:8b:88:21:4b:00:17:ab:1d:74:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3B:6E:F1:36:F4:93:22:FB:CA:1E:75:EF:FE:99:4D:20:DD:30:5F
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:58:46:49:87:96:17:9a:ad:7c:f8:e2:18:b2:b4:8f:ca:13:
da:1a:42:71:e1:73:f4:8c:e3:a0:ac:e9:d8:59:eb:e8:93:41:
8b:b2:b4:a9:05:cd:82:a2:97:a5:52:40:49:e8:a5:32:73:2a:
fd:44:ca:cf:07:36:8d:2b:08:d8:fb:87:87:9d:2b:c7:0e:8e:
ec:6f:58:98:19:42:6c:c1:6e:30:ed:d8:0c:d8:50:4e:a2:64:
48:2b:a2:2b:b0:7f:4b:a5:64:b1:95:a9:50:52:35:12:3f:e7:
8f:62:d0:40:2f:c5:c2:e7:d1:9b:ca:ff:df:de:12:47:63:7a:
5e:b8:63:b1:9d:19:a8:45:72:38:72:1e:ef:66:9f:2c:29:19:
08:80:42:d3:dd:28:66:11:af:02:14:8c:f8:d4:24:78:67:48:
7c:71:7f:81:28:54:d3:e9:f3:0e:8d:1e:af:9c:ab:6c:5d:43:
da:be:8c:37:08:88:87:fb:92:45:12:a0:c8:11:78:2c:6f:e4:
cb:89:c3:e5:64:1d:a3:5a:0a:3c:e5:93:ff:e0:49:30:2a:2b:
4b:51:71:c8:73:c2:73:38:e0:39:14:d8:be:fe:a8:41:0c:27:
7a:2a:b1:8c:2f:a7:80:c0:12:28:ba:1b:20:88:f6:8f:d2:d3:
d4:7c:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:40 2025 by rpki-client