Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: kyYTNA2LqIgBN7dyfUHm8vZUxpgduo7Uvi7PVr+yEho=
Subject key identifier: B4:78:AE:82:8A:57:C5:B0:CE:0D:57:EB:91:4C:7B:D9:D9:CB:6D:A2
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 01988D6BC85D7474FF86D7F088DD34BAFD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 0FA2
Signing time: Sat 09 Aug 2025 06:01:47 +0000
Manifest this update: Sat 09 Aug 2025 06:01:47 +0000
Manifest next update: Sun 10 Aug 2025 06:01:47 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: NZlzETtjkzrzbCqYbuKG+v/HqMMYZtaBxC000F7lDN8=)
2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:c8:5d:74:74:ff:86:d7:f0:88:dd:34:ba:fd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Aug 9 06:01:47 2025 GMT
Not After : Aug 10 06:01:47 2025 GMT
Subject: CN=b478ae828a57c5b0ce0d57eb914c7bd9d9cb6da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:ad:87:28:d9:03:e8:8b:21:29:d5:31:fe:
eb:1e:87:f2:8f:c0:52:76:f7:d5:f4:64:ee:f5:5b:
f9:05:46:3b:77:34:75:a1:45:e6:8d:d5:62:ee:f3:
fe:73:9c:f8:63:a9:03:6d:46:b7:2f:3e:be:13:2a:
15:cd:1b:a3:cc:e2:01:f7:21:c5:bb:d4:b7:34:34:
eb:0a:87:30:0c:43:9e:82:fe:1d:97:de:05:10:9f:
cb:70:bb:4a:ba:33:f9:99:27:09:1c:61:58:27:47:
e6:06:91:e0:f3:f2:6b:c5:b0:b3:35:52:a7:27:6e:
5e:c0:37:ee:9a:ec:c0:5e:4d:be:ab:b6:ca:cd:22:
53:80:d3:b6:6c:a3:9b:41:b0:03:be:b5:4e:ce:d7:
a7:02:32:3d:dc:eb:48:1d:64:02:92:7f:91:05:14:
0d:1f:7d:0b:a0:98:83:3e:19:22:8b:d7:de:5e:3f:
72:46:fc:57:e9:a3:60:84:a8:fc:c2:7c:b6:89:ec:
eb:36:3f:8c:8b:54:9f:53:81:10:2e:40:ac:28:d8:
af:5a:ae:12:41:43:34:b6:0d:fa:29:aa:10:66:12:
c9:8d:d0:76:07:7b:c8:de:d0:da:f7:2d:22:96:97:
dd:c1:fa:9b:ee:48:e8:4f:65:af:94:fa:d7:2c:ae:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:78:AE:82:8A:57:C5:B0:CE:0D:57:EB:91:4C:7B:D9:D9:CB:6D:A2
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:75:b0:a5:e4:b9:4f:f7:6f:11:93:44:7f:ba:a4:b7:78:2c:
06:19:80:6e:fa:ef:57:65:7e:78:c2:bb:7d:94:3a:0f:ae:e2:
3a:fe:5d:b6:5b:77:98:16:b7:07:6a:1b:2f:68:74:ee:7c:8c:
85:f8:d8:10:52:06:da:70:65:17:b8:1f:1e:57:7e:15:06:90:
f1:88:8c:23:db:11:76:d2:01:98:04:86:c1:1e:7e:88:4a:9b:
06:18:3e:6b:55:68:1c:b2:51:36:3d:42:0d:51:83:2f:a7:64:
d4:3e:ea:7c:b7:17:42:ce:5b:bb:a3:c2:f5:77:ed:16:68:28:
b4:2e:80:f1:0e:09:40:ad:97:fe:a0:34:e3:41:84:1f:60:2a:
f9:7f:ad:23:47:c5:7c:d3:2b:67:0c:17:3a:16:f8:fb:e4:b3:
f3:92:d1:a9:55:c5:80:63:14:eb:64:95:aa:dd:c2:d5:e5:ee:
cd:98:78:11:73:3b:33:48:db:6e:b9:27:55:e5:d6:91:02:55:
fc:58:53:00:35:f9:12:73:ea:71:42:4b:25:38:40:55:14:aa:
11:a4:55:bb:66:aa:35:97:fa:3e:26:e9:e4:49:e3:ef:fd:21:
4c:67:18:bd:99:2c:bf:ee:90:5f:85:40:6c:bf:cd:ff:9a:1c:
3d:28:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:18 2025 by rpki-client