Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json)
Hash identifier: C9IE+Hnjl9P+DmXr8pz+x6nvqBf+iFOHD32kKytD/CA=
Subject key identifier: 97:8B:2A:86:10:42:0C:70:A9:4B:96:F0:A8:FD:7C:14:22:73:0D:EE
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 019873741D0F368C72FF72A8870B21E8B2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
Manifest number: 139F
Signing time: Mon 04 Aug 2025 05:00:45 +0000
Manifest this update: Mon 04 Aug 2025 05:00:45 +0000
Manifest next update: Tue 05 Aug 2025 05:00:45 +0000
Files and hashes: 1: OwIv7U97sC9dks6Rl4mlkK2f8GI.roa (hash: 8n+wp+UnJSkfB2nwEoGtaJ5dvj8q4nuluWU6IFbCLc8=)
2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: dN3tCoYnOnKeDud7pn2r/2luD09u/hMBrHKE7oLYJAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:1d:0f:36:8c:72:ff:72:a8:87:0b:21:e8:b2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Aug 4 05:00:45 2025 GMT
Not After : Aug 5 05:00:45 2025 GMT
Subject: CN=978b2a8610420c70a94b96f0a8fd7c1422730dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:09:a7:70:77:a3:98:be:25:4a:de:0d:c8:9f:
92:74:4f:6d:e8:31:24:f4:d1:1b:5f:7b:03:c4:4f:
b1:09:cd:73:63:15:b1:f3:bb:09:da:dd:21:e7:ac:
b6:e8:ad:2d:89:6d:cb:8b:5a:76:19:78:82:c6:cf:
32:83:fa:f5:70:22:a6:d9:e1:f9:af:48:d1:27:c5:
7b:b4:c8:3a:95:93:ea:ee:f6:e8:0b:66:64:18:d8:
f0:78:0d:65:57:a8:20:9f:bd:54:22:e7:57:92:05:
39:d4:11:66:d6:92:d8:2d:2c:02:07:04:ae:ef:26:
40:6f:d0:58:15:2d:0d:c9:94:8a:e0:ae:85:10:6d:
8e:ff:ab:c0:c8:d8:a7:10:51:95:59:9b:6e:69:9b:
17:a1:0b:d0:6d:88:ce:69:2a:e0:b7:f3:b9:fd:27:
5c:69:f7:f9:f1:3e:13:41:0f:a2:28:84:38:ae:bc:
df:6e:bf:56:14:bf:b4:77:bc:a5:ca:3b:8a:08:c4:
0f:7a:28:6f:dd:0f:10:14:56:af:88:a3:7c:43:3d:
a1:ae:eb:45:73:18:15:9e:ee:fc:03:81:7d:b6:14:
1c:5f:67:d2:7f:e4:ad:78:14:03:9c:fa:1b:7e:36:
98:49:0a:3d:fe:9a:3b:e3:9f:de:72:8a:6e:75:e6:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8B:2A:86:10:42:0C:70:A9:4B:96:F0:A8:FD:7C:14:22:73:0D:EE
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1e:85:10:00:95:7a:3a:3d:f6:17:93:f6:1d:0d:d6:d4:b5:
98:12:4d:80:21:10:8a:13:45:10:c4:06:7b:5a:88:07:4d:54:
61:01:10:a2:43:be:6b:de:5b:1b:6e:a8:db:cd:85:66:f9:88:
07:ce:ee:39:fa:65:7a:39:49:44:2c:cc:9c:4c:d9:ce:4f:67:
26:b3:b1:b9:8a:90:b1:91:cf:42:62:4b:f6:c4:a7:98:12:d5:
70:c6:40:55:79:27:09:3f:97:0d:e4:ea:fb:6c:90:8f:40:52:
ce:10:e9:6d:c5:2f:84:43:95:c8:58:ad:c1:c7:cc:05:24:8b:
a0:2e:c1:c2:1f:f3:ae:00:e3:25:f2:4f:11:64:e6:69:9d:c4:
f7:d5:25:45:91:4d:9c:f1:36:3f:e1:23:ed:03:07:cb:26:bb:
ee:67:a0:30:a6:c3:c9:93:b7:69:13:15:83:55:eb:ee:f9:81:
93:bc:70:fc:6f:a1:ff:de:58:36:a9:3d:ce:3c:a5:af:0b:65:
7e:a6:c9:33:f8:64:e5:72:f3:d5:75:55:f1:a2:b3:20:19:9c:
3e:ea:a6:bd:55:7e:dc:2f:e1:27:b3:21:05:ef:64:7f:15:bf:
f5:b0:cd:4b:c9:d1:30:6e:21:ff:88:c7:e0:37:70:e2:e2:a7:
2b:ae:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:37 2025 by rpki-client