Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: KGbJTSJMsmiRKoK6WrnkdyyR5DvRhFrBw9leywOa4cs=
Subject key identifier: 54:51:5D:90:14:F1:43:F2:80:93:18:DF:E9:6B:B3:2A:D0:1B:8D:FB
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 01987486D0CB4122A46E9D80999C8F37A11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 15EF
Signing time: Mon 04 Aug 2025 10:00:48 +0000
Manifest this update: Mon 04 Aug 2025 10:00:48 +0000
Manifest next update: Tue 05 Aug 2025 10:00:48 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: ElCRAbZwJO5qA0e8+OhctN6gM/AHlDFJI8fAQX5PTWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:d0:cb:41:22:a4:6e:9d:80:99:9c:8f:37:a1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Aug 4 10:00:48 2025 GMT
Not After : Aug 5 10:00:48 2025 GMT
Subject: CN=54515d9014f143f2809318dfe96bb32ad01b8dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:e9:f0:ce:40:13:d3:b2:9c:a6:5b:1c:8e:
83:a2:f1:7b:be:97:4c:06:02:2e:06:42:26:c7:87:
34:a2:42:f3:08:5e:cf:e5:f8:a7:e5:bf:a0:e8:d5:
47:93:c2:8b:76:48:cb:02:2b:3a:54:b6:b4:b4:bf:
9c:1e:a3:6e:6c:b3:53:28:ca:0f:12:b2:37:d6:7e:
63:1d:25:f9:9f:eb:8e:66:f9:95:14:d8:8f:5e:93:
ca:c9:58:cd:ed:11:75:5c:39:e8:e2:fc:74:84:87:
a7:57:78:ab:ae:99:36:15:a3:7a:a9:80:df:5c:a4:
f4:03:82:d1:bb:bb:d0:16:e9:df:85:7c:51:1b:ce:
cc:be:d5:99:61:26:a7:da:26:58:6a:80:51:79:f7:
4a:f6:af:7d:5d:46:c3:7c:90:d0:ab:4c:04:eb:98:
5a:20:93:cb:35:50:c4:29:a9:08:4f:71:c9:95:7b:
ea:09:52:68:03:72:49:96:69:c0:c5:0f:9c:c8:d0:
f3:89:00:e4:cd:b7:60:db:7b:51:d1:72:41:87:40:
bb:f1:93:fb:81:8b:51:0d:83:c8:37:c4:3f:72:37:
c9:e5:58:de:de:1b:fb:93:53:a6:0d:98:dd:8b:ac:
f2:f3:83:ed:fc:d2:a6:0b:5b:af:38:24:5f:1f:59:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:51:5D:90:14:F1:43:F2:80:93:18:DF:E9:6B:B3:2A:D0:1B:8D:FB
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:25:b1:f8:6b:10:2d:8a:2d:50:2e:91:e9:51:bb:85:c9:45:
1e:a4:46:a7:d3:96:3b:3e:c2:54:bd:b8:d7:b3:2d:f5:d3:34:
3b:ed:44:94:0d:33:31:26:97:cd:07:d1:48:c0:7a:17:dd:e1:
ee:8c:46:92:3d:cd:ff:1a:2f:14:e8:92:e3:38:ed:81:94:22:
f9:be:ec:3b:5b:7b:bc:f2:f6:6e:dd:8a:f2:40:1f:a3:92:c5:
a9:42:c8:48:34:e7:95:7f:56:11:2f:b3:87:09:4e:bf:bf:62:
d5:63:f2:12:e4:5f:30:c9:00:e9:e7:3d:de:2c:be:97:a4:af:
45:7f:0c:15:67:81:35:bb:99:3b:fd:21:ea:c3:78:4f:ad:d3:
e6:1a:35:00:ce:b2:fb:51:a8:71:b3:7a:54:c2:a8:c9:dc:e7:
f7:0d:b1:70:49:8b:8a:e3:2b:5e:64:7d:33:73:2d:f5:59:22:
e6:a8:f5:72:c4:7d:71:ce:b1:94:f4:69:8b:20:e3:a4:3f:69:
ae:af:a3:88:2e:b2:b0:9c:77:b7:1d:57:f5:e7:11:4d:85:da:
55:08:95:38:f8:7b:0d:59:cc:4c:7d:7d:cb:fa:85:b0:ea:f2:
3a:1a:e2:29:d4:7f:3c:dc:e3:1f:5c:91:fc:fe:d0:0c:96:15:
64:e5:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:22 2025 by rpki-client