Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier: n1uZxKtopkGkxyhkilsIDRjxiN/UMjfjv7TtznYxvY4=
Subject key identifier: EF:77:26:96:FB:E1:42:0C:9F:F5:13:0C:93:CB:20:05:4B:51:CB:77
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 019894B6863A4AF5A571E4A01B0F725F3AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number: 0956
Signing time: Sun 10 Aug 2025 16:00:46 +0000
Manifest this update: Sun 10 Aug 2025 16:00:46 +0000
Manifest next update: Mon 11 Aug 2025 16:00:46 +0000
Files and hashes: 1: 7DjRNlYtbNd5bWrkd68Y0hn_S8U.roa (hash: cnlLc3cQObaHjRU9oZ4ntBC1caogWw9gydNQ78TPtE8=)
2: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: opuV9gujVt6LCMeM66z2HWTVbLyzMfWv7GRsii775JQ=)
3: Ljv2UgPaOFE3ERmB4rgUv6okXUM.roa (hash: 4NqznF8HQ3h3IuTIewXo/Zoj/y7IiGwjWIy/bmyiBBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:86:3a:4a:f5:a5:71:e4:a0:1b:0f:72:5f:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Aug 10 16:00:46 2025 GMT
Not After : Aug 11 16:00:46 2025 GMT
Subject: CN=ef772696fbe1420c9ff5130c93cb20054b51cb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:01:2f:d4:28:de:4f:18:51:9f:2a:25:12:
92:d5:65:7d:c1:93:ca:76:dc:34:6b:4e:86:06:ce:
3c:36:bb:9b:58:a0:d2:bd:32:03:ad:94:78:b5:3a:
b6:89:05:4f:39:a2:64:ab:0f:28:51:9f:19:12:62:
44:c8:03:78:25:be:50:66:ff:9f:a1:b0:b5:a9:d4:
b5:b8:21:5d:58:9f:a0:2c:2d:5e:d8:69:76:cb:24:
82:ab:96:13:be:0c:dd:f0:fa:67:45:bd:d6:7f:ac:
fb:f7:ef:f4:19:2f:69:06:66:a9:37:cb:98:15:43:
d7:71:d2:74:7d:3a:4a:b1:18:bd:cd:a6:ef:d4:65:
f0:cb:43:c4:4b:75:e0:43:8c:0e:75:d2:e6:4f:44:
b5:13:a6:84:12:bc:f8:31:f1:12:1b:82:f8:00:13:
68:7e:38:e5:1c:4e:43:8a:93:e5:9b:b0:38:1f:3e:
dd:b0:f7:23:73:d8:10:28:c8:b2:b5:09:9b:6d:e5:
bc:c9:b4:85:b3:01:98:56:e4:de:41:aa:3e:3f:1a:
d8:ca:5b:3e:ed:73:fc:f9:3e:f8:b2:ec:cd:f6:af:
3e:b7:ea:cd:dc:ef:20:27:00:25:cd:a0:fd:45:29:
ad:a7:1a:e9:b4:a7:76:96:12:9d:52:8a:a2:3c:f3:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:26:96:FB:E1:42:0C:9F:F5:13:0C:93:CB:20:05:4B:51:CB:77
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:60:55:dc:bb:0a:cb:5a:b4:fa:57:2e:1f:42:97:e6:3f:bd:
2f:bf:e7:fd:9f:f3:cb:e5:2f:af:4d:68:e6:a4:fa:c4:1d:3c:
cb:78:87:e1:67:9d:f7:3b:44:ed:98:2a:c3:52:25:e6:be:76:
a9:31:5a:4e:04:81:8f:ca:b4:e1:41:d2:92:b6:94:38:8b:e8:
48:dc:ed:17:6d:61:cc:07:47:3f:48:51:43:d4:0a:5d:2a:5b:
07:45:b4:58:e0:6c:8d:1b:02:d3:98:7d:b8:e4:c3:50:9a:0a:
b7:53:07:a9:5c:70:bc:56:cf:f8:2d:86:c4:8e:53:36:cb:d2:
14:32:21:41:c4:df:9d:7c:a6:c0:2d:10:93:a6:30:f5:b6:98:
b0:49:35:8c:5e:35:cc:98:85:98:5b:f4:e8:19:c0:2a:3b:05:
5f:36:61:66:0c:f4:7f:2e:8b:30:b9:74:17:05:43:aa:5c:aa:
32:91:1f:74:0c:d8:8f:b2:1c:e4:c9:31:55:e1:ac:06:1c:d8:
53:f9:42:07:6c:26:1d:15:49:a6:96:0a:16:13:c5:2d:21:a3:
89:a9:5a:06:6b:09:b8:fa:d6:50:17:b1:61:36:33:5f:70:bb:
85:6c:37:e3:42:37:c4:e4:5f:44:ad:aa:02:0c:30:16:c0:da:
e0:1c:6d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:50:50 2025 by rpki-client