Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: ZdR7j3zXPUxmVRE4qOvaQ0JitvDMt3MzBDhTw3Fxx68=
Subject key identifier: BE:83:B5:3E:FA:23:4A:AE:39:C3:A3:B8:A3:B4:20:F3:3C:8C:0A:8E
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 019874F53EB19E6905C7CA66C441F11EF3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1624
Signing time: Mon 04 Aug 2025 12:01:26 +0000
Manifest this update: Mon 04 Aug 2025 12:01:26 +0000
Manifest next update: Tue 05 Aug 2025 12:01:26 +0000
Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: Dm3fCdPn7zfCWwkmQRFzAOk8FsLJM6fqcSA2vSQtmoE=)
2: UUcKOryc_ykhvD7v1VUPE00sScs.roa (hash: dAexA2neb3HcfI1bNYdykFIadotQ4NdMRRVIE6QTBe4=)
3: q7sVZrLDAVZQekWMRkAvaSDSl9g.roa (hash: RRTQ5jExs41DvyGCsYtTzal7l6KRuDTnah7ylDN5VEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:3e:b1:9e:69:05:c7:ca:66:c4:41:f1:1e:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Aug 4 12:01:26 2025 GMT
Not After : Aug 5 12:01:26 2025 GMT
Subject: CN=be83b53efa234aae39c3a3b8a3b420f33c8c0a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:61:bb:cd:e7:d9:51:30:94:c9:ca:f7:86:
22:97:a6:67:17:9a:8c:87:91:da:90:40:5c:80:23:
a9:d2:e3:b8:a9:cb:72:17:e8:ee:16:10:ff:64:fb:
09:de:9b:54:6d:87:ee:92:ed:d0:9e:38:d1:e4:81:
35:54:96:d6:f1:ed:fe:33:09:15:88:eb:f8:6a:55:
f8:94:06:b7:52:aa:e0:35:ac:f1:92:bf:1a:50:e7:
f5:87:36:e2:18:f7:28:12:ce:df:91:25:23:ff:e1:
68:1f:91:1e:ef:02:89:d5:53:35:45:c5:2f:da:de:
d7:4e:41:a5:a0:30:6e:61:2a:85:17:6f:31:5e:09:
9b:1b:a1:4a:a4:fe:56:9e:e9:60:13:39:34:1f:2d:
b2:e9:7f:90:c2:5d:dc:af:93:e5:ad:49:e1:6f:0b:
9a:ff:89:49:e4:d1:69:9d:8e:c7:ff:9c:9f:05:cb:
2a:38:ff:6f:2f:3e:a0:0d:84:48:67:50:0b:5b:e6:
6e:e6:8b:22:4f:98:1a:0d:61:c0:34:05:b1:b6:d8:
f9:28:9c:59:33:d2:18:2b:5f:0e:25:39:10:60:bf:
3a:99:d7:7a:f4:9a:56:5d:03:f3:bf:86:e7:30:cf:
ba:30:2e:a7:3a:66:91:51:74:0c:ae:fb:c9:7a:63:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:83:B5:3E:FA:23:4A:AE:39:C3:A3:B8:A3:B4:20:F3:3C:8C:0A:8E
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b4:5f:fb:9c:38:6d:f1:06:b5:37:ea:51:6d:89:90:08:ef:
02:84:90:bd:d7:8d:7d:3d:66:63:6a:a2:e1:97:a2:a8:48:7b:
e3:19:df:25:d4:d5:4f:20:c3:ee:5b:00:13:8b:48:54:f4:72:
49:3d:3d:7d:fb:e5:84:d9:c3:20:a3:1d:42:cd:0e:bf:9b:2c:
7a:66:aa:56:f7:1e:74:ae:e7:5e:68:c5:a3:a4:2b:a9:c6:01:
53:da:03:23:a1:3f:70:21:ca:c5:b2:f9:f8:0e:8c:7f:ab:73:
cf:ac:66:d6:40:f8:de:69:be:db:bc:23:0c:c0:11:86:30:47:
45:e1:fa:7f:16:c2:f3:18:32:6f:b3:1f:d5:14:dd:d7:aa:37:
00:b7:4b:89:96:ae:e7:0a:9b:58:33:eb:83:13:bb:77:3c:57:
5e:90:5f:a8:a5:97:78:db:aa:d0:42:97:ce:7a:45:3d:ff:33:
a7:ec:21:d5:f3:30:93:c7:ee:5a:6d:a7:89:84:aa:5b:d9:f2:
4c:82:57:c5:88:e1:e6:57:87:7b:b5:b2:b0:54:09:46:98:a3:
98:5a:5e:90:9c:e3:2d:74:21:de:45:c4:32:17:ae:c9:45:28:
94:8d:ae:05:b4:1b:b5:e1:95:88:26:cc:4f:8a:8f:e0:1c:22:
30:05:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:06 2025 by rpki-client