Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
File: Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft (raw, json)
Hash identifier: 3Ku1PNHqGyFCxiz60ysVsAckeNVYXoMujgfrlikzCUY=
Subject key identifier: B6:3F:69:85:DD:66:72:39:F1:56:FD:9E:2E:25:63:E5:9C:B6:CA:9C
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial: 019893DAC5F059D88606ACAF65D2864EA5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
Manifest number: 0878
Signing time: Sun 10 Aug 2025 12:00:44 +0000
Manifest this update: Sun 10 Aug 2025 12:00:44 +0000
Manifest next update: Mon 11 Aug 2025 12:00:44 +0000
Files and hashes: 1: Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl (hash: qD8mNns5O9zk9qjcQ0mkDcDWrsDD8C2R9UBXNfGfomY=)
2: a6yjRQPaEVSmn2Af_50hlyGwo-8.roa (hash: f+GvZNBih0mNs6EfHvNm1HRb2NXRxOiIU+W+BUZl09g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:c5:f0:59:d8:86:06:ac:af:65:d2:86:4e:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
Validity
Not Before: Aug 10 12:00:44 2025 GMT
Not After : Aug 11 12:00:44 2025 GMT
Subject: CN=b63f6985dd667239f156fd9e2e2563e59cb6ca9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:11:a5:21:c5:49:5b:03:10:3c:7b:36:c0:
10:21:1a:4a:a2:c8:c0:a3:f9:e9:10:87:31:66:72:
78:6d:2e:15:c9:0a:cc:b6:cf:dc:d7:63:fd:63:46:
a5:64:b1:e9:21:c8:37:41:f7:5f:13:3e:f4:cc:c1:
6b:72:b2:dc:61:2c:bc:ec:7d:6b:da:0f:99:1d:61:
5a:49:68:99:0d:92:17:ec:87:d2:bf:7d:e7:23:51:
62:53:c3:34:32:1b:79:3d:3d:ae:c3:2c:86:39:a2:
1b:7a:76:49:b9:c7:b5:ae:14:5c:ce:34:b1:52:6f:
1e:b4:81:d6:71:d6:99:41:a2:4d:24:99:27:67:4e:
65:34:06:e4:5c:35:40:04:81:0a:ce:12:ac:d1:6c:
3c:61:ae:f1:57:1b:ea:cb:68:a8:0f:07:0a:e7:c2:
e2:a2:fb:c9:d0:ec:c0:71:3d:71:42:47:62:2d:63:
64:f4:2b:bb:03:91:4b:54:ba:49:70:23:68:11:1e:
8c:48:71:b3:26:c8:76:a8:2e:dd:ab:54:91:4e:f7:
7f:af:e0:6d:b8:ab:8e:76:c5:06:7f:b8:dd:15:cd:
0c:53:54:19:1a:45:ee:68:29:36:56:c8:6f:53:61:
7d:00:39:16:0e:59:cd:ce:33:b3:0d:00:09:c1:1e:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:69:85:DD:66:72:39:F1:56:FD:9E:2E:25:63:E5:9C:B6:CA:9C
X509v3 Authority Key Identifier:
keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ae:af:b3:43:b7:ce:f2:85:58:be:47:39:27:94:ae:89:ae:
60:3b:83:07:eb:43:6f:7f:81:77:37:f7:4b:4b:20:7f:43:63:
2b:2f:b1:35:45:0a:74:e6:bc:cc:06:b6:14:e1:3e:71:fa:85:
1b:4e:6b:04:44:f8:7a:65:78:f8:1d:de:36:85:7f:fc:dc:11:
47:37:1b:7c:0c:e1:51:81:00:8e:02:39:62:cf:c1:fa:96:b6:
dd:56:46:c6:2f:98:6e:3f:4c:d5:c9:0e:06:8b:42:cb:ec:39:
54:58:a5:97:47:17:82:12:34:cd:3f:26:3f:50:f9:b9:7d:f5:
17:5d:f7:d9:8b:fc:d0:6e:6d:84:c6:8b:1b:8b:ae:15:63:6b:
55:18:16:5e:ed:ab:1a:c5:59:7f:6d:6d:ea:4f:27:08:72:31:
c9:ad:35:be:54:4d:31:6b:77:38:87:10:58:26:37:55:e9:3b:
ed:d2:58:67:4f:c0:66:f6:e9:bd:58:bb:44:cb:8f:9a:89:cb:
74:c1:9e:a5:4b:be:c7:57:ee:de:b2:eb:3b:1a:e2:53:86:f9:
b1:41:f9:db:41:b6:34:d3:7e:6e:97:42:6a:89:b3:7c:3f:52:
4d:80:8e:dd:27:eb:f7:4c:72:86:b0:fc:ef:39:79:77:36:e6:
f8:87:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:49 2025 by rpki-client