Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier: Cs/K+Hi6PRa0QEDiVkSa+a6hXPDqbCKn971Xi82M1NY=
Subject key identifier: 94:0D:CF:3B:4E:10:FC:9B:33:AB:F7:7E:17:C4:37:DD:06:69:29:1D
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial: 01987DF7FF2C2FAA2331C184B6891E619F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number: 15AB
Signing time: Wed 06 Aug 2025 06:01:01 +0000
Manifest this update: Wed 06 Aug 2025 06:01:01 +0000
Manifest next update: Thu 07 Aug 2025 06:01:01 +0000
Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: HziOATojWJG2Hzls5+0cz2ykNEUihmDhZvWyNvsVWls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:ff:2c:2f:aa:23:31:c1:84:b6:89:1e:61:9f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
Validity
Not Before: Aug 6 06:01:01 2025 GMT
Not After : Aug 7 06:01:01 2025 GMT
Subject: CN=940dcf3b4e10fc9b33abf77e17c437dd0669291d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:9a:01:23:5f:ee:fd:2b:86:22:6b:43:4b:
de:a8:4b:bc:06:8d:06:5e:7c:9a:4a:fb:93:40:ce:
77:df:e2:cd:45:b1:c9:13:9b:57:ce:0b:bb:2b:79:
81:b3:87:02:f4:85:e1:41:f6:b5:1a:81:2a:84:1c:
88:8b:a2:74:40:04:8e:2e:d3:1d:3d:a4:67:40:51:
bb:ad:1d:20:7e:14:84:e9:a3:fc:9b:68:a7:cc:42:
57:46:e5:00:be:d3:94:2a:62:41:fa:f8:86:8b:df:
f7:a0:d8:a8:3d:bf:ae:e6:b3:8f:3c:0e:e5:87:99:
d5:0e:47:16:f4:f3:38:30:e4:04:85:1f:ab:30:e7:
13:5b:ae:b3:42:ec:02:ff:c2:c0:96:a8:3a:c5:3e:
39:4d:76:53:77:07:73:de:46:55:3d:99:70:ee:a3:
dd:20:6f:0c:56:db:d6:e4:08:95:1b:ae:a2:7b:39:
4f:47:11:59:95:d3:1f:4a:2f:8e:ea:83:3d:25:83:
4b:32:2c:c8:f3:c7:ce:51:b7:12:de:5a:f8:13:6a:
51:3b:f9:e7:33:fe:fb:f3:83:b4:88:34:38:f2:a6:
0a:20:23:99:f2:ef:c4:ae:af:94:53:c2:59:61:42:
db:d9:6c:88:79:0d:aa:f4:7a:2c:68:3c:c7:78:ed:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0D:CF:3B:4E:10:FC:9B:33:AB:F7:7E:17:C4:37:DD:06:69:29:1D
X509v3 Authority Key Identifier:
keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:53:4d:96:f3:ec:6f:2b:44:23:64:07:cf:91:29:75:ed:cf:
a3:94:62:3b:1e:ca:0d:0e:4d:f0:d0:a1:1e:f2:a1:dc:1a:91:
a9:b7:1d:1c:95:e8:e5:3b:4c:d7:14:bb:07:73:51:2c:30:38:
ba:e6:32:3f:e7:5d:17:34:8f:3d:39:11:5d:f7:a8:d1:56:92:
e5:63:ec:7d:e2:fa:dc:49:7c:bd:b7:06:ed:9f:33:da:bf:78:
25:85:de:88:7c:50:cd:99:95:00:db:ea:e1:11:49:ff:5f:3b:
0d:17:f3:c1:d2:94:a4:f5:5a:b1:d6:e2:29:7d:6a:22:9c:46:
56:60:92:a1:e8:6f:1f:24:09:1d:26:d8:74:66:21:e7:f6:f2:
17:4d:27:c3:b1:96:a3:25:8b:7b:bb:ac:58:45:1f:7d:15:c8:
10:75:5a:75:a2:23:70:ed:95:33:5a:83:44:af:79:77:44:b2:
6b:52:c3:b6:40:44:8c:0f:01:73:d8:94:fc:90:07:7a:9c:3e:
9f:ce:b6:db:81:15:7f:fe:92:c6:45:5f:4e:bf:6d:05:6f:ab:
db:79:fc:99:39:97:6e:64:2a:92:7b:22:15:2a:28:47:da:2a:
f9:cb:dd:ed:ae:62:58:ba:4f:1d:8b:7c:32:cf:55:6f:87:e9:
e8:f3:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:19:27 2025 by rpki-client