Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: HDra1SXOUHaGbyF4RevPfGml7DN57N4e93HSRrixGp8=
Subject key identifier: 29:AB:6B:33:BE:B6:EE:97:DF:B7:A5:A3:61:13:C3:3E:75:02:06:9A
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 01987ABFA5FED0114D077437D98B64B0572F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 1620
Signing time: Tue 05 Aug 2025 15:00:36 +0000
Manifest this update: Tue 05 Aug 2025 15:00:36 +0000
Manifest next update: Wed 06 Aug 2025 15:00:36 +0000
Files and hashes: 1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: B9Pz9DK7JrLTcWmVb9ndgtZFjhD/nwZSLiCn6DBfbP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:a5:fe:d0:11:4d:07:74:37:d9:8b:64:b0:57:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Aug 5 15:00:36 2025 GMT
Not After : Aug 6 15:00:36 2025 GMT
Subject: CN=29ab6b33beb6ee97dfb7a5a36113c33e7502069a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:61:4d:75:c7:e4:f8:9d:e5:78:26:7b:7f:
83:95:a8:f9:b5:a7:0d:44:74:1e:52:40:65:17:34:
39:b8:bf:d8:ba:3c:d9:28:4c:f2:9d:26:3a:f7:ee:
ea:24:95:a6:0f:15:ef:8a:6a:81:68:14:6b:94:1c:
6a:0e:1b:5a:aa:50:23:60:f0:0e:c1:82:4e:be:81:
db:15:85:06:e5:33:4e:34:5f:56:4c:9a:82:49:f1:
f6:4c:66:65:52:7f:53:ad:4b:7a:94:86:b6:41:a4:
eb:22:c2:33:93:f3:6c:a2:96:31:e3:99:eb:b2:9e:
48:44:e5:63:b1:7c:27:28:cf:c0:c2:64:02:da:dc:
3f:fa:64:9c:ba:0a:ca:17:8b:f6:ac:d0:1b:a2:3e:
b7:e9:48:54:29:6b:3b:23:ca:84:da:d0:b0:18:a3:
be:97:8c:61:4e:b6:e9:2d:b5:a6:09:5c:bf:d1:be:
82:e5:17:06:d5:6f:e5:06:31:10:1d:7d:cb:31:ff:
73:39:16:bb:69:b4:6f:08:b9:86:d0:ad:e6:b8:02:
a3:e3:9c:4a:60:3d:43:e8:08:f0:95:1f:d8:e9:98:
f0:8d:dd:fb:95:20:a2:ed:a3:1c:67:0f:b7:68:e7:
a4:b8:e3:be:df:2f:bd:42:26:c2:19:13:8f:b6:14:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AB:6B:33:BE:B6:EE:97:DF:B7:A5:A3:61:13:C3:3E:75:02:06:9A
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3a:5c:26:06:cc:7e:de:2d:62:5b:3a:31:1b:af:0a:38:34:
ce:cc:3b:0d:91:97:d2:e5:eb:f7:eb:14:a6:91:67:a3:92:b6:
79:1a:8f:02:79:03:b4:c8:a0:fb:03:58:cd:41:24:9d:f1:b1:
26:a0:0f:d3:97:82:44:7e:d4:f5:24:5e:67:cf:fd:aa:f3:a1:
e4:3a:28:be:10:f2:67:e3:98:8a:ba:84:c2:7e:d6:ac:e3:d9:
38:6e:ed:2c:2c:ba:3f:f0:86:40:bf:92:02:7f:9b:09:18:40:
a2:ec:be:c3:9d:8d:93:18:cb:1f:89:c7:71:93:a8:c5:e0:e0:
5f:af:68:ec:6a:34:b6:08:0e:db:2b:1f:55:1f:28:f3:71:bb:
38:03:90:1c:a7:e2:1d:10:96:34:80:06:b2:b5:5d:4f:96:03:
99:76:53:4c:e4:a7:85:41:65:16:94:82:80:fc:11:95:2f:2c:
25:69:8f:9d:9a:a4:27:37:43:a8:0b:51:87:62:7c:39:c3:07:
84:39:fc:6c:22:3d:e8:39:a3:86:9f:82:f1:df:f4:ff:16:42:
65:ec:68:b8:0d:0c:c7:1a:5a:6d:39:3a:6c:4f:1d:df:83:ea:
2b:32:a9:9b:bc:1f:fd:9b:25:af:4a:ee:3a:7f:0d:d9:b6:f8:
67:08:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:31 2025 by rpki-client