Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json)
Hash identifier: UV8BSkt2sYB8Bh2yHI3ckfMUHN98feD+I77xAtMMjGM=
Subject key identifier: 04:4F:11:50:D6:F2:04:1A:AA:83:96:C5:77:CC:10:7D:3C:51:1A:7B
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 01988E7D8B2D4B8FBD0CBB2B33139F9D570D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 11:00:48 +0000
Manifest this update: Sat 09 Aug 2025 11:00:48 +0000
Manifest next update: Sun 10 Aug 2025 11:00:48 +0000
Files and hashes: 1: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: OS227MWFlwWpnWs4lsyuMtQQ+I8nXpL1WuJr1mhgqbc=)
2: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (hash: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=)
3: gf-ztZnGBMD3gis8NYuG9N92sfw.roa (hash: ehCASISZ7Fk/s7piTjFKUNtpfPH5xpu2BhLg9f7INf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:8b:2d:4b:8f:bd:0c:bb:2b:33:13:9f:9d:57:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Aug 9 11:00:48 2025 GMT
Not After : Aug 10 11:00:48 2025 GMT
Subject: CN=044f1150d6f2041aaa8396c577cc107d3c511a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:02:8f:d3:83:65:f0:28:2e:3a:71:46:38:
72:7b:98:c4:b7:cf:59:d6:75:04:3f:a9:4f:de:5a:
10:94:05:bf:21:32:59:9a:2a:c0:a2:92:1e:f9:d4:
f9:45:79:86:33:78:22:42:b7:9b:4b:6c:68:aa:d7:
48:55:3a:2b:15:95:3e:33:bf:bb:22:31:60:60:62:
b5:04:1c:c5:fc:91:ce:ca:0a:ae:22:7f:90:f0:bb:
02:00:1a:c1:b7:04:e6:bc:e7:c2:a1:cb:fe:7a:d1:
03:6d:82:aa:cd:ea:83:3b:76:b3:c0:30:67:d3:0a:
a8:17:63:6b:69:77:1a:29:72:27:1a:2e:d7:0c:26:
45:35:2e:1c:8a:b0:04:bd:a9:0c:2a:8a:bc:a5:dc:
41:07:47:80:92:f5:fb:f4:e0:d7:b1:be:56:fe:93:
2e:76:db:fb:01:cd:50:be:91:b6:0f:4b:cf:9e:41:
b0:30:bd:8b:77:dd:30:d1:66:77:9d:4c:38:86:06:
a2:96:cc:1a:e8:90:f2:8e:56:77:b7:2a:92:e3:6f:
80:5b:2a:4b:6d:82:c1:83:18:1d:5d:2d:7f:36:be:
18:85:eb:85:c2:4c:a4:cb:da:b3:39:1c:ca:4e:10:
9a:18:52:27:8a:f4:58:8b:15:34:97:a1:c6:ee:e1:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:11:50:D6:F2:04:1A:AA:83:96:C5:77:CC:10:7D:3C:51:1A:7B
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a0:4d:16:40:e9:e2:52:c9:64:7c:9a:d0:9d:0f:21:85:05:
8f:e8:20:f3:85:dc:0e:06:63:e1:aa:f0:dd:35:94:6e:79:99:
5a:aa:8e:ce:7a:4a:79:52:55:b4:eb:4a:f6:07:c2:2f:52:b4:
49:d3:ce:fc:0d:45:c2:d1:91:02:58:82:fe:d7:7f:fd:6f:97:
43:90:05:30:9a:40:03:96:2f:95:77:d3:8b:ce:f3:76:cd:f3:
4f:cc:54:d8:8a:47:cf:32:48:70:40:9c:8b:86:50:88:a5:e7:
df:52:1d:4f:27:ee:00:00:e7:f2:e6:cb:5c:43:e5:e3:6b:c4:
20:25:76:b1:f7:73:84:63:cd:28:93:75:56:b1:f4:8c:e9:57:
67:c9:99:6c:00:80:03:51:0a:fc:95:74:3f:b7:36:ce:ea:64:
ed:86:df:20:c6:c2:a5:b0:e4:d1:2a:c1:2e:d3:9b:3d:e4:80:
b0:7b:39:13:13:7f:1e:d2:5b:de:71:83:1c:3a:8b:f1:56:f4:
f2:5e:db:5d:36:b7:39:e0:ba:12:02:a0:bf:2e:e8:33:24:db:
90:e2:25:b9:aa:e5:57:45:56:90:9c:40:19:56:4d:59:0a:e6:
25:72:95:b8:a2:b0:f3:bb:25:b5:74:6b:88:49:b3:aa:3c:2e:
31:bf:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:04 2025 by rpki-client