Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: 3Sc3WCocWg/85RlWXkhuccEU9GO21TpPKPLwa0vEm+I=
Subject key identifier: A9:B3:72:A1:14:8F:52:DE:F7:FA:F5:9F:D3:9A:92:B6:19:19:49:9E
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 01988AA0973C4B066D2DA90B84DC80497E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 15B2
Signing time: Fri 08 Aug 2025 17:00:36 +0000
Manifest this update: Fri 08 Aug 2025 17:00:36 +0000
Manifest next update: Sat 09 Aug 2025 17:00:36 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: YBAuyHNnTfJiXw7XE3rLAixxVV4SVRiveIn9QlwvOQM=)
2: O3vVokpmMILfLuCvtK11xQ6QzgQ.roa (hash: QJ033XApjs5jTBUXlpnVdiwOxF+/6PemalcFTFglCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:97:3c:4b:06:6d:2d:a9:0b:84:dc:80:49:7e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Aug 8 17:00:36 2025 GMT
Not After : Aug 9 17:00:36 2025 GMT
Subject: CN=a9b372a1148f52def7faf59fd39a92b61919499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:e3:20:89:7e:66:89:3f:5a:a8:78:fc:d5:
09:a2:da:20:84:3d:40:8e:ed:6a:97:be:6a:a0:af:
3f:c4:d1:12:da:40:59:72:50:21:e5:ad:a0:06:29:
cc:ee:c4:f3:86:ed:01:23:98:78:66:a4:7a:fe:03:
02:45:ec:04:5e:d5:2d:ae:a5:db:81:c0:46:39:b7:
ae:e4:20:c5:c1:88:a3:6e:52:f3:f3:11:78:74:83:
3b:d9:8a:2b:20:24:02:b1:d7:89:b5:c5:ea:24:dc:
2d:89:c6:52:43:33:ee:45:2d:ae:e3:88:58:8c:c7:
02:1b:bf:ed:05:ea:7e:06:29:a1:f2:b6:b2:96:33:
6f:a0:68:68:2c:d3:98:13:fd:06:5b:ff:e1:6f:50:
0a:c5:e6:90:32:f5:14:d4:67:cd:bd:d6:ba:f1:d2:
78:81:c4:6d:00:39:fb:15:35:af:a0:7d:d0:ad:49:
8a:81:5d:65:65:53:a0:15:71:db:ff:db:ce:99:72:
e3:19:f4:6e:7b:22:2c:df:80:07:ec:37:68:16:6b:
c4:d2:7d:6f:0f:36:c5:a0:d1:d7:27:cd:fa:23:90:
81:8a:ef:01:90:b7:3d:8e:60:37:a1:44:e5:43:8b:
f5:d1:b8:b1:de:58:1f:31:00:d6:b9:22:72:c3:22:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:72:A1:14:8F:52:DE:F7:FA:F5:9F:D3:9A:92:B6:19:19:49:9E
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:82:e4:21:c1:0a:89:8d:d5:3d:27:62:2f:bb:c8:3e:9c:76:
18:7a:0f:2b:6d:0b:a9:5d:9c:69:3d:d4:2c:42:78:64:8a:3f:
ab:18:cc:3e:08:e6:f6:d3:dc:df:7e:95:c9:a4:29:93:57:2f:
47:4a:c1:b2:86:d8:52:ee:81:dc:9b:79:58:81:be:3a:0f:a1:
4b:63:84:c3:2f:84:32:1f:4e:7e:cf:b9:4e:b5:8e:70:c9:99:
20:0c:ce:c6:10:2d:d8:68:34:68:83:d4:9d:37:88:bc:dd:d6:
ed:28:0c:c3:5f:10:c1:85:e5:34:09:e1:06:a4:bd:7a:38:ba:
38:1b:f9:4a:9f:2c:32:90:d9:5b:e2:6e:26:1e:0c:aa:5e:cc:
e2:f0:44:c9:5f:5a:9b:ba:ad:59:52:15:04:62:34:f5:85:05:
9a:11:f5:4d:2c:af:f1:33:75:64:31:ba:82:7d:7d:8b:81:d6:
d9:f6:f8:ab:cc:52:2d:7b:8a:93:0b:1d:07:81:e3:1e:2e:b2:
c8:da:39:ae:f7:90:8a:92:da:c4:a0:4d:a8:e5:47:68:c2:9c:
5d:13:e5:bf:28:07:91:39:72:78:5d:11:37:b3:c8:32:a9:cb:
9a:04:49:e3:56:18:59:36:48:07:0f:91:10:67:02:10:51:6c:
e4:79:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:27:06 2025 by rpki-client