Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: RIXsYA4cTctVFOt933Ndqok8pgoK8p7oe+H8VrIMcxs=
Subject key identifier: A6:E1:8B:4B:55:95:2E:86:27:72:EA:D4:0F:C6:2B:9F:A1:FA:46:BE
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 01989411AC988E06B2A6F83728914E0EDD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0C59
Signing time: Sun 10 Aug 2025 13:00:42 +0000
Manifest this update: Sun 10 Aug 2025 13:00:42 +0000
Manifest next update: Mon 11 Aug 2025 13:00:42 +0000
Files and hashes: 1: 5sCkK7bklit8UCUa80RZqIi-t9k.roa (hash: x447DPcTaj4M634Ku+wuq5YFVtP2ChxFRDLcvpSmPLg=)
2: B2JmCPoyhnai-DrPu98QS4-q4eY.roa (hash: woSQjHInZQrl0IFraZgxQZSnFc0QedADaWjQdsYiLbY=)
3: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: Ks+tRRwQetcXFYcTVNB9LcFbBsc3nJnxC2bL98RK+VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:ac:98:8e:06:b2:a6:f8:37:28:91:4e:0e:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Aug 10 13:00:42 2025 GMT
Not After : Aug 11 13:00:42 2025 GMT
Subject: CN=a6e18b4b55952e862772ead40fc62b9fa1fa46be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:d2:35:55:f6:8e:a0:92:b1:ca:86:6e:3e:
07:38:b0:3b:a7:22:38:10:dc:e8:34:fc:38:0e:28:
ac:b0:85:44:98:a4:e9:97:a0:e7:5c:48:a1:fd:42:
0c:35:a2:bf:4a:5c:84:00:2a:c5:64:58:36:40:b2:
54:18:76:89:bf:62:7d:02:bf:fe:f7:d9:87:13:d3:
ac:40:82:99:11:ec:b7:1e:1f:e7:86:4f:07:99:62:
3c:06:67:b6:17:45:0d:2f:ef:ae:c4:d1:84:f8:ff:
32:54:e7:a5:30:77:49:29:2e:a6:55:a6:78:60:ce:
e6:5f:70:47:a4:78:4f:0b:b0:bb:2e:ab:a5:24:e5:
51:3e:6f:e2:f8:bf:18:60:35:a9:da:38:ec:8f:4a:
3d:1f:57:da:bc:67:1f:13:00:9a:2e:a1:ab:98:26:
0a:fa:47:96:77:86:b6:01:c2:f1:ec:04:1b:73:18:
48:a3:f8:a3:40:b5:79:6d:fe:73:b9:ff:9a:13:55:
89:83:41:9f:8a:d2:3c:dd:f8:72:39:94:0d:f1:c1:
8e:04:33:e8:2b:c8:8b:08:55:38:66:01:7e:46:63:
7e:3b:cf:2a:ef:8a:c0:fd:83:17:7b:ca:67:91:d5:
f2:42:d9:43:bc:71:4e:93:0b:84:b5:9b:c0:7d:5a:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:8B:4B:55:95:2E:86:27:72:EA:D4:0F:C6:2B:9F:A1:FA:46:BE
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:f6:32:4e:93:54:ec:aa:17:15:9d:60:64:36:9c:7b:2b:4d:
c7:87:0a:58:3c:d2:ce:55:c6:f0:44:32:ea:eb:fa:d7:e5:4d:
d4:fc:03:93:2f:17:f5:1c:ce:8d:ea:d2:82:19:a6:77:d0:64:
93:a3:b7:23:00:50:9c:6e:69:6b:97:ff:94:ac:aa:c7:84:15:
24:12:2c:93:f8:59:7f:20:a2:0a:aa:34:95:19:7f:8e:6c:18:
94:f4:92:8d:96:d4:71:4d:a3:d2:53:8c:7e:0d:f2:c2:62:3f:
19:d7:cb:0a:e3:ad:dc:fc:43:d7:4e:a1:e3:6b:b8:ee:f0:3e:
51:b8:7d:f6:90:cd:69:11:ea:14:be:90:7f:b1:2f:56:9f:b1:
f1:52:30:ef:b3:34:83:f3:be:a5:19:0c:51:46:24:4c:80:b8:
9f:90:2f:93:28:5e:ee:6c:64:c9:e0:56:84:90:11:e8:91:3c:
a6:37:d4:05:fa:3e:e7:37:3e:52:9d:c6:c6:5f:2b:a4:35:09:
a8:19:c4:f0:2b:c9:6c:67:bf:76:e2:c1:ae:41:d5:6d:be:92:
46:69:87:1e:9d:45:3c:a0:c0:d5:05:77:8e:89:72:4a:f5:86:
9f:0f:f3:06:b1:54:e5:82:c2:d2:64:3f:cc:32:14:93:62:a7:
b6:3c:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:59 2025 by rpki-client