Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: ChfBf2soBEy94dvKhHo5Gh/CKPKOBPIXBv40uJdj9wM=
Subject key identifier: 43:06:1D:74:B2:35:AE:D7:B1:22:44:36:17:A1:F2:9E:87:FE:13:7C
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 01987FE699C05CE1BA98B9EDFA0AAA071692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 0ACB
Signing time: Wed 06 Aug 2025 15:01:15 +0000
Manifest this update: Wed 06 Aug 2025 15:01:15 +0000
Manifest next update: Thu 07 Aug 2025 15:01:15 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: czgM1HlytH6VvPuQ+rNlQjqG8bNyyEjb4828dDeA2Vs=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:99:c0:5c:e1:ba:98:b9:ed:fa:0a:aa:07:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Aug 6 15:01:15 2025 GMT
Not After : Aug 7 15:01:15 2025 GMT
Subject: CN=43061d74b235aed7b122443617a1f29e87fe137c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:e6:f5:e2:ce:56:30:cb:c6:72:11:cf:a4:
cd:f6:d9:f5:9f:56:41:88:ea:86:c3:84:98:6d:27:
99:23:12:35:16:2a:b2:a8:96:e3:69:b6:7f:e2:03:
6c:0a:a4:bd:f6:3c:e7:9c:89:99:80:94:7b:71:f0:
9b:9a:d0:5b:c6:f5:f8:74:e9:ca:3c:d5:c6:f8:1d:
51:4c:00:90:5d:a2:19:68:a1:e3:3c:f9:df:2e:47:
d5:48:f9:1d:e1:7b:63:2f:7c:08:7a:d0:f4:7a:35:
2d:30:25:34:00:65:05:b3:ee:c5:8c:d8:97:b3:05:
68:fa:08:31:dd:3b:b7:b7:8d:c9:80:c6:02:b9:eb:
0d:42:2c:20:be:c9:1a:da:f5:3c:a9:56:7a:0a:df:
e0:77:39:93:82:34:9d:c6:49:22:75:ce:4d:cd:99:
c3:44:ed:91:4b:88:82:41:df:bd:dc:b7:21:dd:d4:
81:f8:80:1d:db:2a:2b:1e:3b:fa:bd:1e:d8:4e:9d:
f9:88:75:2e:33:cd:86:6f:7e:60:89:67:7f:33:c3:
0f:2e:88:72:31:9b:2e:0c:4b:73:f9:15:05:13:fc:
29:46:08:41:c3:6b:90:d5:c2:b7:b4:66:96:95:d1:
e6:b0:30:8b:54:3a:5f:90:d2:a5:30:fd:5e:f7:32:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:06:1D:74:B2:35:AE:D7:B1:22:44:36:17:A1:F2:9E:87:FE:13:7C
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:79:1f:1c:18:9c:e4:eb:b0:e7:7c:46:de:c6:a2:cb:0a:
69:c9:21:9a:37:5f:56:e5:18:b6:0f:97:dd:80:23:fc:b6:58:
c1:c8:59:37:ec:be:70:6b:61:40:d6:fa:9d:2a:36:71:29:c7:
c4:fb:a6:a4:82:dc:ea:42:ec:cf:6a:c7:39:c8:64:8a:93:82:
83:60:6d:47:0a:88:3d:8a:62:f2:37:ad:00:d3:ac:93:ea:71:
d3:d8:d6:96:84:24:34:59:64:fd:68:cd:f4:c2:de:7a:7b:69:
d5:d3:e4:fb:66:0d:4d:5f:f5:f4:9a:6f:24:db:bf:8f:5b:af:
55:43:58:8d:fc:0f:a8:4f:78:e2:ce:ab:f5:28:7d:58:a2:cb:
83:f9:b1:d5:04:fb:e6:2b:8b:e8:a1:34:45:aa:39:9d:17:18:
a4:9c:69:02:23:3c:48:4e:18:5a:66:0d:0a:28:10:15:7c:26:
aa:50:be:2d:66:07:4e:e8:a5:c4:25:b0:40:bc:09:64:ea:7a:
5a:a6:34:b5:d1:3d:ca:b6:7a:69:19:aa:4b:de:41:35:96:12:
ef:f8:38:95:78:14:c4:75:e0:8a:76:0b:b4:e2:1a:b3:04:bf:
35:f1:96:71:91:f0:dd:7e:48:fc:90:40:89:7d:4f:af:5b:ae:
c1:41:7d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:30:02 2025 by rpki-client