Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json)
Hash identifier: OjNebs3OHZLXMrf0BRlBybnzJm21W2YbmGPiuZK/9is=
Subject key identifier: 2E:52:AC:6E:D3:E8:FD:66:EB:20:2D:7D:C5:80:00:77:92:5B:50:85
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial: 01988F594CB465C723FBD5BC5DF221320226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
Manifest number: 03CE
Signing time: Sat 09 Aug 2025 15:00:50 +0000
Manifest this update: Sat 09 Aug 2025 15:00:50 +0000
Manifest next update: Sun 10 Aug 2025 15:00:50 +0000
Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: rI20fiEubeLdWBQD8X5nTXFeRYU3tPKLtwMRKTsN12Y=)
2: pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa (hash: pNc3IO7oSLkfW6eqPtj4TJMlIbS8z2hqWPYZAIIHzEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:4c:b4:65:c7:23:fb:d5:bc:5d:f2:21:32:02:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Validity
Not Before: Aug 9 15:00:50 2025 GMT
Not After : Aug 10 15:00:50 2025 GMT
Subject: CN=2e52ac6ed3e8fd66eb202d7dc5800077925b5085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:ae:73:cb:11:7f:55:03:03:0d:50:db:ab:
4e:22:10:99:76:5a:94:e4:dd:2a:18:10:cc:27:69:
61:f1:ec:80:2e:24:fc:ff:fc:5d:89:52:df:54:1a:
38:35:f5:05:96:f3:52:7f:2e:45:6d:f1:19:d9:51:
04:d5:ec:fc:a4:09:dc:3b:11:de:49:71:02:44:98:
59:fe:b9:11:c2:f5:60:62:ee:5a:db:ea:db:18:36:
83:31:4b:57:bb:a3:a5:35:90:bf:e8:fe:5f:74:18:
64:9b:49:dd:58:44:3d:99:5c:cf:29:32:86:77:4e:
48:47:5a:40:47:81:68:46:5e:94:28:a9:d9:84:dd:
d5:26:dc:8b:bb:29:90:d2:82:72:9e:46:12:df:4f:
fc:3b:b2:30:a3:3e:5f:31:d3:a4:4c:a7:8c:78:15:
ca:fb:1f:3f:0e:9a:5f:03:21:18:2e:af:34:e6:cc:
cc:a6:da:8a:f0:a7:58:f2:01:99:e1:c7:6f:c2:6d:
ba:d4:17:7e:68:6f:48:69:62:6d:5a:ad:17:ef:74:
e5:35:86:6a:b5:c7:5f:c3:17:89:1d:82:59:9e:92:
ef:75:76:fd:25:39:2b:e2:e6:f2:55:b2:a4:8a:80:
9b:71:ba:b4:51:fc:07:8b:dd:42:49:60:e4:0f:97:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:AC:6E:D3:E8:FD:66:EB:20:2D:7D:C5:80:00:77:92:5B:50:85
X509v3 Authority Key Identifier:
keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fd:a7:8a:01:13:3f:af:a1:0c:9a:77:88:c3:7e:21:17:62:
35:13:60:2d:ee:be:9f:75:4c:4c:ae:8c:f6:0a:28:b3:1b:43:
94:b7:7b:c0:73:38:82:8b:1a:cf:46:48:d4:18:e8:49:d4:b5:
68:4b:f0:7a:63:e7:69:ff:ac:f7:4a:10:c0:6b:c9:d8:b5:a4:
75:bf:0c:11:44:23:8f:ea:24:b0:79:a9:bd:56:40:fb:0e:91:
ae:8d:8f:75:c0:d6:48:22:88:86:08:df:cd:34:ef:8c:34:0c:
87:24:b4:84:68:60:02:87:1c:d9:90:c2:10:1f:ff:96:d6:f8:
be:a6:00:ce:34:71:1a:cd:83:44:5e:51:b3:0c:5f:5d:2d:d2:
cd:e1:b9:59:ef:36:28:79:be:cd:45:21:ea:87:84:29:0e:e2:
82:e1:7d:ae:48:cd:fb:4c:78:a0:93:4f:e6:12:6b:65:e1:8c:
b6:63:ad:eb:cc:a8:f1:28:a6:88:8c:51:29:79:54:52:8a:0f:
34:d6:86:8d:18:dd:93:01:45:be:25:28:c1:b3:dc:4e:a3:7d:
7b:b2:df:9a:b6:6b:fd:ac:e0:71:ee:cf:2e:d3:10:7d:44:0e:
44:37:1f:f7:37:0a:2e:3e:a7:7c:2f:0d:29:0c:df:2f:74:c8:
0b:de:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:33:06 2025 by rpki-client