Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: DKQiSnqK60urVn1C5A0iNSeQJfn5FscZE3AFjiMeDt0=
Subject key identifier: 78:29:43:55:03:3F:7D:3A:18:9C:AA:CB:74:4A:F0:55:3A:99:4E:09
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019896A52AC24000B3F44AE6A9FDC7840D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 15B9
Signing time: Mon 11 Aug 2025 01:01:03 +0000
Manifest this update: Mon 11 Aug 2025 01:01:03 +0000
Manifest next update: Tue 12 Aug 2025 01:01:03 +0000
Files and hashes: 1: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: g2R8VXtHYJsmkNmN8KjJKq27PWzD5+M5L14NhHKx04w=)
2: _ryT7JJRyl2zbDlcHLiieOVaWDE.roa (hash: aYopHcEKoiKmgUw0u7ZqiunqjMA1+tPcCa/wAYiX86g=)
3: cmxdqS626N731JSDXMkhCrtA4_Q.roa (hash: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:2a:c2:40:00:b3:f4:4a:e6:a9:fd:c7:84:0d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Aug 11 01:01:03 2025 GMT
Not After : Aug 12 01:01:03 2025 GMT
Subject: CN=78294355033f7d3a189caacb744af0553a994e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:e0:38:17:f3:c0:35:97:4a:5f:16:25:56:
f4:5c:01:f8:d4:fb:1e:6b:8e:29:10:9b:3e:07:bf:
3b:2e:d2:9e:a7:0b:36:eb:52:69:83:de:7e:ca:06:
39:59:6c:fb:e8:9d:10:37:c9:2e:78:30:30:35:77:
71:14:8a:c4:ad:53:e4:49:21:0b:3e:20:79:94:41:
11:16:b9:ee:57:5c:3f:2b:26:34:8c:9b:2b:09:ac:
98:e0:2f:e4:92:6d:aa:fd:ea:24:cc:2e:3f:2c:c7:
96:51:9c:c5:0a:53:75:ae:44:65:2a:fd:67:02:08:
ed:ba:05:5a:ee:b5:6e:22:90:75:4b:46:13:2a:de:
7f:25:9a:d6:0e:44:16:e3:10:68:c0:5c:91:1f:aa:
49:73:4f:93:f9:4b:72:a2:16:cf:ff:c2:7c:f0:16:
26:38:4c:c9:5e:be:76:09:59:7e:61:36:31:8d:7e:
4b:57:e5:9b:fb:bf:af:e4:a9:56:41:8b:20:96:ec:
8a:e5:77:2f:7c:c3:19:70:bc:14:8e:d8:2d:d7:eb:
07:87:37:1d:31:2f:65:31:f1:06:39:a3:2e:14:23:
21:56:8d:46:0e:97:74:22:a4:d6:cb:05:74:72:2c:
4d:30:96:2d:9c:80:3e:a7:67:93:57:7f:f3:c7:b9:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:43:55:03:3F:7D:3A:18:9C:AA:CB:74:4A:F0:55:3A:99:4E:09
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b0:48:04:58:6e:6f:83:1d:82:fa:a6:f0:20:52:ef:a3:17:
83:4d:1d:84:0d:27:0c:2b:a5:e3:fe:47:89:75:63:52:ba:65:
96:d2:36:54:be:48:0e:7a:62:2f:f7:e0:32:80:c0:cd:68:95:
12:4d:9e:7e:04:42:aa:95:dd:8f:d3:c3:89:1e:01:9a:78:d6:
4b:0e:ff:2f:0f:b5:41:88:a0:2f:d1:1a:11:88:61:8d:94:0d:
27:e9:c1:3a:fb:c4:f6:11:e8:a7:cb:77:45:8b:d2:3f:99:da:
29:23:44:c8:ab:40:94:5a:16:d8:97:16:d2:92:22:b1:7d:02:
84:4a:73:f3:0c:2f:ad:7e:f4:02:29:c4:31:c0:45:3b:40:49:
67:f0:59:c9:bc:f9:6f:6a:b8:6e:47:36:02:34:56:7b:d9:f5:
d3:e8:89:a5:5d:88:9f:0f:e3:65:92:d6:20:0b:ec:ed:15:93:
a5:e1:11:01:53:0e:f8:73:06:ce:f9:f8:ad:b9:5d:d8:05:85:
18:7b:04:23:9e:d8:1d:e0:11:3e:14:56:ba:26:d6:dd:ec:e8:
ca:56:52:f4:b2:75:c2:ec:b4:a1:f3:0f:79:c4:6f:38:18:ab:
a1:85:15:a3:1a:95:02:80:65:a5:46:3d:95:86:09:94:39:e5:
59:71:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:19 2025 by rpki-client