Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: +tEx8MnR4wu8pSox9iZa2KcWDfYV7wMovtQUJ6diboU=
Subject key identifier: BE:FE:78:3E:7F:97:0F:AD:0C:EE:BC:AC:8A:56:3F:66:73:EC:CC:CC
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019896A4B5A222C434A78825EC6B3D116B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0F15
Signing time: Mon 11 Aug 2025 01:00:33 +0000
Manifest this update: Mon 11 Aug 2025 01:00:33 +0000
Manifest next update: Tue 12 Aug 2025 01:00:33 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: g2hzDarta5hN4cDB5la9KWqoQQu/v6uRhGcIo4BYZxw=)
2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:b5:a2:22:c4:34:a7:88:25:ec:6b:3d:11:6b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Aug 11 01:00:33 2025 GMT
Not After : Aug 12 01:00:33 2025 GMT
Subject: CN=befe783e7f970fad0ceebcac8a563f6673eccccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:9d:50:c9:77:3b:5b:4c:7f:ab:71:b7:04:
4f:e2:16:44:02:71:95:e2:9f:c4:78:1f:5a:47:ca:
67:2c:a6:48:ee:85:ac:01:87:cd:9b:05:8f:c1:12:
48:a5:cb:1d:1f:a8:47:32:32:dc:d2:14:dc:43:92:
74:2d:ce:5b:db:b1:dd:c1:2c:ef:11:c4:79:2f:d6:
4a:f5:99:a2:02:c7:4f:cc:f3:e3:0a:65:e4:7c:bd:
a5:3a:ad:75:16:63:84:c2:15:b4:63:c3:fb:14:f9:
31:27:bb:48:d5:2f:b9:d3:d4:1f:41:e9:11:3f:b8:
59:27:87:08:2f:ab:53:1e:c3:13:75:06:55:b6:9b:
7f:7a:fa:5a:ae:b8:9d:6a:7d:9b:b5:77:c8:c9:b2:
fe:0e:7a:fc:f5:24:ee:9b:5b:ca:9e:6b:76:68:06:
2f:d7:e5:e3:c0:42:15:30:a8:2f:50:66:59:c4:c2:
c7:da:16:db:03:f9:c4:b5:be:1d:43:1b:87:4b:d0:
4e:c9:75:d2:2f:e0:4a:22:c1:0b:3b:94:57:98:b3:
43:e3:e7:f1:a6:d6:db:4d:06:ae:d0:2c:75:ca:ef:
50:a5:5d:99:e4:25:55:8b:ca:8b:69:9c:15:81:26:
43:eb:aa:14:ba:20:95:90:ca:eb:26:b6:57:ca:20:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FE:78:3E:7F:97:0F:AD:0C:EE:BC:AC:8A:56:3F:66:73:EC:CC:CC
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e4:df:3b:59:99:fb:03:fd:87:7d:8b:b4:7f:9a:6a:4a:6f:
23:d9:b4:22:a7:e3:51:1a:14:b9:5f:5e:66:39:7c:42:be:9f:
cc:79:70:f9:ca:46:38:e2:d2:93:5d:8f:06:0d:b4:9a:12:45:
45:fc:50:36:8d:c4:fa:46:54:03:bf:36:15:6e:f3:cf:57:87:
03:7c:e6:99:eb:ed:3e:4f:c5:b3:ae:90:52:85:dc:4c:aa:a2:
45:06:09:69:df:0b:22:ef:7c:fc:df:3c:e0:c2:73:69:0e:33:
ad:96:94:b9:bf:a9:9c:3e:4f:67:cf:13:8b:06:5d:f3:c8:60:
f1:af:a9:13:87:f3:33:c3:b1:fd:ec:7c:10:16:6c:79:e9:de:
0f:57:67:fa:27:bc:5b:c1:04:97:08:5b:76:5d:e1:36:49:f6:
41:90:57:70:da:37:d3:5c:c7:49:d1:df:56:b4:6f:43:20:47:
4f:50:4c:3e:20:d9:7a:3a:a1:27:39:41:7f:87:b0:69:40:c5:
d5:4f:db:ed:af:88:0c:eb:67:db:c0:a9:9c:fb:a7:63:2e:ac:
34:02:b5:44:d5:9a:d5:0f:e4:3c:6b:f3:ca:49:25:16:da:a6:
a9:d8:1f:ee:92:68:55:c2:c9:cc:a4:a3:85:25:bf:5c:a6:21:
a9:e5:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:32 2025 by rpki-client