
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: lgIIXN+nSAcOUjxDv99xMkPCq2ZT7q865EkFdWRsWk8=
Subject key identifier: 54:F2:E1:53:91:57:C7:D6:4A:4A:73:B0:74:3C:FC:43:D9:26:2F:C8
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 019893DB30DEDA7B9FF3E94687A867988083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 10EC
Signing time: Sun 10 Aug 2025 12:01:12 +0000
Manifest this update: Sun 10 Aug 2025 12:01:12 +0000
Manifest next update: Mon 11 Aug 2025 12:01:12 +0000
Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: DC+mzj6zuE0UOisVHxaKcprpO5mucYGt8Fwd2sVOpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:30:de:da:7b:9f:f3:e9:46:87:a8:67:98:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Aug 10 12:01:12 2025 GMT
Not After : Aug 11 12:01:12 2025 GMT
Subject: CN=54f2e1539157c7d64a4a73b0743cfc43d9262fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:0e:9d:07:47:db:4d:8e:fa:41:87:b2:40:
c3:7c:da:95:70:68:0a:e7:90:ff:79:48:5d:25:bd:
8e:39:8c:e9:fa:dd:9f:3d:2e:66:87:98:c9:10:03:
f2:7c:93:44:17:74:b8:ba:35:96:df:33:0f:30:7f:
12:32:4e:78:4b:93:a0:c9:13:5a:55:6c:43:25:51:
ae:f4:cb:51:97:e2:c9:bd:90:33:74:fe:70:c4:20:
0a:cf:af:25:87:11:a6:60:24:a3:34:f0:9b:e2:8c:
a3:ef:81:cf:8d:65:78:61:bd:72:26:c4:ec:0b:80:
76:1e:4d:8d:52:cc:9c:f1:dd:be:ac:49:2f:56:44:
01:dc:b3:15:6c:b8:9e:47:e8:33:1c:2d:91:a4:21:
e1:ab:08:58:3e:4e:74:91:d3:e3:2c:bf:4c:78:a5:
ac:fb:92:3e:1e:5c:ec:1e:76:b5:ba:83:5c:b2:bf:
21:4d:8e:6a:81:1c:3c:af:ee:76:cd:f4:a1:0f:94:
fd:89:af:bc:7b:f7:61:8d:d3:9d:3c:4b:35:c7:cf:
03:32:a4:ad:92:29:76:79:9d:48:4f:cc:60:8f:11:
10:c2:ba:9c:fb:f2:0e:0d:d4:48:7a:c9:d3:5a:cc:
2d:ec:70:11:c2:27:4c:b9:8a:ad:d5:3f:7f:4c:50:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F2:E1:53:91:57:C7:D6:4A:4A:73:B0:74:3C:FC:43:D9:26:2F:C8
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:88:91:b5:5b:3d:e3:14:0b:07:1c:13:e1:ba:e5:c3:90:55:
22:84:a0:16:ea:6b:ef:3e:51:45:5d:20:ef:4f:12:88:6e:0f:
5f:bf:c1:87:00:31:66:c5:98:71:02:a6:69:dd:87:cf:74:33:
4e:98:47:62:ed:ab:3a:7e:66:ac:7e:49:8c:cd:6d:a6:b0:64:
c3:34:59:c9:87:d7:bb:ee:d9:f2:8c:45:4f:ec:4d:5d:81:80:
15:f9:3a:7d:22:a8:62:1a:f8:a6:a6:0e:88:ed:30:01:d3:12:
3a:82:43:e4:af:d6:99:5f:0b:52:db:97:6f:7a:3f:8c:99:7a:
c3:5f:3a:7e:fe:85:fe:76:d9:e3:28:f0:d3:22:e8:34:f2:25:
0f:aa:f9:14:bb:47:93:74:f3:92:49:1d:24:e4:e3:88:e8:56:
2a:2b:36:e0:f3:01:20:ec:1d:ff:1d:89:cc:e4:73:7c:c9:57:
12:df:c2:86:69:9d:d1:03:40:df:7d:8f:8e:3e:5e:b5:79:ad:
e3:38:8c:90:16:61:9f:41:1a:fd:5c:e3:60:ec:07:e3:b8:f6:
44:86:1d:b3:d4:31:eb:95:19:4f:99:71:70:f2:1f:c3:7b:ba:
e9:e9:48:87:0f:28:52:63:47:c9:70:71:b2:4b:a6:ec:20:e3:
1a:7b:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:40 2025 by rpki-client