
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: 85wU/pT0tvuNEQQeKxfBTrYvEmA5HauO5b7VQbkXCzY=
Subject key identifier: 9B:C7:33:C3:45:20:B7:7A:52:35:19:31:17:CA:EE:4B:E7:9D:A4:6F
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 01987F78B4D46AA6F00DEA7ACD068B7C50DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 13:01:13 +0000
Manifest this update: Wed 06 Aug 2025 13:01:13 +0000
Manifest next update: Thu 07 Aug 2025 13:01:13 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: MLYcNh+VvK3fZjH4mJqIBEj2/tCkPb86aJy35OL3uxU=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:b4:d4:6a:a6:f0:0d:ea:7a:cd:06:8b:7c:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Aug 6 13:01:13 2025 GMT
Not After : Aug 7 13:01:13 2025 GMT
Subject: CN=9bc733c34520b77a5235193117caee4be79da46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:0c:03:18:47:26:03:81:e9:56:58:ea:4b:
32:92:98:0d:38:e6:8c:0d:cc:b9:8e:f4:fa:58:3c:
96:a2:eb:42:89:ac:7a:2f:75:76:91:f8:9d:fe:79:
cb:8c:fe:d8:7a:21:8b:c8:c1:2e:cf:7f:cd:4a:a5:
85:a4:1a:b7:5d:e4:0f:57:19:0b:82:69:62:35:b0:
96:c5:06:35:c4:3b:cc:ad:e7:7b:e5:90:30:84:d5:
05:1e:eb:b3:30:b5:50:5b:ca:15:bc:fb:4d:13:6f:
96:17:89:51:e3:b0:65:3a:ab:9a:fe:db:b8:60:9c:
f9:80:c1:54:0b:3f:28:5e:4f:95:2d:fa:e2:4e:a0:
5f:96:5a:cf:12:ad:58:22:d5:66:08:ab:1f:49:6a:
b9:3f:8d:52:14:5f:66:08:c9:0a:36:74:fc:a6:26:
22:6a:24:e2:7f:68:45:93:22:3b:39:6e:c4:48:e6:
80:04:13:70:ec:da:c8:73:64:45:ce:03:fb:84:06:
ff:d8:1d:18:d3:62:20:ce:fb:f4:1b:6f:61:6e:4d:
49:7e:76:9b:58:2d:41:30:43:dd:cc:55:c5:14:2e:
6f:64:25:ca:9d:3b:61:f9:d9:92:76:a0:56:a5:54:
82:6e:33:b3:83:19:cb:f6:07:99:ee:db:7d:47:ab:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C7:33:C3:45:20:B7:7A:52:35:19:31:17:CA:EE:4B:E7:9D:A4:6F
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:96:d4:19:31:0b:93:67:7f:6c:44:3d:0d:e4:d5:4e:61:b5:
1b:06:9b:02:8b:ef:1d:b2:48:3f:a0:32:66:0b:c3:48:af:b6:
25:15:7e:2c:1b:94:89:20:ea:e5:65:9a:9b:52:d7:03:e2:7c:
7e:bf:19:57:95:52:72:3e:0e:53:3d:57:9e:39:e9:00:3d:f5:
e5:b9:75:5c:d5:d1:bb:66:6b:b2:18:b4:c4:38:7f:3c:f3:d6:
f8:a0:9a:ff:bb:fa:27:b2:46:fe:8c:57:d9:f9:2b:25:3e:3f:
d6:df:b4:0d:73:f6:7f:8f:6d:6d:9f:86:18:c6:80:5d:f4:fe:
f9:7a:44:1c:3c:fd:a7:36:10:81:48:6a:3b:8a:ef:55:f1:e5:
95:11:ee:7b:18:3a:e6:3c:27:b0:5d:be:74:7e:fc:af:ad:c6:
c4:f2:e0:06:7b:29:7a:8c:45:57:cc:09:86:5e:d8:57:4d:c4:
ee:e0:ac:bd:ef:13:d8:bd:92:22:9b:a2:54:47:6c:ce:a3:07:
1d:d7:47:b9:fb:21:32:8b:19:8d:95:59:d2:b2:ba:e7:83:2d:
b8:f2:e0:6e:29:59:63:60:77:14:b2:78:79:95:82:1e:c1:7b:
83:12:e0:17:7e:38:62:78:49:30:53:0c:6b:c3:0f:07:4b:2b:
3d:88:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:22 2025 by rpki-client