Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File: FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier: qDhilnSvyxkVLrMZAY77WYP8m2nRxbNZ54M3WBiSlpY=
Subject key identifier: A5:F9:CF:0E:CD:4B:7E:56:82:8F:5B:3D:C9:D3:D9:5E:3B:F9:E4:CB
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial: 019872CF1C41F6680FBFBCDA3FE027D04804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number: 11B2
Signing time: Mon 04 Aug 2025 02:00:32 +0000
Manifest this update: Mon 04 Aug 2025 02:00:32 +0000
Manifest next update: Tue 05 Aug 2025 02:00:32 +0000
Files and hashes: 1: E3L5dg5X3rqNLqYU8O9X1WsszW4.roa (hash: OcbMuDrIfD/A7RNsLFSYw+FRN5f4hK+YArdJTnwQdlk=)
2: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: Zi1T8zMQPJXoPa5YRZXWSEYCnFPxgI2WTruvZ4+m6vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:1c:41:f6:68:0f:bf:bc:da:3f:e0:27:d0:48:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Validity
Not Before: Aug 4 02:00:32 2025 GMT
Not After : Aug 5 02:00:32 2025 GMT
Subject: CN=a5f9cf0ecd4b7e56828f5b3dc9d3d95e3bf9e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:8f:00:97:92:0f:95:24:75:36:fe:7b:66:
aa:6b:a7:38:2d:e1:e8:79:0b:15:ba:db:1f:6f:d5:
92:49:4f:03:64:d0:68:8d:52:b3:66:5d:bf:97:9a:
6a:04:39:81:93:86:30:a1:84:00:a3:7b:51:d3:84:
cb:02:58:77:08:1e:78:3d:35:01:0b:75:68:a6:e3:
fd:ce:07:b9:f7:cf:0e:b2:c8:73:f9:88:3a:ca:de:
cf:73:15:93:cd:c8:68:5b:bb:df:31:12:81:c3:4c:
68:d0:dd:e3:7a:ad:69:76:cd:7b:b3:be:3c:af:c1:
3d:1f:43:53:6a:80:72:86:d0:0b:cf:c0:42:ef:22:
3b:ea:39:10:18:8e:d6:4f:de:12:65:8f:dc:1a:d5:
03:95:52:8f:4f:ea:aa:6b:76:2b:18:1a:84:34:33:
76:fe:a2:92:13:7c:a9:24:8c:ea:7c:c2:c4:0e:95:
65:3f:84:84:b1:a2:05:cc:64:16:16:1e:c1:07:0f:
46:32:da:fa:4d:a5:70:f3:26:d0:25:da:09:18:c2:
a3:d9:a6:52:2a:a1:fe:d6:a3:b7:a8:2d:eb:81:ae:
b9:42:2d:09:d5:d7:97:8b:df:59:26:31:5b:6e:c6:
14:b2:85:49:31:f5:96:a2:c6:cb:6b:c2:5f:dd:f1:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:CF:0E:CD:4B:7E:56:82:8F:5B:3D:C9:D3:D9:5E:3B:F9:E4:CB
X509v3 Authority Key Identifier:
keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1b:07:fd:16:19:bc:d7:6f:be:5a:1d:99:57:0e:0b:b0:2d:
9d:67:03:1f:84:b6:fb:c8:1f:ef:18:ca:75:b1:14:93:52:64:
e8:81:01:fa:63:f0:3a:36:01:7d:66:ab:6c:20:70:40:e4:e7:
0f:90:50:44:dd:8c:b3:54:e8:c5:25:13:bd:52:36:65:0a:24:
81:30:0c:0e:64:24:7e:e3:9c:1c:4e:02:23:7b:d4:73:ef:01:
69:ac:b6:4f:e5:42:4c:d0:f2:b7:99:ad:4a:49:9c:ac:6c:06:
15:41:f6:0f:ea:8f:c1:1e:cf:8c:ce:89:58:fc:ae:b3:12:08:
0d:b3:61:10:a1:f0:b4:aa:98:0d:62:e9:ec:99:09:71:eb:7f:
a2:90:b0:36:96:25:fa:4c:ca:89:1e:06:aa:a4:e6:f6:49:95:
fe:dc:43:0d:91:e9:5c:54:c2:a6:f7:30:c0:4e:19:bb:67:96:
78:b8:ca:74:b1:13:a2:3e:2d:b1:14:73:81:01:77:fa:19:8e:
2d:3d:48:b5:bc:8c:8c:80:bb:e6:17:c4:ee:61:02:1a:b9:85:
a3:a8:62:37:a0:1a:c4:09:bb:ae:6c:d9:cc:b3:33:d2:42:e0:
cb:8d:cb:7a:cb:ae:0a:ae:ae:35:72:55:90:c9:3b:86:e6:38:
6a:6d:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:30 2025 by rpki-client