Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File: FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier: lxPW1svT5RR+GCJADS6AKcfxg6/RfldXQXKHursMi84=
Subject key identifier: AB:CD:59:08:39:DA:F9:ED:AC:45:47:7B:F1:19:90:07:E6:A4:2F:19
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer: /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial: 0198D70609C5BEC35947366152446D9F89DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 13:02:33 +0000
Manifest this update: Sat 23 Aug 2025 13:02:33 +0000
Manifest next update: Sun 24 Aug 2025 13:02:33 +0000
Files and hashes: 1: 64zRShTV31-oIpx-wKCS8H98LZE.roa (hash: BgDFhrJmyJFk7YH+jYYjlsS94cvZOyBrU+0fh461ZcY=)
2: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: lX1xeF/RaaAP2RAhxUsTz2Y9nLKR04eE6fOkkgT1skw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:09:c5:be:c3:59:47:36:61:52:44:6d:9f:89:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Validity
Not Before: Aug 23 13:02:33 2025 GMT
Not After : Aug 24 13:02:33 2025 GMT
Subject: CN=abcd590839daf9edac45477bf1199007e6a42f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:42:af:77:b0:ef:89:fc:2a:53:49:fb:8d:
e2:52:62:ef:15:13:3a:91:58:c1:70:1a:78:cb:17:
85:90:93:8c:21:2c:42:b7:e6:45:d9:ad:81:37:fa:
09:dd:c2:81:ff:38:de:46:1e:b4:cd:76:96:50:dd:
03:a1:0a:9c:98:ee:66:a7:f8:e5:43:a9:a5:cd:f1:
c9:fa:ca:bc:09:ac:6d:0c:7a:87:88:6d:46:aa:28:
da:aa:36:f0:c3:c7:fd:e0:e5:f1:15:66:63:b5:f0:
49:68:0c:ff:46:61:e0:e8:8a:98:09:33:e5:14:99:
8c:42:63:8a:44:66:ce:06:3a:dc:12:b2:75:4f:08:
78:20:9b:64:05:02:1b:cf:58:20:18:e2:dc:f5:15:
d0:6d:d4:af:32:df:e0:c7:f9:09:c4:fd:3d:35:27:
71:a8:67:56:9b:5d:39:79:28:d1:42:15:18:69:15:
d3:57:c9:da:ef:21:e6:22:1d:2e:b7:bb:c3:00:cf:
c4:d2:fc:f8:f5:9a:c3:2d:b2:89:26:4a:92:58:ff:
9b:34:99:25:01:be:1e:9d:c1:ed:68:9e:e4:d5:7c:
a7:49:71:1e:e9:86:7d:30:ca:f5:6e:1b:d0:88:a3:
40:29:f9:01:81:c8:4c:8c:ac:6a:19:65:60:0a:70:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CD:59:08:39:DA:F9:ED:AC:45:47:7B:F1:19:90:07:E6:A4:2F:19
X509v3 Authority Key Identifier:
keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:90:3e:ea:86:01:92:22:0d:e9:e2:34:62:2e:fa:eb:55:e8:
05:3d:41:68:7d:2a:ba:3a:18:2e:0a:41:ae:5a:f0:76:07:a3:
2c:c8:68:2f:97:ab:47:d1:24:3b:96:1d:3b:64:dd:01:0a:c8:
85:4e:e4:05:13:84:5b:57:8c:37:9c:1a:9c:64:1b:96:00:de:
a6:73:e8:61:2b:d3:3b:9c:99:28:4f:58:39:d6:06:fe:14:ac:
04:43:fa:4c:c4:97:1a:08:b6:91:8c:4d:ee:e4:cb:52:4d:76:
a4:ec:8b:68:6d:3a:6a:76:a3:ec:d2:24:76:f3:58:5a:bc:03:
66:21:c1:91:db:c3:2f:9b:7d:f9:00:f6:96:9d:b7:68:19:e2:
e7:53:81:aa:43:3d:0f:cd:3a:c3:c9:8d:3f:01:6a:75:0a:14:
bc:40:38:df:97:19:27:e3:d6:0f:04:0f:2d:62:09:e8:fc:a0:
f0:e4:8c:4d:94:8c:78:21:45:21:14:ed:3c:ef:e4:89:35:22:
8a:fe:5b:5b:38:e7:b9:b7:a9:dd:cc:ea:07:02:85:fb:c7:d6:
df:07:8f:a8:b4:51:1c:6a:53:12:c1:3e:0e:4c:15:59:3a:8d:
0f:9e:e9:7c:18:6c:f0:8a:8e:7f:ad:51:6b:37:4d:18:bf:d6:
e9:5a:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:13 2025 by rpki-client