Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File: FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier: QUGpxYGArV1NaKqp/FXZ1QmBu00UPVhAX3lxMa5UkzM=
Subject key identifier: 98:AF:E6:56:0E:5C:6E:BA:A1:3B:D2:38:E4:00:83:73:CF:41:5F:7D
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial: 0198D66070637A6CE78D112B49D93B0598BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number: 0CFF
Signing time: Sat 23 Aug 2025 10:01:41 +0000
Manifest this update: Sat 23 Aug 2025 10:01:41 +0000
Manifest next update: Sun 24 Aug 2025 10:01:41 +0000
Files and hashes: 1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: rB8xbSdbnrbQRzCokwCVfQ6x8jVxgX05xoGilguTaF4=)
2: aJypmqoFfKbNLA7QelNPg-kxzbw.roa (hash: AlnIanfnH1GwrGuXXqK+U4eJyego+t2Sw5napesUvxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:70:63:7a:6c:e7:8d:11:2b:49:d9:3b:05:98:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Validity
Not Before: Aug 23 10:01:41 2025 GMT
Not After : Aug 24 10:01:41 2025 GMT
Subject: CN=98afe6560e5c6ebaa13bd238e4008373cf415f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:3f:ac:35:b4:94:b7:6a:e6:5a:9d:fe:e5:
dd:5f:d8:19:5d:67:f7:cd:9e:3f:ec:06:91:26:c7:
6e:2e:75:f4:63:48:0e:1e:0f:ee:0b:3b:2e:ea:b8:
c3:71:f2:e8:95:1e:5a:7f:e1:63:00:7c:d8:95:f7:
db:80:1c:b5:2f:f9:d5:cd:99:7c:63:27:5a:38:5e:
a4:a0:97:a7:f2:8a:7c:64:25:ef:0f:fc:89:02:d0:
da:0e:3e:92:46:37:7e:31:e0:9b:3a:56:17:f8:44:
00:e7:93:6d:8c:e4:c6:51:bc:77:2b:6c:25:67:80:
64:2b:0e:0a:fb:e8:af:fa:22:53:3c:92:e6:f6:fc:
31:a0:f0:0c:67:48:42:a5:28:78:07:c2:03:e8:09:
67:69:fd:33:fc:b7:b7:e6:da:6a:6b:20:02:de:84:
d8:ed:a4:33:e6:56:59:7e:f4:2e:41:6a:75:6a:53:
2a:9d:8e:3c:2c:26:7b:3b:60:58:c8:99:6e:db:2b:
f6:e0:6f:47:28:54:17:ac:fd:00:dd:6d:5c:36:cc:
76:83:08:e9:f0:0a:6c:83:dc:56:fb:38:c6:3e:0e:
07:9b:58:dd:75:93:c7:d4:2b:13:79:4e:27:a8:66:
d3:a2:50:14:49:f4:d6:d5:43:0c:7c:1b:a5:15:16:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:E6:56:0E:5C:6E:BA:A1:3B:D2:38:E4:00:83:73:CF:41:5F:7D
X509v3 Authority Key Identifier:
keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:df:72:1c:63:0c:31:32:79:cf:6b:aa:b4:df:3c:ff:aa:5a:
88:e3:b2:79:96:40:73:9b:de:dd:a2:fc:90:da:6a:37:2b:9b:
27:fb:77:b7:79:73:40:f1:51:a4:b8:2d:eb:a5:48:3b:9b:36:
48:5f:60:73:d3:02:c0:d4:1e:0f:2b:e6:77:1b:0c:c1:3e:0c:
a2:a2:4c:77:24:69:54:ae:17:60:53:1e:f5:26:e9:d6:22:5f:
bf:5c:36:fd:2a:b9:2d:f0:2c:6c:5a:b0:e1:5c:e8:50:75:30:
d2:1c:6a:e2:8f:e6:ba:da:8a:95:e0:b7:c3:42:18:bf:75:f7:
b6:82:ef:2c:69:a6:82:e4:72:ff:4b:40:52:fd:40:7a:8d:ed:
ff:71:14:ff:c0:02:36:c4:a2:08:78:7c:6b:e4:56:cd:20:8f:
b9:39:e2:b0:fa:64:bb:91:0f:e0:b2:62:27:58:c3:ac:c6:fe:
32:09:60:60:23:ed:31:e1:1a:ae:9b:45:e9:97:b1:a4:06:5c:
d7:b6:c7:ef:64:05:f9:09:87:c1:41:64:3b:0c:9b:a6:8f:0b:
98:37:88:c4:1d:e1:e3:fa:bc:fe:a4:43:11:0e:d0:bf:bf:5e:
ff:d9:f5:38:f6:74:29:23:dd:97:16:a9:af:53:6a:5e:03:2e:
33:b4:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:21 2025 by rpki-client