Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
File: FCKHkIfdKSaAJjvDlOMch1lyLZA.mft (raw, json)
Hash identifier: tN715uxbD64lZ7LbfYeYhWiOKS8Mer906JFlNceT5qQ=
Subject key identifier: 41:E3:4B:43:2C:54:54:BE:0A:BA:A4:75:9C:C2:C3:AC:B5:01:94:F6
Authority key identifier: 14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
Certificate issuer: /CN=1422879087dd292680263bc394e31c8759722d90
Certificate serial: 0198D7A90C524CE57F7136A0740C5D3793FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
Manifest number: 0F
Signing time: Sat 23 Aug 2025 16:00:36 +0000
Manifest this update: Sat 23 Aug 2025 16:00:36 +0000
Manifest next update: Sun 24 Aug 2025 16:00:36 +0000
Files and hashes: 1: FCKHkIfdKSaAJjvDlOMch1lyLZA.crl (hash: kqw8oB+n6q9Ip4UAsgqujmTUK5JXhHT/8LbJg2W2/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:0c:52:4c:e5:7f:71:36:a0:74:0c:5d:37:93:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1422879087dd292680263bc394e31c8759722d90
Validity
Not Before: Aug 23 16:00:36 2025 GMT
Not After : Aug 24 16:00:36 2025 GMT
Subject: CN=41e34b432c5454be0abaa4759cc2c3acb50194f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:13:2d:8b:16:8d:a1:dc:84:66:d7:84:e7:
58:0c:e4:cc:b1:3a:3b:b9:ff:2b:ac:62:a2:9c:19:
3c:30:c0:89:21:7a:0e:79:7d:03:eb:5f:b6:d2:56:
a3:ac:3f:5c:12:03:e2:23:b2:b3:1a:ed:11:ce:18:
7a:58:80:17:9f:fd:c2:21:20:34:17:3c:3e:34:fa:
75:49:28:8b:70:93:59:cd:00:5a:89:9d:0f:c1:10:
27:0b:dc:c3:e2:e2:1f:33:00:5b:f9:ff:29:40:29:
7c:65:ee:88:d3:e9:3c:31:4c:98:ca:67:cc:3f:9d:
f9:3c:f1:5b:47:b3:6b:72:51:18:91:51:51:88:cc:
b8:3e:ca:bb:90:8f:a7:56:40:0b:7d:e6:9f:e8:7a:
13:e4:bf:8d:83:04:11:6c:58:b2:bd:65:47:44:fa:
64:3e:4c:85:bb:14:be:b9:31:56:db:3d:11:a1:72:
db:2b:3f:8a:92:09:6a:ce:11:d6:e5:88:ec:6e:52:
51:ab:2a:f7:87:81:62:85:bc:e8:5e:7b:75:3f:d4:
57:c5:2f:43:3e:e9:f9:52:cc:8a:96:96:d8:4b:7f:
bb:c6:fd:d0:42:01:66:e9:51:39:cd:1b:da:b0:5b:
10:7a:43:af:29:d3:a8:64:f1:e7:a6:a0:02:4d:8a:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:4B:43:2C:54:54:BE:0A:BA:A4:75:9C:C2:C3:AC:B5:01:94:F6
X509v3 Authority Key Identifier:
keyid:14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4b:9b:11:c2:10:25:db:79:78:7d:1d:c3:ce:a9:ce:10:bf:
43:53:95:3e:84:ce:ea:f2:86:85:bc:29:a4:3b:54:67:e4:4e:
de:16:58:be:09:c7:fb:b1:00:4b:e3:c8:03:41:ef:0d:b7:50:
31:60:43:e2:4f:dd:4f:cf:fc:4d:b9:fc:5b:25:48:42:aa:5c:
f4:1e:ef:32:fe:fd:54:1f:c3:f6:44:d6:b8:89:26:32:d0:52:
ac:6c:a7:de:3d:b9:56:3e:f8:72:d2:e1:8c:64:37:35:d8:2f:
d3:18:a7:bc:43:cb:af:5d:6f:b4:52:9d:72:3a:5f:86:e2:9b:
bb:be:f0:86:3a:11:c2:55:8e:b7:b4:0b:80:9f:34:ea:9d:ba:
8d:f6:fd:a5:53:b2:7a:e2:6e:fa:8a:2c:d4:b8:dc:c2:6a:14:
63:eb:6c:ee:95:09:68:eb:16:f7:8b:cd:02:c9:a6:24:63:a5:
39:b7:73:d4:45:ab:45:f9:6d:71:89:0f:57:ba:d0:41:49:0d:
91:ef:64:a7:36:68:84:13:7f:58:85:55:53:90:d4:ec:27:e2:
37:a3:6a:21:74:ce:16:e1:2b:72:d5:5d:52:13:5a:5d:d8:c5:
10:22:5d:b8:a6:5a:74:66:54:bc:32:fc:0c:78:26:8b:bb:00:
09:c1:b5:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqQxSTOV/cTagdAxdN5P8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MjI4NzkwODdkZDI5MjY4MDI2M2JjMzk0ZTMxYzg3NTk3
MjJkOTAwHhcNMjUwODIzMTYwMDM2WhcNMjUwODI0MTYwMDM2WjAzMTEwLwYDVQQD
Eyg0MWUzNGI0MzJjNTQ1NGJlMGFiYWE0NzU5Y2MyYzNhY2I1MDE5NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq0TLYsWjaHchGbXhOdYDOTMsTo7
uf8rrGKinBk8MMCJIXoOeX0D61+20lajrD9cEgPiI7KzGu0Rzhh6WIAXn/3CISA0
Fzw+NPp1SSiLcJNZzQBaiZ0PwRAnC9zD4uIfMwBb+f8pQCl8Ze6I0+k8MUyYymfM
P535PPFbR7NrclEYkVFRiMy4Psq7kI+nVkALfeaf6HoT5L+NgwQRbFiyvWVHRPpk
PkyFuxS+uTFW2z0RoXLbKz+KkglqzhHW5YjsblJRqyr3h4FihbzoXnt1P9RXxS9D
Pun5UsyKlpbYS3+7xv3QQgFm6VE5zRvasFsQekOvKdOoZPHnpqACTYqT4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHjS0MsVFS+CrqkdZzCw6y1AZT2MB8GA1UdIwQY
MBaAFBQih5CH3SkmgCY7w5TjHIdZci2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hMjc3NmYtYWJkMC00NGRiLWFlOWUt
NzU1M2EwMmM0Mjk3LzEvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hMjc3NmYtYWJkMC00NGRiLWFlOWUtNzU1M2EwMmM0Mjk3
LzEvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokubEcIQ
Jdt5eH0dw86pzhC/Q1OVPoTO6vKGhbwppDtUZ+RO3hZYvgnH+7EAS+PIA0HvDbdQ
MWBD4k/dT8/8Tbn8WyVIQqpc9B7vMv79VB/D9kTWuIkmMtBSrGyn3j25Vj74ctLh
jGQ3Ndgv0xinvEPLr11vtFKdcjpfhuKbu77whjoRwlWOt7QLgJ806p26jfb9pVOy
euJu+oos1LjcwmoUY+ts7pUJaOsW94vNAsmmJGOlObdz1EWrRfltcYkPV7rQQUkN
ke9kpzZohBN/WIVVU5DU7CfiN6NqIXTOFuErctVdUhNaXdjFECJduKZadGZUvDL8
DHgmi7sACcG15g==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:54 2025 by rpki-client