Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: JUtscIdXlFd8e06Lq+wUcZd5DBlvoC1d2J9vA/nHHak=
Subject key identifier: A8:22:6E:51:C6:55:C5:A6:D0:6D:26:0F:96:03:C2:8B:51:26:C3:8C
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 0198D473DACE890A662F313ADE07F1579B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0DAC
Signing time: Sat 23 Aug 2025 01:03:38 +0000
Manifest this update: Sat 23 Aug 2025 01:03:38 +0000
Manifest next update: Sun 24 Aug 2025 01:03:38 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: HI74pTCcuxzO0YkvLt1sGAqW1J3LdzsQ862y1hVw6mg=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:da:ce:89:0a:66:2f:31:3a:de:07:f1:57:9b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Aug 23 01:03:38 2025 GMT
Not After : Aug 24 01:03:38 2025 GMT
Subject: CN=a8226e51c655c5a6d06d260f9603c28b5126c38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:02:47:a8:84:58:7d:05:9e:b5:3d:78:d6:
2c:b2:7e:a3:69:ed:7b:5b:2f:22:3e:de:88:bb:1f:
ea:d1:a9:46:90:13:24:1f:05:d6:9f:79:31:8f:7a:
7d:40:b8:07:cd:67:2c:c2:30:fa:e4:2b:0f:fd:13:
1c:dc:20:0d:0e:ec:ad:97:e0:dd:12:4c:2b:48:9e:
64:f2:77:e2:87:a0:e9:22:12:c0:ba:cc:99:cd:41:
c3:ea:bf:6b:a4:f7:00:11:25:03:a2:ab:97:97:17:
3d:f2:97:92:68:59:cd:ab:75:56:39:83:58:be:8e:
a3:ce:d9:9e:6c:23:54:2c:0f:a5:26:bd:9c:cb:69:
08:da:e3:d7:78:52:1b:b6:90:62:97:43:71:20:5c:
46:e6:91:2f:be:27:21:69:8c:85:e4:c9:d5:13:46:
ee:d3:16:bd:7e:72:e1:d8:02:8c:25:e2:13:de:77:
63:2f:62:9f:09:ab:31:c4:14:13:1c:10:ab:0f:8a:
0b:cf:43:d0:58:7b:b2:3d:46:d8:f5:b6:95:c8:da:
a7:e6:2a:50:e1:41:44:2d:a0:e4:4e:d6:e8:a4:6c:
84:18:62:42:31:a9:1c:87:b7:58:e5:58:13:13:f9:
41:fa:24:58:be:29:aa:55:7c:09:60:03:7e:d6:91:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:6E:51:C6:55:C5:A6:D0:6D:26:0F:96:03:C2:8B:51:26:C3:8C
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9d:69:7a:bc:c6:2a:59:5d:db:8f:39:bf:5a:cf:77:09:aa:
03:d9:4a:aa:6d:42:9f:4b:11:71:55:75:d2:e3:d0:ab:2c:ef:
56:4f:ef:46:6d:28:78:40:03:8e:1d:46:27:ba:1e:1c:6a:64:
25:3a:e4:81:26:5c:fe:94:6c:35:b3:96:f7:19:1c:2f:5d:91:
1a:16:87:0d:43:cc:a0:f3:74:78:e9:95:12:46:ca:8c:9e:ed:
59:1e:ec:63:0d:59:5c:4d:2c:64:1f:2e:80:42:39:73:ba:54:
1e:da:53:39:26:73:24:84:3a:0e:a5:2f:7e:4a:fa:eb:93:1c:
9d:bf:1e:35:e5:4a:f2:7a:59:2b:7c:b2:3c:42:bd:73:14:ed:
80:3b:3b:ac:11:79:43:ba:58:cd:39:71:40:35:ed:b8:d9:4d:
9f:36:03:7b:37:cf:c6:b7:8d:39:80:b8:7f:6f:0c:cf:7e:5e:
ac:c5:e4:10:d7:a2:98:6a:58:65:dc:3a:22:50:4c:28:dc:6d:
a9:64:ca:ce:94:b6:70:b6:ea:ff:c7:bd:82:8d:47:a3:8a:13:
41:a6:b8:72:9b:c1:64:0b:d7:dc:20:f4:ef:5a:b1:b9:25:b9:
11:dc:4f:e8:41:76:a2:e3:f8:e7:14:6f:8c:37:da:89:fa:a5:
8a:62:d4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:07 2025 by rpki-client