Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: 7t9EY2qVlpWGNIwxX/kr7XQqsClwcHBm3VQPg8YFwI4=
Subject key identifier: C0:24:89:43:42:E9:8A:8A:81:F2:B9:F3:1D:65:76:72:42:51:B3:FD
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 0198D5F14A25156D9F709764B46EF1F95951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 158E
Signing time: Sat 23 Aug 2025 08:00:16 +0000
Manifest this update: Sat 23 Aug 2025 08:00:16 +0000
Manifest next update: Sun 24 Aug 2025 08:00:16 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: 4fVRAOhPF9rftaGpXJcbA06WHpaiG1FFQbdOa8d9vBs=)
2: Jan-36Lo7cls_qlYXAYwCHL-IM0.roa (hash: 9QKHqIJMi/8WyyfdqnXT2xQCCgDbraKMeYqVzfnxL6A=)
3: rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa (hash: 4ZmwtT19+5Iz0mku0LqIMr+TT72kqcPqLFHR2qlNxGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4a:25:15:6d:9f:70:97:64:b4:6e:f1:f9:59:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Aug 23 08:00:16 2025 GMT
Not After : Aug 24 08:00:16 2025 GMT
Subject: CN=c024894342e98a8a81f2b9f31d6576724251b3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:29:be:41:cd:fc:ad:dd:42:c8:06:80:7f:
ab:d7:d5:d9:07:57:ea:ce:10:00:34:8e:ca:52:8f:
ac:60:aa:89:0f:e9:22:a4:04:b3:71:86:d5:21:e2:
20:e1:ae:c1:01:bb:4c:13:60:69:21:3a:d4:49:a4:
68:50:4f:33:17:e2:a6:60:c9:7d:87:9b:6b:55:84:
ef:bb:b2:ee:72:ba:70:36:66:29:c6:2d:06:f0:b8:
f1:81:d5:1a:84:b2:ec:24:cf:87:1f:6a:47:55:55:
6a:cf:dc:35:5a:5e:bb:c1:af:c8:10:4b:f2:22:6f:
b0:3d:91:5d:18:bf:5d:5e:e3:8e:f8:67:e9:e1:e0:
ef:d1:e8:f5:5e:74:3e:f0:50:89:63:fe:fe:e9:97:
aa:c8:6e:ad:dd:a0:0d:86:a5:95:27:15:10:3f:c9:
2f:f0:bd:61:2f:29:7d:86:9e:cf:fb:8e:1c:33:36:
8e:02:ed:7d:b9:f6:8e:a4:e1:68:a8:f2:17:1b:f5:
4e:21:71:65:33:d9:5d:31:2e:20:96:16:f3:79:24:
76:6d:e9:e2:2f:df:e8:5f:0d:31:23:26:66:09:d6:
7b:cd:a8:97:44:59:dc:96:06:26:fd:ab:b3:67:e2:
32:ff:58:8a:01:ff:0d:b4:87:59:fb:da:bd:ac:81:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:24:89:43:42:E9:8A:8A:81:F2:B9:F3:1D:65:76:72:42:51:B3:FD
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:56:2a:87:5b:10:57:23:0a:e8:ec:1d:91:f9:9d:77:38:d4:
de:d1:48:07:b2:d1:e2:29:d8:13:f6:d8:a1:1c:e5:7c:af:46:
ce:ce:87:1a:49:f2:78:19:aa:1e:46:0f:2a:be:22:f6:5f:e6:
e6:c7:41:4a:e3:12:3a:69:8f:4d:ba:e6:50:7d:96:93:97:57:
42:d7:6b:d3:ca:c9:c9:f8:30:15:bc:e2:75:91:93:76:7d:1c:
fb:eb:b7:29:ee:7d:c5:32:e9:41:20:6f:d8:66:5f:3f:f6:b9:
7a:30:b9:44:9f:56:90:18:c1:a1:b5:22:35:ba:5e:2c:9c:d0:
ff:79:d4:4a:87:ba:bb:19:32:88:c9:13:0c:4a:30:15:58:0d:
38:4d:16:6d:62:14:07:f8:75:0c:5e:a0:6f:72:0f:3b:31:2e:
01:9b:f6:c4:5f:f4:7c:4a:fd:e2:27:b6:12:2b:4b:8d:c4:b5:
3d:4f:8b:02:d1:4d:fc:11:dc:38:66:9a:51:47:b8:bd:9d:77:
b0:fb:45:c2:b1:31:cc:ee:94:75:14:c0:62:86:a8:d3:7f:67:
22:81:b9:59:0f:c7:a4:7d:41:38:30:2a:be:3a:62:c4:18:be:
64:ff:6a:cd:bc:98:2b:5b:06:68:48:7d:32:9e:6b:1f:53:08:
15:b1:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:12 2025 by rpki-client