Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: nEc5Fwee8WFFi/zDbzv7dWJelZfOdph5j2gc9ECAQ6o=
Subject key identifier: 33:4F:1C:5A:16:58:66:16:96:FF:27:0A:46:A5:2F:65:C2:19:37:E5
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 0198D5BBDFD3C1EBCA4C6148F49EB214238A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: qP2DOFg7h4du22uO6z0lRh0WtLig6s6PrW7z8+B36qM=)
2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:df:d3:c1:eb:ca:4c:61:48:f4:9e:b2:14:23:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=334f1c5a1658661696ff270a46a52f65c21937e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:69:37:4a:31:d0:57:95:f5:ce:21:1f:75:
31:4d:6f:e4:9e:9b:24:5d:f8:4b:a8:d8:a5:c7:27:
16:99:c9:d6:54:95:71:58:1d:a7:ff:38:07:b7:45:
5b:37:88:0c:dd:b6:ff:6b:b0:d0:51:6a:82:4c:cd:
03:de:20:25:b2:44:a3:e0:27:cc:d0:d7:09:b2:14:
89:63:9e:7c:c5:c2:15:32:16:d6:ab:97:d6:45:f6:
cb:7d:35:a1:52:a2:6e:fb:94:e6:c0:d4:23:6b:e7:
e5:2a:5d:73:d6:20:c1:90:e2:b8:92:c7:7f:fa:ca:
ce:3a:f9:32:57:33:37:65:2d:46:84:32:f8:cf:e8:
57:e9:f3:c0:e9:d2:32:ea:2f:ec:09:cb:b2:e5:40:
9e:6b:d8:5d:be:76:d0:bd:36:35:d7:9f:c7:43:54:
65:c0:48:9a:56:c9:91:67:a5:4d:df:e9:f7:d4:b1:
a9:a4:60:2b:43:ca:7c:43:31:cb:40:cf:b6:47:74:
dd:62:5f:9b:f4:0e:54:ce:f5:9a:a2:80:40:bd:78:
54:d6:83:ca:0a:c6:7d:51:78:62:ab:03:64:ff:6c:
1a:ad:81:de:31:76:b9:95:4a:3c:d6:0b:c6:e5:9e:
03:a6:8c:e1:94:00:73:e4:05:a5:d1:bf:37:c6:ad:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4F:1C:5A:16:58:66:16:96:FF:27:0A:46:A5:2F:65:C2:19:37:E5
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b4:29:12:38:6d:99:9e:4f:f5:56:33:a8:91:69:32:38:67:
c0:4a:6c:d3:7c:a5:15:07:43:a6:32:e6:4d:19:e6:7b:02:46:
49:6b:6d:0b:53:cb:6b:87:f8:49:85:31:33:4b:c4:97:ef:40:
8d:61:ac:21:ab:15:17:b2:62:0b:f9:85:ec:50:44:ad:b4:80:
24:81:35:2d:5a:a5:a0:ef:ba:bc:5e:89:6d:19:5d:52:3f:36:
52:c7:c8:a6:29:42:8f:ea:5b:00:9a:b2:7b:86:97:01:79:88:
46:a3:e1:8f:9b:f8:03:1c:43:31:1d:1f:ef:0d:65:49:a9:d1:
8c:f1:0e:b1:53:fd:9b:5c:d0:78:99:a5:1c:ac:f7:27:a4:68:
8d:94:dd:ab:23:fa:cc:4d:40:ea:52:2d:52:63:bc:01:ca:04:
c2:69:db:1a:08:01:3b:19:e3:46:b4:71:1b:15:cc:26:8e:91:
e7:a2:88:c8:98:27:c0:ed:1a:47:bc:3d:21:85:72:f1:b6:53:
8d:a3:ac:ae:df:a7:e8:e6:46:f3:bb:dd:2c:f1:86:cf:22:e0:
65:a5:50:bb:ca:c4:0f:e0:5e:e7:75:1f:aa:b6:08:9f:83:94:
46:88:8d:53:06:cf:71:5b:b3:a7:85:5f:aa:f2:96:6e:eb:d9:
b8:fb:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:15 2025 by rpki-client