Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier: 1uIfCEknyExCDamiHDEzaGWNNE2yr3S8N2pknjNIqFg=
Subject key identifier: 1D:68:1A:96:06:35:9C:0F:BC:E9:CD:5C:DB:F3:AE:12:7F:25:FB:87
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 0198D583644F4B8FD324FA1F7A5B47A61191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number: 0EBD
Signing time: Sat 23 Aug 2025 06:00:14 +0000
Manifest this update: Sat 23 Aug 2025 06:00:14 +0000
Manifest next update: Sun 24 Aug 2025 06:00:14 +0000
Files and hashes: 1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: p6A3p+6z/c6u6W7KObTY3mxLnIrtHQ0l+mqpzo6IcyY=)
2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:64:4f:4b:8f:d3:24:fa:1f:7a:5b:47:a6:11:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Aug 23 06:00:14 2025 GMT
Not After : Aug 24 06:00:14 2025 GMT
Subject: CN=1d681a9606359c0fbce9cd5cdbf3ae127f25fb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:2d:8f:b5:0d:28:10:17:95:b6:83:a2:16:
03:e6:bf:27:ae:f2:fd:1c:ea:6f:ec:1f:44:3e:22:
43:f2:80:0d:c4:20:a2:77:ca:85:30:b8:1b:64:fc:
f9:ef:c7:c7:5e:db:d4:4c:17:d1:99:4f:df:96:25:
31:6e:7e:5d:41:25:d9:e9:1d:8f:0d:94:82:d4:ad:
73:70:6e:35:c4:b1:03:90:45:6a:86:4e:3c:8a:de:
97:7d:1d:a9:a4:08:db:69:70:d1:ee:a5:b3:6f:28:
1a:7e:fd:be:6b:16:62:4b:e8:cd:ec:f9:8c:52:36:
a3:44:53:50:a0:d4:59:69:74:b8:ca:fe:ec:46:66:
18:bd:b1:67:2f:82:b6:14:91:20:c2:5a:db:e9:42:
93:9f:72:ca:f2:80:c0:dd:05:32:a5:85:38:1b:d7:
b4:e9:58:96:70:1d:19:c9:a8:e4:fe:9b:9e:cd:25:
c3:39:dc:ae:48:4a:c1:b0:f5:5e:0d:04:3f:b2:bd:
4f:b4:99:f1:3d:a2:00:02:2b:0d:b1:6a:64:ed:9f:
a1:92:81:87:90:63:0e:ff:4c:7e:18:5d:90:81:d3:
c3:26:01:4c:43:8c:f2:27:d9:cf:73:a2:1d:93:c6:
78:e2:63:14:cb:30:dc:c1:63:5d:fa:7b:9e:25:4b:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:1A:96:06:35:9C:0F:BC:E9:CD:5C:DB:F3:AE:12:7F:25:FB:87
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7c:89:60:c2:3a:3f:af:aa:fb:d9:30:a1:f2:2a:ba:eb:1d:
98:ad:d3:7a:09:4d:4b:a4:90:f4:cb:c7:4f:7b:30:07:a9:c4:
65:20:c8:3b:bf:14:01:68:4b:49:be:5c:8c:3a:fd:50:b7:ef:
ac:7b:c7:e9:17:6f:f6:43:07:0f:2b:9d:1d:3d:55:c0:38:d1:
03:53:58:f9:70:fb:1f:bc:ad:a4:81:79:eb:68:1f:5e:9f:f8:
51:87:56:c9:bf:77:52:c1:8c:26:76:03:94:60:8d:f2:d3:2c:
d3:7e:16:c5:5a:52:ff:aa:a3:90:c1:f5:44:3a:89:e0:22:1f:
93:ef:0d:43:df:5d:b6:0a:d2:07:fe:ba:d9:97:5f:63:ca:59:
9e:5b:00:4e:f3:11:f0:11:f3:9b:19:da:39:c3:68:9b:5a:b0:
44:10:7e:b9:f2:34:9f:53:fb:91:b1:52:57:9e:e5:7b:fb:00:
8c:c5:68:a6:76:d0:07:97:6f:58:27:79:18:2f:fe:ed:b3:bc:
fc:77:ab:b3:36:b4:e7:67:bf:3c:de:02:43:79:e8:0c:66:3e:
e5:18:e6:5e:0c:ad:76:95:a4:51:94:93:91:13:b6:12:b1:d4:
77:8c:eb:df:f3:7f:55:7d:17:b3:38:c1:55:7e:f1:39:26:af:
13:12:b6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:26 2025 by rpki-client