Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier: OTyZEXQmfYgA2lx/HQCTC5pbB1pQUfunTEIF11OwXtE=
Subject key identifier: 32:D9:62:8F:C3:6C:7F:5D:C2:5E:D6:E3:A7:DE:FE:ED:A0:58:31:6F
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 0198D705A12CC17C67E777CFE72E0486FE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number: 08EE
Signing time: Sat 23 Aug 2025 13:02:06 +0000
Manifest this update: Sat 23 Aug 2025 13:02:06 +0000
Manifest next update: Sun 24 Aug 2025 13:02:06 +0000
Files and hashes: 1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=)
2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: C3rz45kf5jyrkLtTzeBlZzPosAIlSRltVj8EqeazeTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a1:2c:c1:7c:67:e7:77:cf:e7:2e:04:86:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Aug 23 13:02:06 2025 GMT
Not After : Aug 24 13:02:06 2025 GMT
Subject: CN=32d9628fc36c7f5dc25ed6e3a7defeeda058316f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:c1:b1:2f:26:9c:63:ab:6b:11:2a:a2:42:
ea:a8:56:bc:6c:3e:c7:61:23:1d:0d:64:9e:39:f5:
f6:a5:4d:92:6c:a6:6c:35:2c:2d:7e:81:77:6c:46:
45:eb:f7:86:a5:46:4a:87:30:c2:eb:6c:cd:38:71:
10:88:a0:5a:cd:2b:24:21:67:3b:1c:0a:07:5b:98:
5f:c3:f3:09:42:0f:4c:14:66:dc:f5:81:1d:b3:82:
6b:e0:b9:6f:e8:72:ed:58:ca:6c:68:99:43:19:ea:
21:c5:66:ca:df:ee:a8:a9:40:d3:68:e7:e6:15:c8:
9a:26:62:5c:ab:44:dd:72:e5:df:be:21:71:dd:97:
99:35:80:b8:80:71:f8:9a:ac:a3:c1:8f:4f:72:07:
83:e5:da:51:5d:2d:40:2f:dd:9a:d9:e5:f5:9e:9e:
c2:63:6f:cf:6e:af:c9:7e:4f:53:e4:f9:46:22:f0:
82:75:7c:97:b5:97:a3:7b:cf:02:f3:3e:e6:cc:6c:
62:f4:b1:5f:98:dc:5a:06:e4:dd:b0:f4:9b:ba:2b:
da:a5:53:68:7b:90:4d:7b:e0:25:25:80:b9:11:29:
13:37:1a:29:35:dc:66:fc:d4:3e:52:a7:3e:62:e3:
c6:ee:36:79:67:52:31:93:8a:8f:7d:40:73:21:0f:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D9:62:8F:C3:6C:7F:5D:C2:5E:D6:E3:A7:DE:FE:ED:A0:58:31:6F
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:95:07:00:68:95:42:dc:ee:05:cf:58:8a:b2:a9:58:27:c4:
d3:b1:4c:fd:0f:68:23:ef:15:75:03:01:36:7a:8d:ed:af:d1:
7a:c5:28:72:32:c3:30:0f:37:a6:3e:70:20:80:33:23:f5:78:
21:8b:d0:fc:2a:e8:84:d5:51:96:58:f2:fa:87:df:a2:ff:df:
5e:c5:25:c4:94:19:fc:e8:97:0e:ae:13:8f:aa:9a:45:86:93:
06:25:b2:77:1e:d6:21:59:81:76:62:3f:c5:53:b2:43:e8:4f:
2b:18:ee:b6:d5:0d:15:53:ee:89:a5:a6:39:87:13:e8:e5:e8:
ed:28:79:91:bb:2c:13:37:a3:1a:bb:8f:ad:d6:ac:ae:b3:36:
98:d5:34:da:cf:48:7f:33:e2:1b:08:73:eb:ae:60:c2:fa:e0:
f9:d4:91:f1:1e:2b:a1:9e:d7:c8:e7:9e:4b:26:fc:5b:5e:fc:
a7:ff:69:fd:34:54:64:e6:4b:39:87:ed:7a:1e:cc:2d:88:bd:
83:ef:42:a6:32:b3:bc:23:df:92:e9:a6:88:53:82:a6:18:36:
12:61:e7:df:9b:1a:45:5a:e8:68:6e:a0:48:bf:4d:b9:36:f7:
29:62:f4:3f:5c:a3:c0:6e:4e:9a:a0:0d:9c:4e:0b:41:4e:0a:
a6:d6:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:27 2025 by rpki-client