Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: zAwemTFxMizRFanzKMoA4Z0239qFqyr4QOpMr6KM8aE=
Subject key identifier: 65:EA:63:99:AA:ED:80:D7:34:FD:52:54:AF:45:47:04:16:15:7C:71
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 0198D65F23D7EF81A294B42E6114A7F45959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 0FBF
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=)
2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: C6LZDob8lf08ZY7bSokGLCrCiGU4R8FBelN608rcjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:23:d7:ef:81:a2:94:b4:2e:61:14:a7:f4:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=65ea6399aaed80d734fd5254af45470416157c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:c5:ba:d0:05:94:09:bc:31:7d:4f:c2:33:
d1:b5:43:7b:c8:df:81:9d:7e:af:94:5a:8d:91:e8:
fc:f2:bb:73:03:fb:03:8d:3a:7e:5f:9b:3d:8b:57:
79:26:6c:71:48:48:a6:4b:5d:76:b2:01:d3:c1:ec:
7b:2d:27:b1:f6:07:af:c4:5b:43:a6:fc:b9:16:c6:
38:0f:57:be:f4:40:41:ad:9d:9b:89:63:8f:49:59:
68:f6:76:ca:0f:bc:e6:5e:26:89:1c:ad:0a:cc:2a:
36:2e:4b:03:62:f5:21:cd:b4:dc:e1:14:04:49:3a:
28:04:a9:9f:6b:a5:54:77:bb:ea:79:fc:ae:75:81:
78:35:f4:96:c9:71:58:00:a0:4f:af:9a:22:ac:6b:
69:bb:a3:25:08:6d:8e:4c:7d:4c:5c:dc:58:a5:3f:
ef:5b:a8:60:81:b3:7f:d9:ea:f4:17:6b:89:33:06:
4d:7e:56:d6:af:e0:dd:9b:ca:ef:2f:6f:96:3e:09:
ec:e5:69:f5:79:10:4a:3e:03:db:f5:bf:da:4a:1b:
00:65:b1:d4:31:30:7a:13:79:6f:e8:31:c8:1f:b0:
49:35:bd:4c:94:72:79:5c:62:d9:aa:4c:16:6b:02:
21:54:50:04:44:5b:7d:e6:63:3e:ba:28:6d:b0:51:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:63:99:AA:ED:80:D7:34:FD:52:54:AF:45:47:04:16:15:7C:71
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6a:95:17:f5:ca:be:12:5a:8c:33:27:b2:c9:d7:62:b4:99:
7d:79:b3:a6:f2:03:52:cc:48:c4:48:99:aa:b4:dd:e1:34:f7:
b7:1b:56:94:10:e9:9f:df:77:3a:cf:d4:e5:ba:4c:50:78:52:
89:c8:5e:1a:fe:7e:d9:3c:2a:f6:2b:f7:53:7f:c8:40:b9:c8:
9b:5f:89:0b:7a:26:56:8e:dc:1a:b6:76:15:83:44:39:ad:bd:
4a:95:20:42:c9:e0:6e:47:b4:96:1d:ce:e6:d3:e8:92:4f:c5:
26:c6:61:73:44:a6:26:42:6d:ae:a7:db:60:11:88:9f:95:92:
2e:bf:f2:b0:2a:89:e9:fe:5d:48:a4:fd:3c:03:b7:87:ed:cd:
4b:a2:9b:cd:f6:11:1c:c4:f0:10:4c:5f:7b:f5:59:15:63:55:
90:02:b9:ab:5d:be:59:49:94:15:89:30:b7:26:41:03:77:1e:
da:ac:0f:25:06:0c:89:bd:17:f0:8b:26:ab:f7:2d:4b:9e:26:
c1:cc:e6:d3:f7:ff:f1:30:2d:09:9a:1d:35:7f:b9:9a:f2:19:
b5:24:f2:e6:14:f7:2d:cf:77:5f:37:7b:66:f1:93:f7:24:21:
53:8f:b0:5d:50:4f:71:e1:d5:20:f0:0f:1e:f1:d9:82:5f:65:
49:4d:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:18 2025 by rpki-client