Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: 2RfFwmQDdAAUib5tTC/AW7K5ZoZT5OBTtNLOwJ+bXfA=
Subject key identifier: 05:4D:7A:18:51:7A:07:97:6D:DD:1E:50:BE:C6:B3:99:9A:95:25:5D
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 0198D84F21CDF2740EFAC9220D4E12CA7AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 19:02:01 +0000
Manifest this update: Sat 23 Aug 2025 19:02:01 +0000
Manifest next update: Sun 24 Aug 2025 19:02:01 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: XMBfBL1K3wT54mixw1XG/DBZFOC7UFJkx7iZU0vOcQM=)
2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:21:cd:f2:74:0e:fa:c9:22:0d:4e:12:ca:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: Aug 23 19:02:01 2025 GMT
Not After : Aug 24 19:02:01 2025 GMT
Subject: CN=054d7a18517a07976ddd1e50bec6b3999a95255d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:1f:f6:75:ec:ab:02:ce:f2:25:7d:b1:29:
92:94:7d:54:fe:6f:a5:f6:b8:cb:da:24:fc:88:93:
26:42:0e:52:0b:6f:02:bc:18:98:a5:af:44:42:3c:
d4:a8:28:84:65:5d:08:c2:e2:40:88:fd:1a:9b:45:
fc:34:fc:f8:0f:79:21:7e:1b:be:cc:ca:45:4c:79:
22:0f:6d:72:ce:a7:cd:6a:e2:3c:81:48:a3:89:80:
b2:55:be:d9:12:2b:e4:78:93:9a:e4:e8:a3:6e:8e:
9a:09:6c:5d:0c:9a:12:dd:7f:c0:35:7a:b5:46:29:
eb:db:bf:36:e7:ac:40:d6:46:ce:80:1d:39:1f:aa:
98:79:1f:e6:31:95:5f:de:c5:44:e4:c2:bb:c6:53:
7d:a8:ac:67:f9:59:bc:bb:b6:c4:32:0c:98:e6:a5:
9e:c0:7a:96:4f:16:94:71:12:a1:0f:f3:d0:ae:05:
16:e7:ba:6f:90:21:e6:ff:84:22:c6:40:b1:4e:04:
37:01:e6:1a:5e:14:2a:d4:40:70:a9:12:f9:6e:63:
13:ab:f4:65:be:ac:b2:89:c7:6c:20:e8:cc:9a:ee:
06:98:80:d2:9c:4a:6c:aa:3b:06:6a:f0:94:38:69:
17:df:1e:1e:e7:a0:c9:e4:c0:a3:09:98:05:ea:15:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4D:7A:18:51:7A:07:97:6D:DD:1E:50:BE:C6:B3:99:9A:95:25:5D
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:79:47:9c:58:57:1b:58:c3:10:fb:5f:04:af:71:dc:9d:e6:
a6:8e:42:d3:36:ab:e2:ec:57:aa:b9:6a:da:a9:25:b7:f6:a0:
8d:eb:76:80:5b:73:a5:ed:96:0c:6e:0b:5d:1a:3e:65:6c:21:
a3:5b:e9:8f:31:58:78:fb:b4:df:81:c2:e2:76:ab:71:22:ee:
d8:e7:8a:19:73:cc:ba:3f:15:c6:82:73:1a:d1:d3:62:ac:67:
4b:94:dd:10:b4:81:7c:ef:12:5b:26:0c:f9:13:40:12:a6:56:
b5:e4:af:af:fd:a1:24:17:88:05:3e:39:36:5b:ee:46:15:64:
67:39:f8:14:4c:7c:5a:6e:14:c4:5d:e4:51:97:b1:fb:53:2c:
5f:6a:e7:62:ea:d6:c6:3b:96:89:97:74:af:e2:23:8e:72:3c:
7f:f1:b8:19:1f:a2:e4:db:b9:8d:74:70:00:0f:a9:f8:03:c4:
63:93:54:0b:4e:fc:d8:1f:04:14:d3:2f:6d:ed:a8:26:79:c6:
32:31:ff:c7:62:d8:50:4a:fd:61:de:79:39:17:f0:7c:fd:e1:
63:a9:a6:3e:43:47:74:74:52:07:cb:40:c2:b8:7e:9f:81:c1:
3d:74:e9:86:e9:4a:62:22:46:a2:c9:68:5d:7a:3b:8a:24:bc:
6c:88:97:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYTyHN8nQO+skiDU4SynqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NjQ0ZGQwYTgxYzYzMDczZjJjNTFiYzk3NmUxMWZhOWM2
MTVjNTEwHhcNMjUwODIzMTkwMjAxWhcNMjUwODI0MTkwMjAxWjAzMTEwLwYDVQQD
EygwNTRkN2ExODUxN2EwNzk3NmRkZDFlNTBiZWM2YjM5OTlhOTUyNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mkf9nXsqwLO8iV9sSmSlH1U/m+l
9rjL2iT8iJMmQg5SC28CvBiYpa9EQjzUqCiEZV0IwuJAiP0am0X8NPz4D3khfhu+
zMpFTHkiD21yzqfNauI8gUijiYCyVb7ZEivkeJOa5Oijbo6aCWxdDJoS3X/ANXq1
Rinr278256xA1kbOgB05H6qYeR/mMZVf3sVE5MK7xlN9qKxn+Vm8u7bEMgyY5qWe
wHqWTxaUcRKhD/PQrgUW57pvkCHm/4QixkCxTgQ3AeYaXhQq1EBwqRL5bmMTq/Rl
vqyyicdsIOjMmu4GmIDSnEpsqjsGavCUOGkX3x4e56DJ5MCjCZgF6hWqAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVNehhRegeXbd0eUL7Gs5malSVdMB8GA1UdIwQY
MBaAFBRkTdCoHGMHPyxRvJduEfqcYVxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkdSTjBLZ2NZd2NfTEZHOGwyNFItcHhoWEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kYjhhMTEtY2FkZC00NTljLWI1OWYt
OWJmMzdlYzk4YmIwLzEvRkdSTjBLZ2NZd2NfTEZHOGwyNFItcHhoWEZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9kYjhhMTEtY2FkZC00NTljLWI1OWYtOWJmMzdlYzk4YmIw
LzEvRkdSTjBLZ2NZd2NfTEZHOGwyNFItcHhoWEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHlHnFhX
G1jDEPtfBK9x3J3mpo5C0zar4uxXqrlq2qklt/agjet2gFtzpe2WDG4LXRo+ZWwh
o1vpjzFYePu034HC4narcSLu2OeKGXPMuj8VxoJzGtHTYqxnS5TdELSBfO8SWyYM
+RNAEqZWteSvr/2hJBeIBT45NlvuRhVkZzn4FEx8Wm4UxF3kUZex+1MsX2rnYurW
xjuWiZd0r+IjjnI8f/G4GR+i5Nu5jXRwAA+p+APEY5NUC0782B8EFNMvbe2oJnnG
MjH/x2LYUEr9Yd55ORfwfP3hY6mmPkNHdHRSB8tAwrh+n4HBPXTphulKYiJGoslo
XXo7iiS8bIiXWw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:44:20 2025 by rpki-client