Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: nVE9CxDcJpgfkKOtWGUh8et503e/IQPaE9+eX3siHPM=
Subject key identifier: F3:18:14:CE:A6:40:80:4C:B3:4F:8B:AC:AE:91:2C:95:E5:8E:09:59
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 0198D54E35A201C983772A0CC8CAE795774F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 1520
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: 5/O5IBVcPlUuwfLhP3adaXVgP6SiGN6ky47tnZgPbwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:35:a2:01:c9:83:77:2a:0c:c8:ca:e7:95:77:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=f31814cea640804cb34f8bacae912c95e58e0959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:2a:f0:ab:13:c0:48:93:6b:5e:f8:74:21:
60:f4:6f:34:57:5c:70:83:7f:02:04:4e:0f:31:77:
41:61:29:b8:26:77:63:5b:20:b8:15:99:1a:02:dd:
a4:60:9c:22:04:0a:f8:53:42:0f:e1:c5:cb:e7:73:
26:d7:46:67:90:26:07:00:fc:40:44:92:37:c0:0f:
d9:69:60:5b:bd:06:57:41:92:88:06:c4:9e:a9:bc:
6c:69:f7:77:00:db:a7:48:74:b3:a5:84:05:f4:fa:
51:d2:18:03:1a:6c:6a:40:24:21:3f:43:b2:21:d9:
d5:44:a2:28:9f:12:39:61:55:6b:7b:77:45:11:e5:
66:60:3a:9d:06:a9:2e:8d:5c:99:7e:50:c9:1f:d0:
41:a5:cc:23:a9:fa:fa:d1:72:a3:e1:b7:d7:49:82:
69:c6:a7:29:1d:e1:2a:20:e5:35:65:27:56:a9:d9:
18:0c:32:bd:4e:27:5e:6b:b6:72:b6:5b:4d:5b:09:
be:58:2e:93:0a:4c:c6:ef:52:c7:5a:51:73:1c:0c:
0d:60:c5:c6:cd:df:76:0b:11:85:fb:ff:e8:b4:6f:
6a:db:77:c1:65:4c:5f:30:74:fb:03:fd:9d:77:8b:
9f:8f:53:c5:73:8d:cd:d5:47:e7:2d:01:a4:62:ca:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:14:CE:A6:40:80:4C:B3:4F:8B:AC:AE:91:2C:95:E5:8E:09:59
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6e:29:1d:9b:b5:ef:de:db:32:b1:68:eb:ec:d9:e1:d8:f2:
fd:d0:4c:6a:b8:d6:37:3d:0c:05:53:f0:c0:3b:13:74:e0:a7:
e7:bd:f5:a5:2b:99:13:4c:ee:81:b7:c1:b5:77:cf:96:6e:79:
59:6f:40:88:74:95:13:9c:9e:bd:10:b9:2b:35:8e:72:e8:11:
db:f6:bb:83:f4:f1:8c:a2:6b:18:98:aa:1c:2b:41:b9:16:1e:
b1:82:f3:14:7d:27:a6:2a:b3:69:bc:d5:10:2c:32:18:39:95:
95:56:5e:26:10:45:ef:60:8c:ba:13:5b:f9:16:4b:31:60:76:
af:ad:b8:f2:bd:4e:84:60:99:7c:84:33:e8:82:b0:ca:02:0e:
e0:3c:07:5b:ff:a6:56:9b:ad:d5:c8:ac:ef:f3:95:2c:74:5f:
b0:8c:cb:4f:81:ba:b5:a5:33:b6:3e:76:ef:49:0f:b3:62:55:
3a:2a:b1:5d:5e:08:10:4d:93:c2:d0:0f:f3:a0:a1:03:36:ee:
ac:41:fd:4e:2c:ac:fc:56:9e:f1:78:96:be:aa:b9:19:0e:69:
8f:a3:4c:5a:6e:c5:ac:3a:cb:40:02:15:db:10:5a:04:87:a4:
ed:f4:da:d8:52:83:b7:3a:03:80:89:68:e3:a2:c4:f9:a7:17:
10:41:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:45 2025 by rpki-client