Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: Rtj0gmexCkKrVjZMZlxHJOeyqKrPe/+sV4hvJ0NY3bs=
Subject key identifier: 5B:5D:D1:C1:24:64:30:B8:BC:E4:F7:95:92:94:74:7C:00:0E:C1:6B
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 0199FE46A87EFACF875922BA1BB9CA263E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 1228
Signing time: Sun 19 Oct 2025 21:01:07 +0000
Manifest this update: Sun 19 Oct 2025 21:01:07 +0000
Manifest next update: Mon 20 Oct 2025 21:01:07 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: PbvrvTnmkGM6MR9btCESk+cqa/NwGfR314UvO6uCYso=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:a8:7e:fa:cf:87:59:22:ba:1b:b9:ca:26:3e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Oct 19 21:01:07 2025 GMT
Not After : Oct 20 21:01:07 2025 GMT
Subject: CN=5b5dd1c1246430b8bce4f7959294747c000ec16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:19:71:31:8f:f9:97:4c:e8:75:a7:50:df:ae:
7a:0c:06:da:b0:d0:b3:cf:70:30:df:20:bd:2e:59:
76:65:d9:01:68:39:21:23:76:87:eb:90:87:d9:2f:
ef:3f:da:e4:a4:10:cb:55:35:e3:52:fe:22:73:26:
95:db:d3:01:23:9d:5e:0c:83:aa:af:e2:4f:eb:db:
a9:f5:a6:c6:85:41:3c:c8:5b:15:1b:36:fb:47:4b:
cc:eb:b6:9c:88:20:e1:cd:9a:b0:a8:99:d6:b3:79:
36:a9:60:58:a1:ad:88:1e:c2:ca:8f:9e:38:21:f1:
12:76:a2:4d:cb:5e:41:cd:b4:97:8a:cf:1d:34:a4:
bc:4a:74:d5:d3:8e:49:25:a3:42:c2:4b:f3:6c:56:
d8:0d:a1:6d:e1:29:68:f3:cc:1e:ff:c1:13:74:b5:
f1:db:11:77:9e:4c:84:fe:0e:d0:e4:63:a8:15:fa:
3c:95:61:fe:fa:43:23:4d:5f:b4:29:17:18:49:84:
d0:d4:97:c7:59:54:18:cf:95:38:55:91:9d:67:c9:
80:08:2a:02:8b:f4:1e:7c:71:9d:07:bb:73:34:f3:
c7:d3:72:dc:49:83:29:be:7e:0e:ca:bb:eb:ae:01:
38:5f:fe:2a:6b:5e:70:d3:bb:db:29:64:7d:bb:93:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:D1:C1:24:64:30:B8:BC:E4:F7:95:92:94:74:7C:00:0E:C1:6B
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:95:7e:6a:a2:cd:a7:2a:62:91:b0:69:b5:a0:d6:69:4e:d5:
3d:d0:a1:64:8a:0e:03:c2:1f:36:b3:22:2b:9c:88:19:40:d3:
c2:50:91:74:64:25:6f:7e:7d:ca:63:7e:9a:e9:ae:94:f0:08:
6c:ce:49:0c:9a:10:a6:78:bd:48:cf:c9:5f:90:d1:79:97:55:
73:91:20:78:eb:23:07:73:b0:3b:68:26:5d:33:4c:f5:a3:9c:
48:30:a4:25:fa:d9:db:17:1c:ed:6a:7c:d5:de:4a:34:4b:4e:
b0:88:5d:5d:3e:ca:d7:f7:99:8a:d7:c9:d2:56:c1:31:51:a5:
e1:5a:e1:8c:54:a7:60:80:b6:bd:b2:1e:7d:88:3a:c6:d2:f3:
1c:0f:19:af:13:57:b8:82:78:55:9e:b6:30:72:c0:df:f6:21:
82:98:cb:45:a3:88:f2:9a:ba:9d:8b:ce:68:48:21:5c:ce:f1:
fd:88:ad:28:15:de:58:fb:5f:d2:1f:51:5e:4f:ea:ef:8c:c0:
b4:7d:bb:0b:b3:60:84:e4:22:99:8a:7a:ae:a3:bb:cb:71:fe:
20:a8:ac:f0:0f:66:ed:68:1f:8d:a5:5d:84:f9:15:97:ed:97:
30:f2:06:33:b1:bd:b1:cd:06:d4:03:05:03:43:6a:e1:6e:a6:
76:21:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:18 2025 by rpki-client