Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: ZbxUhb5gR2PcXx4h6IOPZRBPQax3qPPyntxNF1B/kDo=
Subject key identifier: 54:95:0A:7C:C2:0C:BA:C1:44:3F:0A:B9:99:5A:A7:9F:92:6A:9C:33
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 0198D4E023160EE9E03CFF0340337E1CC717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 118E
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: 8ak4IQGNKvQoTyKV4+Uy0CPQE7fQ6PaQVVaeefof7mk=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:23:16:0e:e9:e0:3c:ff:03:40:33:7e:1c:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=54950a7cc20cbac1443f0ab9995aa79f926a9c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:f0:79:a4:b0:bd:36:1d:b7:6c:58:95:c6:
e7:c5:9c:e8:12:81:cf:44:fb:1b:2d:37:47:79:09:
74:ff:20:b3:6b:5e:45:a2:c8:e4:05:d6:8e:2d:5d:
46:19:e0:01:01:ac:2b:42:e8:30:ce:e1:1f:62:1b:
88:3e:b6:25:9d:9b:18:35:dc:0b:dd:b3:78:00:7a:
71:25:75:c4:86:20:ad:ef:3e:bb:c7:30:cb:92:72:
85:ec:78:66:71:25:c1:29:23:3a:e4:cf:e3:06:26:
a8:73:3a:e6:fb:5b:55:e0:80:e6:83:29:80:dc:51:
2f:ad:49:e5:fa:d7:21:ce:2e:c4:6f:42:a9:f5:34:
97:20:bb:05:f3:f1:64:c2:51:48:f2:ed:74:79:db:
1b:f0:c9:2e:83:73:58:63:39:3e:a8:bc:c3:46:01:
12:88:bd:c9:e2:af:87:4c:a4:2d:99:cc:7b:45:29:
4f:78:e7:83:d7:99:1d:3a:7c:63:28:e1:b5:25:b6:
11:d2:d6:be:51:6e:51:11:33:f4:75:c3:4e:8d:17:
cd:55:cb:f6:ce:ce:81:30:82:94:4a:d4:52:f9:88:
be:cf:03:f7:8a:35:01:67:0d:d1:9f:ea:5a:e2:89:
14:dc:17:e3:ce:f0:91:34:22:f4:8d:2d:ee:26:d0:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:0A:7C:C2:0C:BA:C1:44:3F:0A:B9:99:5A:A7:9F:92:6A:9C:33
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:29:f3:3d:b9:bb:8a:66:e0:05:2f:9f:36:8e:55:14:b7:4b:
1c:06:82:30:da:e9:41:aa:ef:62:72:d0:83:1f:27:ab:ff:b7:
fc:ad:87:31:a1:2e:5c:e3:97:33:5a:4d:bd:c0:5c:e1:c5:68:
d8:11:63:d2:61:ce:b6:58:5e:2b:91:d0:66:af:01:87:5b:32:
cf:a5:24:1e:46:94:0c:61:da:70:a1:f5:c8:71:41:3c:3c:0b:
a5:66:f5:12:9d:5f:cf:1c:7a:11:d6:e6:0e:81:15:1f:c7:be:
f1:4d:da:7c:df:1c:eb:5c:28:e3:8a:88:eb:90:ca:5c:b5:06:
50:b0:66:6a:75:5d:3a:10:b4:74:a3:b6:1e:6a:e9:9e:d0:cf:
34:db:50:03:d7:10:11:f5:f7:ef:5a:1a:5e:14:f4:e8:b6:8d:
14:b1:3e:39:05:46:35:89:8f:5d:45:27:b8:15:58:86:8d:36:
69:ea:4e:a2:7d:5c:48:3c:92:b5:17:a3:f6:c7:c3:99:b9:e1:
d1:35:c4:f2:f6:8f:91:bd:87:a2:b1:6c:c3:9c:61:17:d1:8b:
09:c8:43:fe:54:66:21:24:f4:be:4e:e4:26:21:3e:2d:8a:74:
ee:bc:5d:e3:f9:f4:ed:a3:b9:64:19:26:f6:7c:c7:4f:68:5d:
99:a1:0d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:54 2025 by rpki-client