Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: ni1Mnbq1OpOH17/ZaEzfcrS3AmKD1+OevF3R5sD2cIE=
Subject key identifier: AA:76:34:92:06:D8:71:B2:63:92:48:E7:CF:EF:4A:22:F2:9E:7B:F8
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 0198D5BBC0BF054F29D5A2F6F489CA863B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: vtjy02kOvjUnj+LxKYZSOMgyVMUtPzhjmVX1dXD7uks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c0:bf:05:4f:29:d5:a2:f6:f4:89:ca:86:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=aa76349206d871b2639248e7cfef4a22f29e7bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:7b:26:a7:fe:e1:46:45:57:88:fc:75:51:
8d:e7:5c:db:a0:5c:84:95:70:02:0d:88:72:10:72:
f6:88:6e:0b:de:bc:04:99:5b:b3:7a:db:58:56:7e:
3a:4d:45:9c:40:ef:0c:b8:f9:be:94:d6:50:47:2f:
80:ce:96:a4:e3:ae:99:00:4c:e0:33:c4:bf:81:8f:
1f:94:f9:c7:6d:78:b4:26:7d:dc:42:2c:0e:25:6a:
1f:41:cf:97:0b:02:d9:b1:2d:4d:5f:16:0e:37:14:
10:5b:ef:b3:70:6a:e7:89:ac:ce:10:36:78:aa:17:
8a:71:87:c8:d1:0c:be:25:d0:79:f3:b5:09:6a:4f:
7e:3b:1a:73:fa:a2:fa:18:76:f7:de:a3:0e:90:87:
ad:6a:73:d5:c3:78:c4:7c:61:c3:cc:ea:6d:dd:fc:
1e:2d:fb:53:7c:35:0e:09:c1:10:c9:30:4b:78:1f:
1f:b9:e9:0e:8c:1a:56:0e:f2:10:8b:21:5e:ba:7e:
45:14:45:6d:9b:2c:5e:00:cd:66:44:6e:d3:f9:03:
e2:09:39:55:57:4d:5c:8c:2b:93:ad:7a:33:39:55:
34:60:6f:aa:43:83:cf:7b:43:5f:48:3d:11:ff:50:
24:f3:ab:15:9d:92:fa:47:32:21:3e:5f:71:c4:e3:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:34:92:06:D8:71:B2:63:92:48:E7:CF:EF:4A:22:F2:9E:7B:F8
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:02:10:87:2e:12:65:4c:d0:65:92:6a:cc:bb:91:3c:46:f4:
8a:56:13:64:b7:41:9d:b2:a2:a0:ae:e4:cb:37:55:54:f8:0e:
1d:73:a7:56:6d:fd:c8:28:ab:06:f7:39:93:af:e0:19:6b:24:
45:3e:85:28:ed:28:7f:f7:a6:dc:f1:80:6b:52:a6:2e:1a:7c:
01:69:ac:ed:9d:f2:5d:f3:76:5e:15:4f:cb:17:7d:4b:6f:57:
86:c0:20:29:08:45:85:d8:dc:b2:20:1d:d0:08:bd:43:bc:38:
a3:cb:6d:95:26:ba:54:c8:34:ad:0d:81:39:40:c1:5e:53:6d:
88:e6:c5:12:d7:da:db:ad:02:07:f8:59:8b:a3:30:b4:ea:cd:
0c:93:90:66:90:3f:f8:4c:3c:97:5d:17:e4:d6:c5:14:56:e3:
1f:0f:a1:73:a7:99:cf:5a:83:ea:26:58:4b:48:69:79:08:f6:
d7:34:17:84:96:f2:11:1d:9c:34:a5:6c:1a:29:4c:63:dd:00:
ed:b0:9d:e6:76:4c:c4:34:fe:20:4b:0e:e3:98:03:d6:df:94:
68:c1:19:87:70:2b:e4:bf:ff:ed:00:9e:72:2f:68:76:0c:24:
80:a9:ec:5b:60:5a:f6:03:8b:16:a5:e1:fc:bc:cd:62:c1:5e:
5e:e2:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:15 2025 by rpki-client