Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
File: FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json)
Hash identifier: wCsEGLzbxi16ARk1GEuySONIoFi3nDuZBDxMsl/JYOg=
Subject key identifier: 14:90:C7:EE:81:D8:F6:9C:AE:5A:C6:A0:1A:0C:80:9F:20:5E:14:4C
Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Certificate serial: 0198D4DFCAF21EB532A337710A36E0D4CCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
Manifest number: 0A41
Signing time: Sat 23 Aug 2025 03:01:32 +0000
Manifest this update: Sat 23 Aug 2025 03:01:32 +0000
Manifest next update: Sun 24 Aug 2025 03:01:32 +0000
Files and hashes: 1: C5kS-eXFEoRGhSGKrj1aky_A-YU.roa (hash: 0Cexvh0L+qwpqym6REc7bvetIUnS6MiKORaDRSgSxQo=)
2: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: 8SmozEfR0DqR6pOfd5hoXlt7lmnetlkJOchIOt2jq1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ca:f2:1e:b5:32:a3:37:71:0a:36:e0:d4:cc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Validity
Not Before: Aug 23 03:01:32 2025 GMT
Not After : Aug 24 03:01:32 2025 GMT
Subject: CN=1490c7ee81d8f69cae5ac6a01a0c809f205e144c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:20:5f:f4:99:38:a2:ed:61:5b:55:2e:6d:
99:17:b6:59:9f:88:21:e0:ce:a0:f3:cf:fd:0e:f5:
83:80:77:38:d6:d1:0e:8a:5f:e7:e2:c4:f1:06:27:
88:b3:1e:42:52:9a:c1:77:98:da:5a:7c:98:62:e6:
6d:11:48:d1:35:ff:96:60:36:ec:43:e5:dd:9b:2f:
85:fb:d7:31:9b:e8:a7:2f:c9:d7:0c:73:b7:3a:a3:
a8:a7:b8:78:1c:55:9e:69:22:a5:35:50:a7:a1:25:
43:a5:d5:41:76:39:58:84:27:20:0a:25:5a:23:7e:
c2:7f:f1:b2:36:f7:c4:b2:ef:0e:89:a1:7e:21:9e:
06:c1:b6:64:13:36:89:de:c0:4c:26:c4:b0:a3:cf:
db:45:c8:7c:6f:76:7b:8e:b6:6d:fc:4a:63:49:b7:
4a:35:eb:cb:f3:ee:f6:f6:ed:93:f3:2f:25:d5:91:
ab:ee:8f:00:02:32:1d:9d:69:6e:8d:25:4e:b2:6b:
3c:40:20:73:d7:75:d1:02:70:0a:4f:e9:38:fd:ad:
34:2a:8e:a9:a9:0d:00:67:ea:40:77:6b:b1:41:a2:
2f:06:f5:f1:5b:07:62:bb:78:5f:49:8e:cf:9a:92:
92:59:20:2c:89:7c:d7:cf:35:95:6c:11:fe:58:e8:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:90:C7:EE:81:D8:F6:9C:AE:5A:C6:A0:1A:0C:80:9F:20:5E:14:4C
X509v3 Authority Key Identifier:
keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:66:95:85:a8:79:8b:5e:db:b9:bc:b6:a1:c1:7d:b5:08:ed:
6c:df:da:16:a0:a7:8f:ab:7a:cb:78:43:e4:5e:8b:76:f8:cb:
48:c4:5b:d8:03:25:5f:05:61:c4:f1:8d:18:40:64:51:00:87:
8e:b1:ee:19:5b:84:e3:44:bb:d2:ef:a5:1b:c5:42:bb:7c:f4:
10:01:8b:8d:a8:77:5a:7f:32:7b:00:46:3a:ad:2e:0f:91:fb:
8e:f1:c1:89:b3:64:73:07:c7:a2:fc:28:3a:84:b0:31:55:84:
63:b2:b8:d4:77:0c:db:55:f6:ed:9c:ac:a5:65:d7:56:48:08:
3c:32:30:90:d5:cd:b8:9c:20:df:fc:77:50:97:66:dc:12:9c:
37:cf:34:49:6b:3b:1d:0b:56:7c:ba:e7:a3:db:61:21:b7:56:
ba:e4:d4:43:6f:87:7a:94:32:71:e0:45:b0:a9:76:45:22:35:
8d:ca:6d:2c:ae:f4:e1:55:d8:73:f9:91:a1:10:be:b8:91:d7:
aa:2a:78:23:49:2f:35:a3:25:5f:3f:3a:59:68:d4:de:12:ca:
e0:35:1d:99:b9:5e:91:5c:cc:14:af:08:ba:0c:f5:42:a5:58:
3c:cd:33:a8:16:73:d8:3b:97:bc:ba:54:a0:f9:90:71:91:5d:
b1:a4:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:26 2025 by rpki-client