
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier: jZfDYlJCPSY/RYiQFJkpB0r1xbPWkEk0QREatxw8yh8=
Subject key identifier: 41:B8:E8:D3:46:0A:38:60:38:8D:59:A2:7F:4D:EE:95:D6:DF:82:A7
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 0198D5F134FA5A28A85B5298703A14BFA92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number: 0808
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: nnemXMOzwZyGFhaQ5BinQjn8zL1HOCZ7OSBnGbNn9PE=)
2: kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa (hash: g89MP8+0dMYS7AxnUtFPb35wq3oTVlO8M0aQrm02TxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:34:fa:5a:28:a8:5b:52:98:70:3a:14:bf:a9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=41b8e8d3460a3860388d59a27f4dee95d6df82a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:e3:e8:c7:2f:4c:69:be:c8:ee:9b:b4:26:
83:30:f0:5a:aa:58:93:1e:19:39:2f:44:90:e5:e8:
b0:9e:18:02:c0:4a:71:40:3c:17:9b:51:6e:fa:ec:
45:4e:cf:2f:56:c0:68:2a:9d:9c:e5:48:ea:f2:fe:
fa:8a:d5:94:8f:dd:37:ff:fc:d0:7e:06:d8:6b:c0:
09:20:e3:07:97:93:ea:0c:4d:a3:e7:37:2b:04:dd:
10:c4:85:31:fa:31:04:3a:72:f3:0a:80:f2:ba:0d:
df:f5:09:b0:58:d7:2a:d1:94:6e:84:92:20:0f:c3:
79:6a:be:a5:33:d2:c1:0a:8c:af:f5:66:e0:38:7c:
92:2f:90:e8:4c:4e:04:c5:85:4b:69:c3:f0:1b:b1:
13:77:a7:bf:bf:4b:c0:c4:32:cc:5b:14:b3:a7:7d:
3e:6c:ca:bf:4a:62:4d:0e:32:6d:30:8b:51:6c:92:
32:60:2b:e6:df:12:b4:5a:35:ff:03:14:bb:89:fe:
94:4c:63:8a:64:d0:d1:53:f4:06:4d:a4:82:45:3c:
7c:ed:4a:51:b8:61:ec:7a:ad:c9:d4:a4:20:9d:72:
9f:1a:d9:28:0b:ad:67:69:c8:ce:1c:ab:1d:96:e0:
ef:b7:9e:ce:78:b4:cd:6a:10:92:43:c0:08:78:bd:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:E8:D3:46:0A:38:60:38:8D:59:A2:7F:4D:EE:95:D6:DF:82:A7
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:a2:f9:0f:f7:d3:ad:8d:87:77:9a:5a:fe:7d:02:2a:bf:
4e:8a:ee:47:46:7a:c0:4c:ea:6a:19:7d:91:a9:f1:ae:78:6a:
97:8e:b5:43:0d:81:1c:9f:67:bb:2e:e8:9d:30:b3:39:0d:11:
0c:8f:10:d3:b8:13:8a:19:ee:f0:39:94:2e:9d:4a:2e:a9:5e:
2f:ee:35:1b:97:bf:52:95:b9:95:bc:02:dc:c4:e3:35:5b:24:
62:f0:7d:7a:23:43:8b:fd:41:49:71:ea:b2:04:01:84:09:b3:
35:7e:7e:4a:83:b1:92:a0:a2:6d:42:41:80:80:32:a0:b1:d2:
e1:6e:5a:9a:5f:29:64:2f:19:e6:85:86:91:1e:81:29:4b:fd:
5d:73:53:45:3c:70:5c:b8:8f:84:d0:7a:99:b8:5e:6b:cd:46:
c8:78:d9:3c:98:cd:28:06:ae:8f:cc:82:22:ef:ab:74:25:b5:
56:ac:b3:df:47:f4:1f:32:3f:3c:bb:30:89:8d:7e:d1:40:b1:
6d:8c:9b:f0:79:dc:46:9f:c8:8f:53:0a:f9:09:76:88:5e:1f:
13:7e:85:41:ea:34:01:53:c4:3f:39:25:1e:9f:a0:2f:24:0a:
b8:c1:52:57:e9:d3:15:c4:c5:d7:f0:54:4a:b7:db:e7:81:bc:
db:92:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:38 2025 by rpki-client