
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier: 5tCnH3yt6hyqQpJ86tgVTVlNk8paH7XzmoJT4mXQfIk=
Subject key identifier: C5:96:5E:AC:86:B4:93:39:4D:64:22:F6:05:9F:57:69:29:C6:BE:92
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 0198D5BB8F4E2392401D00C6C0CE276576C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:35 +0000
Manifest this update: Sat 23 Aug 2025 07:01:35 +0000
Manifest next update: Sun 24 Aug 2025 07:01:35 +0000
Files and hashes: 1: 2A_3tfsfLBfsIjkj25Wq_P7GURU.roa (hash: 4w2SNRAXRMcEZVSqmqD0dMjfx/4HpwrZYp/R521drvc=)
2: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: RSgySCrxRY//+yeUmDYVxxnGNi00Ob8AJMFk4sdjqNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8f:4e:23:92:40:1d:00:c6:c0:ce:27:65:76:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Aug 23 07:01:35 2025 GMT
Not After : Aug 24 07:01:35 2025 GMT
Subject: CN=c5965eac86b493394d6422f6059f576929c6be92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:73:43:bc:dd:c3:c9:dd:03:1b:a3:96:64:
06:d4:a9:9e:ca:cc:7e:5f:fb:0f:a6:1a:9b:40:5b:
b1:f2:98:d8:3b:c6:2c:33:f9:91:4f:5a:01:74:dc:
40:4c:a0:4a:f2:39:e6:34:ca:76:2f:4d:78:b0:cc:
58:26:c2:fe:30:b8:92:d0:52:6c:6a:e6:83:6a:a0:
6c:09:37:b7:78:0f:05:54:82:44:d1:7a:9d:f8:5d:
c7:79:41:e5:d0:75:83:f9:dd:53:80:a7:e9:5c:32:
d4:f9:67:ef:87:09:9e:be:dc:4d:64:ce:5e:dd:12:
fc:c8:70:4e:3e:ab:4a:05:29:84:f9:d2:02:c9:bb:
69:2d:b6:b5:91:92:e3:91:cd:85:c1:cf:c1:17:62:
18:7b:db:5e:da:56:74:28:05:1c:e2:43:f9:f8:63:
4b:fd:ba:99:10:f1:48:2c:3c:62:ee:ba:65:2e:85:
64:a5:fc:a6:14:b2:bb:4a:a9:85:fa:95:64:4d:e0:
82:6f:ee:bf:30:51:7e:cf:7a:c4:03:3a:7f:ff:a1:
2c:ca:a6:f7:4d:73:e1:d2:78:69:fa:53:fa:ca:97:
f9:b4:35:e5:8b:72:9e:50:be:de:28:40:8b:7e:71:
3e:aa:3b:b2:a3:30:f9:42:86:98:8c:00:00:2d:04:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:5E:AC:86:B4:93:39:4D:64:22:F6:05:9F:57:69:29:C6:BE:92
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f5:b1:9f:dd:08:02:b7:06:7b:86:68:2e:d6:58:71:42:b3:
cb:31:6b:80:b9:42:53:bf:90:64:a1:1c:76:4e:d5:8c:5b:48:
9e:6d:28:dd:92:10:97:c2:f8:19:ed:32:25:23:41:be:f9:fe:
c3:f7:3b:73:74:7b:22:ef:b1:a8:e7:06:d8:9e:d2:b7:2f:a5:
f7:f3:b1:d3:b5:bb:66:7a:fa:73:62:53:bd:14:97:dc:5f:f9:
f1:32:3c:01:61:d5:23:54:74:29:dc:77:3b:34:24:8c:88:78:
5e:af:99:17:4c:02:e3:e6:bd:a2:d7:fe:bf:35:37:92:93:70:
08:40:57:b9:48:2d:c1:68:71:f5:64:cd:fe:47:b3:1c:54:d3:
18:76:53:af:a2:31:43:24:00:de:aa:f6:f7:97:dd:32:80:44:
0d:5b:35:69:54:3d:9b:b1:58:4f:0f:1c:be:c7:d7:e8:16:34:
93:c1:7a:04:08:33:46:51:af:8a:3d:11:82:ce:99:87:36:b1:
4e:82:1c:bc:aa:79:71:fd:cc:1f:e8:6d:0b:5f:af:8a:38:a0:
57:ea:f7:d4:00:ce:df:f9:fb:18:24:af:35:d8:59:a2:62:df:
c4:c2:a3:a1:52:13:1d:89:c7:75:6f:c6:8c:1b:31:61:5a:c7:
d4:86:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:09 2025 by rpki-client