Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: yXSM5X6rmSPsiCASmR5NTQW0W7BkQR/3qXP6CHRCz8c=
Subject key identifier: 4F:9F:19:0A:BC:79:40:9F:E1:36:FE:A7:F3:E4:57:7E:3B:50:4C:97
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 0198D472CC0575A19682F2C22FBF24A93728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:29 +0000
Manifest this update: Sat 23 Aug 2025 01:02:29 +0000
Manifest next update: Sun 24 Aug 2025 01:02:29 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: 5X+nbh9k4ZXonQfOQWFI3tX8l01s5EC7vw+zBkxNBDc=)
2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=)
3: nGeZMPiJHuxTp5r7-LPyVgsD0PU.roa (hash: l7oDkA0XjfZYSaNEYHxPZ+fCmO92nea2c0B83OBtIh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:cc:05:75:a1:96:82:f2:c2:2f:bf:24:a9:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Aug 23 01:02:29 2025 GMT
Not After : Aug 24 01:02:29 2025 GMT
Subject: CN=4f9f190abc79409fe136fea7f3e4577e3b504c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:8f:41:ba:9a:58:4a:8b:2f:5f:63:88:46:
38:15:87:55:e5:c3:20:72:a9:c0:04:cd:7a:47:2f:
2e:f4:97:3c:88:d1:66:a6:e4:85:df:ad:ca:b8:8f:
44:02:1f:8e:db:1d:13:4b:53:40:50:d9:fd:5b:a9:
d5:e1:e0:76:06:56:65:0f:21:99:86:eb:1b:70:64:
3f:48:89:1d:4e:9d:77:ea:c6:09:5b:67:cf:68:25:
87:1d:55:74:d6:a3:b9:80:76:dc:59:3b:77:f1:42:
ba:f0:6e:6e:dd:a4:7f:3f:ba:29:49:9c:2b:37:9c:
38:00:f8:0f:ce:5c:7e:c2:50:3e:f7:51:a8:02:7f:
96:a2:b1:01:ae:8a:e0:27:8b:76:56:ab:02:a4:b5:
fb:11:9d:5d:48:11:f3:6e:b9:7b:9d:fe:af:cf:ef:
9c:9d:d4:19:f5:31:81:b1:38:87:55:e8:cd:65:0a:
cc:4a:32:2e:23:d6:bd:35:cf:b9:d0:c7:94:a9:ef:
25:f2:1c:99:bd:11:d2:9f:a5:af:d7:e9:b5:5b:6b:
47:8f:c0:c9:08:26:0c:5d:74:fc:98:89:a5:a1:cc:
ad:9c:a2:79:34:95:c8:9b:34:3d:34:e2:ba:d9:d7:
ae:c2:9d:28:02:e6:4a:bc:ce:98:95:cf:99:53:f3:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9F:19:0A:BC:79:40:9F:E1:36:FE:A7:F3:E4:57:7E:3B:50:4C:97
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:46:73:35:88:a1:e5:22:52:88:ca:af:40:e3:17:a6:a6:33:
65:95:31:69:e4:31:83:1c:f8:5d:f5:b6:ac:1d:16:0b:a3:45:
ba:ab:3f:44:ec:67:ab:7d:5d:5b:24:06:98:76:55:07:fc:88:
89:c3:06:85:60:a1:29:b2:df:cb:9f:90:9d:3f:93:7f:af:a1:
68:0e:d2:20:00:f6:d8:c4:b2:17:ad:0c:34:2e:7e:51:a8:e2:
e8:99:6f:46:cd:ef:15:14:b2:9d:3c:b1:a7:e1:8f:17:a1:7f:
9c:83:40:68:0d:bd:56:5d:29:7d:29:c7:2c:21:b5:46:21:4c:
c6:ae:3a:2c:ae:c7:26:f0:d6:89:7c:b2:c9:7f:ba:90:07:81:
ef:58:25:e8:e3:d8:08:3c:88:fb:5d:29:cc:ba:b5:f2:6c:21:
54:cb:a0:ba:8c:df:9f:1d:2f:68:37:00:5b:c7:a0:c8:df:27:
0d:a4:cf:91:c1:9b:e9:ef:33:89:bd:a4:40:52:2c:71:b2:20:
b0:5f:59:33:4f:ef:31:4a:5d:ce:45:a1:88:05:39:db:00:fd:
fe:b2:52:09:66:0d:51:1a:ad:bb:4e:70:e2:05:2a:84:da:87:
81:e3:da:62:91:0a:73:cf:f7:ca:b5:f9:12:4c:2b:7b:ec:98:
83:a4:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:38:58 2025 by rpki-client