Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: PLeFClsW/Cf6Ip84CoHos7YWbK4bonb6WOsKcVLOjcc=
Subject key identifier: 03:53:5C:9A:F0:BC:36:F4:4A:16:BF:0F:0F:E6:75:B8:39:15:7D:0F
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 019879ADFE4EE7703A3607A310880BE79766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 10:01:42 +0000
Manifest this update: Tue 05 Aug 2025 10:01:42 +0000
Manifest next update: Wed 06 Aug 2025 10:01:42 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: lFDzQmOr1rPdlbsSGhQukxzyLEB5U+eRykmQpd6LVXA=)
2: rEnYgfgJaCjn_qIROc2RziotFd8.roa (hash: tyTMLNN1BSIUG9pwd6OlkaqCcb+yNG9RgWzpF+pWE60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:fe:4e:e7:70:3a:36:07:a3:10:88:0b:e7:97:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Aug 5 10:01:42 2025 GMT
Not After : Aug 6 10:01:42 2025 GMT
Subject: CN=03535c9af0bc36f44a16bf0f0fe675b839157d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:ac:44:c2:ee:fe:d7:64:8f:ef:86:ea:ed:
8c:f3:68:35:7a:8e:0b:56:df:d2:ff:7a:84:cb:7e:
a6:97:5f:9c:83:e3:a6:9a:2b:f1:15:3a:da:6e:68:
f3:11:50:77:7f:40:71:48:34:e4:13:02:e9:fe:87:
2d:82:12:a8:54:2a:50:bc:92:d0:6f:38:05:50:15:
6e:bd:19:4d:ec:3f:7a:54:55:59:0f:73:37:e7:bf:
74:32:56:7b:74:61:7a:d6:7f:10:8d:10:43:07:e3:
cb:0f:b7:3d:c4:86:95:ca:0f:dd:01:22:ff:30:cd:
2e:cf:e9:d3:eb:15:48:50:81:45:f2:8e:81:61:67:
29:02:86:1f:55:ef:6e:f1:d9:45:a6:b8:45:8e:0f:
39:6b:07:eb:ec:89:96:2b:c8:bf:2d:00:6e:90:39:
bb:4b:6b:ea:ff:7a:e3:ba:15:a2:7a:fa:74:01:b0:
94:92:57:8e:fc:cb:1c:ec:c2:82:18:7d:9d:fe:c9:
eb:ee:a0:de:72:e0:b7:0a:2c:4a:fd:f8:6f:82:19:
72:86:b4:5c:45:49:87:5d:97:56:6e:3a:ae:bf:4b:
90:0f:4a:06:11:86:c4:48:3f:67:20:14:56:99:db:
b6:25:49:3a:ca:87:d4:ce:de:f7:a9:0e:7d:06:fe:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:53:5C:9A:F0:BC:36:F4:4A:16:BF:0F:0F:E6:75:B8:39:15:7D:0F
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:75:ec:4e:6d:5e:ed:22:d0:11:a9:b3:e2:6c:02:4f:59:16:
5d:5b:4e:59:cd:40:51:30:36:0b:1b:32:32:73:be:30:36:0a:
4b:d2:75:7d:6d:07:96:e8:0a:c3:71:d4:dc:cb:de:19:58:86:
03:8d:dc:66:98:7d:22:f7:0b:1c:a3:6c:27:89:15:59:81:34:
65:36:8a:e6:9e:08:bb:b2:c1:0f:e6:07:04:53:6c:20:e3:31:
4c:9e:1d:e5:9c:73:ec:25:6e:6e:75:bc:53:04:9a:6e:50:e9:
f4:05:c3:ff:0e:9b:f1:4c:54:5a:96:10:c1:67:8f:92:9a:ef:
a4:cc:ea:c0:ed:a0:1c:ca:02:7a:c4:95:ad:f2:fc:4f:38:0a:
61:91:af:b4:f2:f1:43:73:bb:3e:42:19:5f:3e:1b:1b:c6:25:
6c:25:12:70:b2:db:2e:72:96:1d:3e:1d:f4:cd:3c:8a:8b:79:
b1:93:31:7e:f7:60:9b:d6:ea:e2:b2:bb:d9:93:50:1c:25:d4:
5a:ef:b4:fa:74:49:8b:b5:ba:fa:7c:6e:75:13:f5:e3:99:7e:
f1:40:76:04:96:8e:fa:c0:c4:7a:1a:59:ab:de:30:3e:50:08:
88:1b:3b:b1:80:4b:75:56:c2:63:23:71:6b:67:14:87:db:d2:
b4:17:45:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rf5O53A6NgejEIgL55dmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGIwNGY5YzkyMzE3ZWNjN2EyYWFmZjJjYTRkNzA5OGQx
YmQyNmEwHhcNMjUwODA1MTAwMTQyWhcNMjUwODA2MTAwMTQyWjAzMTEwLwYDVQQD
EygwMzUzNWM5YWYwYmMzNmY0NGExNmJmMGYwZmU2NzViODM5MTU3ZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmemsRMLu/tdkj++G6u2M82g1eo4L
Vt/S/3qEy36ml1+cg+OmmivxFTrabmjzEVB3f0BxSDTkEwLp/octghKoVCpQvJLQ
bzgFUBVuvRlN7D96VFVZD3M35790MlZ7dGF61n8QjRBDB+PLD7c9xIaVyg/dASL/
MM0uz+nT6xVIUIFF8o6BYWcpAoYfVe9u8dlFprhFjg85awfr7ImWK8i/LQBukDm7
S2vq/3rjuhWievp0AbCUkleO/Msc7MKCGH2d/snr7qDecuC3CixK/fhvghlyhrRc
RUmHXZdWbjquv0uQD0oGEYbESD9nIBRWmdu2JUk6yofUzt73qQ59Bv5EcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANTXJrwvDb0Sha/Dw/mdbg5FX0PMB8GA1UdIwQY
MBaAFBTbBPnJIxfsx6Kq/yyk1wmNG9JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMt
NThjN2JmY2RjZmRmLzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMtNThjN2JmY2RjZmRm
LzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXXsTm1e
7SLQEamz4mwCT1kWXVtOWc1AUTA2CxsyMnO+MDYKS9J1fW0HlugKw3HU3MveGViG
A43cZph9IvcLHKNsJ4kVWYE0ZTaK5p4Iu7LBD+YHBFNsIOMxTJ4d5Zxz7CVubnW8
UwSablDp9AXD/w6b8UxUWpYQwWePkprvpMzqwO2gHMoCesSVrfL8TzgKYZGvtPLx
Q3O7PkIZXz4bG8YlbCUScLLbLnKWHT4d9M08iot5sZMxfvdgm9bq4rK72ZNQHCXU
Wu+0+nRJi7W6+nxudRP145l+8UB2BJaO+sDEehpZq94wPlAIiBs7sYBLdVbCYyNx
a2cUh9vStBdFcw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:29 2025 by rpki-client