Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
File: FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft (raw, json)
Hash identifier: MvclixAcpfLKN+AKI8Lnjp3JA+jVqQ+dXksL1aS2Ojo=
Subject key identifier: 87:19:FC:04:1C:FF:89:94:3D:C2:8F:1B:2C:B4:80:EA:EF:BB:C5:12
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 01987BD2691084A804C95BCF812673F0C0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
Manifest number: 013B
Signing time: Tue 05 Aug 2025 20:00:43 +0000
Manifest this update: Tue 05 Aug 2025 20:00:43 +0000
Manifest next update: Wed 06 Aug 2025 20:00:43 +0000
Files and hashes: 1: FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl (hash: bGb2WGTD2sYuTXfjx3giApQMKaFxD/jr0+lkRmPjXug=)
2: ve2iEFS7yneK4NHtoTNszVB8cZo.roa (hash: g/XvhTcgORHoQzc25n1ZqGUd92LVhhds69w5ITmpr4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:69:10:84:a8:04:c9:5b:cf:81:26:73:f0:c0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Aug 5 20:00:43 2025 GMT
Not After : Aug 6 20:00:43 2025 GMT
Subject: CN=8719fc041cff89943dc28f1b2cb480eaefbbc512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:a4:d7:21:7a:cb:f4:9b:52:34:b3:70:62:
cf:25:b8:24:7a:a0:7a:63:88:6c:81:8b:c0:90:f2:
38:67:4d:b8:db:d0:ab:01:63:e1:19:5c:ac:5d:39:
c0:de:56:3d:b6:72:68:85:f6:77:94:cc:20:a5:f2:
1d:62:7a:46:1d:e3:77:b0:6a:d5:87:01:08:a5:d6:
22:91:e5:c1:af:0a:d9:56:91:0a:e2:30:a3:75:3c:
0d:5e:46:b4:b8:cc:9c:bb:34:ed:86:8c:a1:32:b3:
0c:4e:79:d4:85:7e:f3:bb:27:fa:00:97:ee:a6:e8:
1f:9b:01:3c:c5:e2:5c:56:8d:8a:70:91:e6:2c:18:
34:f0:af:03:f2:14:ed:33:12:01:a6:08:a2:87:2d:
ca:19:f2:79:02:21:7f:e3:ac:b1:c4:77:83:70:b1:
2b:73:d4:7a:3e:21:c0:93:61:ac:d1:53:9b:67:4d:
50:d7:d4:02:5d:67:dd:ec:38:68:15:13:77:d6:19:
09:ae:dc:b9:c2:57:8c:06:2a:5f:7b:7c:96:9d:4d:
13:fa:54:d2:91:56:d6:0e:f5:37:55:5e:35:5e:04:
bd:56:d0:90:7e:c0:2a:f0:45:9c:64:e4:d9:9b:44:
4c:68:5d:53:61:93:e9:16:61:70:ae:b0:f4:c7:54:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:19:FC:04:1C:FF:89:94:3D:C2:8F:1B:2C:B4:80:EA:EF:BB:C5:12
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:03:cf:07:ab:04:18:c2:1f:45:3e:2e:ec:3c:c2:6e:f2:af:
19:b9:d7:10:31:e0:f5:57:d1:49:a7:8f:65:33:86:bc:f4:3e:
42:ab:39:63:01:3b:b1:53:6b:34:ee:0e:60:6d:68:97:45:05:
43:3e:7a:b3:ea:f5:9e:bd:57:5d:94:fd:e6:dc:bb:71:cf:72:
83:97:5e:fb:c2:97:e3:56:d2:f9:c8:b9:db:38:c5:b9:3a:a2:
26:70:c3:99:13:68:6e:41:0f:d2:55:a9:52:4c:12:79:ed:45:
75:5c:b8:05:cc:10:34:ea:19:0e:89:29:a8:75:22:87:1b:8c:
55:cc:93:c7:b0:ba:8e:32:36:95:c4:1f:c4:24:7d:ed:22:fd:
0f:49:83:32:16:40:e4:9f:df:eb:7c:fb:57:d8:02:96:57:e4:
92:28:b2:1f:85:b5:19:88:6f:87:5e:f5:d8:b2:04:bc:07:d5:
f3:f0:77:95:72:64:7f:41:28:bd:a9:a5:ac:68:2b:cc:a7:6f:
cf:65:88:f9:43:ab:fc:ae:91:ed:31:62:e7:ce:17:98:ca:c1:
d5:57:51:39:ac:72:98:0b:cf:5e:7e:e1:72:45:29:99:0f:53:
97:91:49:71:bd:1c:5c:21:88:83:70:27:53:06:e5:a4:c8:41:
25:ac:33:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:15 2025 by rpki-client