Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: qKltFnKm0DrPAAQ2iRdwuWJ0QlMD6+bZUOHwgDc/asA=
Subject key identifier: 5C:CC:B5:44:FA:80:29:6B:9E:9E:0E:4A:D9:4E:01:72:9B:D4:87:C6
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 0198733D2B155694D29A7B391C634DCCDAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 04:00:45 +0000
Manifest this update: Mon 04 Aug 2025 04:00:45 +0000
Manifest next update: Tue 05 Aug 2025 04:00:45 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: 8RoMBDxmOiazBGatTLtPAJ40494ZgHlPrqnz5dqfB8A=)
2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:2b:15:56:94:d2:9a:7b:39:1c:63:4d:cc:da:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Aug 4 04:00:45 2025 GMT
Not After : Aug 5 04:00:45 2025 GMT
Subject: CN=5cccb544fa80296b9e9e0e4ad94e01729bd487c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:e5:c9:de:77:37:08:20:4e:79:4c:b7:40:
98:8e:54:56:8f:ad:32:5c:21:43:ff:02:ff:94:a7:
79:d3:e6:32:f2:52:ab:bb:fe:86:73:d5:25:25:9a:
bb:51:db:db:37:f7:b7:0f:93:08:57:f1:af:5a:58:
8c:0e:c6:60:c0:4c:76:70:d6:02:10:e1:28:a2:c1:
5c:de:36:81:73:fe:04:d9:0a:05:ce:d1:dc:4e:d2:
0e:f4:9e:b8:0d:a2:0b:4f:19:1c:3f:bf:26:e9:30:
da:a3:ab:38:c8:30:a1:ba:28:7e:9f:d9:9b:c4:6a:
1c:cd:2c:eb:33:92:a9:53:b7:23:83:b1:60:75:d8:
0f:e3:d6:f6:77:b1:5d:b0:ce:3a:f5:03:55:ef:06:
20:25:71:28:28:44:4a:a7:b1:8a:d8:81:6b:48:9d:
41:5e:26:53:b8:da:83:3d:72:06:59:ed:db:e3:c8:
f7:cd:e0:9e:39:8b:53:75:d5:79:e2:c4:d1:42:fa:
9c:c6:2b:5a:0d:5a:fa:6a:39:cb:83:1b:ae:af:c5:
e4:23:ba:0e:f4:92:25:f1:f8:8e:11:9c:d6:b8:26:
e8:13:27:34:fd:6a:03:f6:e3:32:e0:2a:a8:5a:8f:
e4:61:25:cf:dc:43:e9:24:30:06:90:5b:5a:39:4d:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CC:B5:44:FA:80:29:6B:9E:9E:0E:4A:D9:4E:01:72:9B:D4:87:C6
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ea:b6:04:03:22:67:22:72:ae:3f:07:fe:d9:21:87:b1:a8:
75:f3:34:40:55:17:31:04:ee:5d:b4:a4:79:17:a7:2a:d0:61:
1c:0e:03:f3:29:f8:3d:e8:63:20:ba:d2:ce:48:66:20:9f:17:
f0:7f:39:22:9f:58:45:3a:6d:66:d3:15:f4:a5:db:33:ad:9c:
79:23:ca:5a:73:f1:fe:1a:46:c5:b6:03:ab:04:b8:0a:71:f8:
e8:27:25:ab:42:73:d9:d9:93:32:85:8f:e9:43:c2:5d:62:fa:
b6:e4:01:24:b5:59:49:6d:38:52:44:f5:f4:38:70:41:cd:93:
fc:d3:0c:38:b5:32:8b:68:29:c5:b1:79:9a:53:80:cf:53:f8:
c3:8a:fc:36:16:8c:55:b1:57:74:4e:1d:c8:54:ab:8b:f1:5c:
f3:7c:f6:70:73:2b:42:60:20:a4:f4:32:25:06:17:f1:0f:3f:
26:4f:37:c8:42:91:c4:72:ae:99:3b:ec:c1:b3:fd:55:b9:09:
b3:ab:9e:f0:0c:40:67:fa:05:78:01:c2:dc:71:bb:bb:3b:34:
56:6e:45:71:59:db:84:32:c5:36:c7:b4:24:ce:0c:e3:6e:08:
4e:cf:81:11:e7:05:66:97:57:cc:10:ae:37:bb:27:5d:9a:88:
fd:dd:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:05 2025 by rpki-client