
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
File: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft (raw, json)
Hash identifier: kqFaFFqwUAT/bEdz0TDONK3YHFNM0ssiYH7X/88sAm0=
Subject key identifier: 57:B8:0E:D6:33:C1:ED:6D:03:17:78:AD:94:36:B9:78:2A:47:68:3B
Authority key identifier: 14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
Certificate issuer: /CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Certificate serial: 0198733D9E683C109C81AD796D94349D91F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
Manifest number: 122D
Signing time: Mon 04 Aug 2025 04:01:14 +0000
Manifest this update: Mon 04 Aug 2025 04:01:14 +0000
Manifest next update: Tue 05 Aug 2025 04:01:14 +0000
Files and hashes: 1: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl (hash: RUb9x7DH6fyhOw4kEgNzjyQroR61lonBKEmVTb+aOtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:9e:68:3c:10:9c:81:ad:79:6d:94:34:9d:91:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Validity
Not Before: Aug 4 04:01:14 2025 GMT
Not After : Aug 5 04:01:14 2025 GMT
Subject: CN=57b80ed633c1ed6d031778ad9436b9782a47683b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:78:28:81:26:79:60:67:f0:b5:66:06:00:
9e:0b:13:37:e6:45:9d:df:87:46:f8:9e:73:44:43:
9e:7f:65:d4:41:da:74:a9:26:a3:4f:01:3c:43:2f:
46:a2:91:d1:ab:d0:70:e8:32:ca:fd:68:78:af:ba:
8b:1f:62:34:f5:8a:d8:cc:98:53:3d:27:83:b5:eb:
44:30:cd:44:8a:b3:b0:bc:eb:c1:5b:8a:f2:73:56:
c6:5a:d1:e2:25:07:01:d7:e8:69:68:d7:37:d3:49:
f7:d0:b5:b6:6d:78:d6:30:cd:e2:ee:e4:75:61:2f:
12:98:54:ca:72:ef:14:bf:5f:ed:2d:e9:1f:f9:69:
6b:cf:23:a9:7c:e1:e3:df:ca:0c:c5:54:d9:8e:11:
9f:11:e4:74:d9:75:d4:bd:73:32:58:4f:b6:9c:94:
30:fd:b6:41:0d:9b:bc:9c:4f:2d:34:21:6d:4a:db:
31:bc:d5:e5:a4:e8:f5:36:28:7c:24:39:d0:5e:ce:
4a:d1:41:ea:f7:41:a3:0f:67:0e:bf:af:cd:4d:55:
f2:4d:27:3e:e5:d0:ec:6b:99:b7:e7:2c:05:5e:5c:
01:a2:20:37:6c:4b:cd:db:c1:68:41:11:9f:1c:f5:
81:43:b6:20:24:51:6d:3f:30:3e:58:35:e4:f5:87:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B8:0E:D6:33:C1:ED:6D:03:17:78:AD:94:36:B9:78:2A:47:68:3B
X509v3 Authority Key Identifier:
keyid:14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:16:f9:60:87:98:30:4c:31:80:1a:2f:6c:6f:8f:1a:76:ba:
2d:f4:63:19:c3:88:1a:46:27:38:44:73:ba:3e:7e:26:9a:cf:
fa:aa:09:ad:56:9a:2a:9d:5c:72:89:ce:4e:6b:b2:68:95:b9:
5b:0e:25:a8:e8:fd:a5:99:3b:9a:77:b6:4c:06:3b:63:45:1a:
54:4c:d9:f1:83:b1:fa:14:39:00:78:43:6b:46:4f:c0:57:99:
7f:e8:7d:63:4e:79:89:cf:55:7d:94:9d:53:46:e9:00:d3:7e:
cb:5d:92:72:33:db:bb:7a:40:f8:bf:da:c2:e4:f2:4e:c6:fb:
a0:7b:24:29:c4:d3:88:96:1d:d1:61:d7:5e:b0:09:ad:d1:e7:
c2:88:1c:f8:b5:80:96:49:a5:38:45:69:75:4f:05:e9:49:22:
63:22:97:67:f6:66:fb:ab:70:05:ee:4c:40:3d:af:90:ce:f2:
5f:97:a3:c5:b4:d4:29:da:15:e9:f8:16:12:4b:1f:4b:92:3a:
7e:d6:90:ff:ef:0d:ba:91:4a:82:d4:ca:ab:6d:af:93:2d:dc:
ae:fd:46:c6:5b:4d:1d:10:aa:cb:60:67:6a:2f:32:77:a9:14:
1b:57:c5:1b:4b:95:db:94:f9:57:fd:bf:e7:d7:1a:d5:a4:dd:
b5:38:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:59 2025 by rpki-client