Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier: +T81FeB5KRdn7b0i5CchazfQd/Nz8DNHjhr9i1sdkfk=
Subject key identifier: B2:12:8B:A1:CF:4A:AD:D8:E5:28:64:03:2A:32:07:1A:2F:D9:C7:98
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 01987E9C6D8AD938DC209DC42716078EA9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 09:00:37 +0000
Manifest this update: Wed 06 Aug 2025 09:00:37 +0000
Manifest next update: Thu 07 Aug 2025 09:00:37 +0000
Files and hashes: 1: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: b5r0nzTeXNb/YLIh+QditoDLPUUgrrGxOl0jg5ZArv8=)
2: m47qBE9phwomTDeqf52wHfAYr9E.roa (hash: 7rx0B/HjAB/FPNOSkgRw7oYEkC39mslIeJTzls7ObLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:6d:8a:d9:38:dc:20:9d:c4:27:16:07:8e:a9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Aug 6 09:00:37 2025 GMT
Not After : Aug 7 09:00:37 2025 GMT
Subject: CN=b2128ba1cf4aadd8e52864032a32071a2fd9c798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:48:02:f4:d4:a0:2a:d4:fa:43:aa:4e:da:
0d:09:4b:59:03:99:2e:16:aa:3c:53:d1:fe:b0:bd:
30:d5:2a:50:2d:2e:7a:a3:83:b0:07:02:91:a3:50:
75:10:ad:40:84:a5:2c:ad:0b:7b:18:94:2f:95:33:
29:dc:54:a3:f2:f7:a6:47:6b:a2:1d:c2:bf:d6:15:
db:5c:f0:77:0c:3b:16:0a:36:9b:37:e5:e0:c2:37:
26:5b:a4:5c:c7:29:94:a7:c7:07:42:2b:a5:9b:08:
e4:d8:db:b7:47:11:92:89:39:59:2f:67:03:3b:83:
4f:6c:06:1f:aa:80:b5:36:be:39:f0:bc:b9:8f:33:
e9:31:e7:c7:81:d9:c7:ca:48:25:3c:6f:d1:65:09:
36:1e:33:b6:da:4f:71:80:7c:ba:5c:51:21:6b:11:
87:b6:2a:84:47:aa:6b:46:ee:06:0c:f7:ed:a4:0a:
72:b8:9d:38:d1:bd:c5:dc:36:eb:38:3f:9a:65:6b:
0a:ad:3d:5c:34:a4:f1:9b:a6:d3:65:8c:aa:f2:e4:
3e:10:01:45:33:44:40:5f:2c:bd:e0:69:88:c1:9b:
5a:f9:2b:16:25:f9:67:26:fc:66:bc:db:fe:55:ec:
f6:68:1c:23:70:6d:f7:29:8e:db:2b:dd:19:a0:ef:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:8B:A1:CF:4A:AD:D8:E5:28:64:03:2A:32:07:1A:2F:D9:C7:98
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bd:11:05:2e:77:75:ba:4c:dc:f6:a5:f2:c8:e5:9e:cb:13:
42:77:b9:6f:fe:8e:16:f4:5b:4d:2e:40:c2:bd:bb:fd:d1:3b:
cb:f9:c0:9b:47:b7:5a:c0:25:d4:1b:11:b6:7d:3b:ca:6b:72:
34:b4:5e:f5:4a:41:eb:e1:45:01:d3:15:a8:53:f8:d6:0b:1a:
41:34:f8:05:7a:72:71:a7:77:b8:91:ac:5f:41:72:a9:4f:8b:
d8:98:b3:11:68:47:2e:3f:df:69:d1:b2:69:66:b3:35:46:e9:
2c:c3:97:90:f1:9e:24:28:3f:5e:d1:8a:44:be:9a:56:ac:f1:
89:d7:3b:0b:66:46:17:52:e7:c0:92:93:ea:f8:5a:02:54:f8:
95:e3:ab:73:03:4a:26:09:a1:9f:ea:e2:96:92:c2:72:b3:32:
c8:97:a2:80:cf:28:e1:f9:e0:8c:2f:92:fe:35:8f:db:da:40:
75:72:8f:26:8a:50:01:d3:55:66:4d:41:0a:ed:51:1a:f4:00:
d4:2e:f8:e0:19:c1:09:84:fc:62:71:f3:28:c7:fb:c1:4c:37:
da:70:14:03:26:13:f4:fa:ff:19:d8:1f:5c:e6:e5:35:e3:f9:
e7:96:a8:82:8a:fe:5a:5f:bd:de:8c:ee:7a:97:1a:6d:7f:0f:
15:04:3b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:12 2025 by rpki-client