Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: 4hzfhx03/Lor0iGxR8T4S1wWD2GxNN1kmIL8bl+j3r0=
Subject key identifier: 60:8F:77:31:DB:3D:43:33:A9:1A:45:D2:EC:EF:C2:F9:11:DF:D0:B6
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 01987D8B5529EC51B86CB9B28F10E200286B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 04:02:19 +0000
Manifest this update: Wed 06 Aug 2025 04:02:19 +0000
Manifest next update: Thu 07 Aug 2025 04:02:19 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: ihU5Y1QdyBX8cULpuisCm+FhSAU59sLPvoCNRA+M6Go=)
2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=)
3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:55:29:ec:51:b8:6c:b9:b2:8f:10:e2:00:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Aug 6 04:02:19 2025 GMT
Not After : Aug 7 04:02:19 2025 GMT
Subject: CN=608f7731db3d4333a91a45d2ecefc2f911dfd0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:23:ac:ea:4d:53:89:3b:47:5a:3a:e1:7f:
f5:72:e0:0b:98:29:23:5d:15:fb:5a:8e:3c:c1:52:
f4:85:c6:55:42:d7:2e:e4:a8:2b:57:03:9c:05:f1:
62:e2:dd:31:61:33:d3:28:47:2f:cd:ff:b7:b4:32:
20:22:92:5c:04:4f:95:58:38:20:17:63:d4:8b:3d:
f8:0e:85:94:16:9c:e5:c1:40:06:70:a2:f3:25:ad:
6e:27:e0:fd:a8:53:58:c6:16:f1:cc:20:9a:0f:9a:
42:27:f7:62:4b:d4:3f:bc:4f:41:83:4c:a9:07:55:
f4:b7:67:c4:3c:60:49:9b:e7:d1:fd:fe:52:57:ca:
ab:3e:3a:d6:8a:78:25:d5:23:25:d5:58:f9:92:7d:
f8:88:47:0c:e3:d0:44:64:7f:98:ea:5f:85:a2:cf:
d7:3a:34:52:81:ed:0f:98:9e:a4:c4:17:46:96:94:
3b:cc:88:9c:77:c5:ae:92:26:c9:aa:b7:60:e6:39:
ab:50:c2:7a:fc:f3:5a:97:be:ae:cc:59:0c:bd:1d:
f1:53:bf:dc:7b:d4:fe:0c:a6:e7:37:c9:f3:a3:f2:
ec:0a:80:d9:36:f1:46:3c:0d:f5:6e:36:49:f1:fd:
e5:6f:68:e8:3c:9d:c7:9c:81:df:3e:9c:b6:69:b3:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8F:77:31:DB:3D:43:33:A9:1A:45:D2:EC:EF:C2:F9:11:DF:D0:B6
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:89:1e:65:98:09:5a:73:1b:e5:9e:07:42:ef:58:4c:01:28:
0c:f8:c3:c4:12:41:6d:4c:4a:28:7b:87:ad:8f:a3:1a:f6:31:
a4:04:fa:69:3c:96:33:05:b6:ec:5b:84:be:4d:df:4c:99:28:
5b:69:38:aa:3f:68:0a:06:b4:49:41:b6:b8:3b:34:9c:41:69:
5d:f1:a7:e8:80:7e:2c:97:ba:b9:24:32:8a:1c:27:29:31:ab:
20:ea:f7:5f:34:44:15:ab:2a:c0:53:41:8d:bc:0f:36:fa:a2:
a8:48:9b:12:fe:f7:e1:a8:d1:33:04:d4:3d:3e:90:12:6d:a1:
65:10:ec:cc:cc:21:e6:ba:a1:9f:a2:23:21:fa:b9:8b:08:34:
1b:99:b2:ac:fd:c4:79:b5:9b:7d:09:89:19:e7:f5:78:d2:bf:
41:71:22:0a:e5:6b:f4:ca:15:97:65:61:6b:97:08:24:b5:78:
24:d7:35:44:4d:da:ff:ec:e0:de:79:dc:de:c5:17:62:cd:14:
da:1a:cc:75:ec:80:8c:f8:e7:bb:57:c9:24:cb:9a:c1:ee:cd:
c9:ec:8f:33:d8:70:fa:ac:94:a7:c6:4b:a6:4f:bc:8e:0b:39:
c5:8e:d5:50:ea:f9:44:7c:26:b0:fe:d5:e8:a0:1c:49:90:15:
e1:8b:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:04:24 2025 by rpki-client