
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
File: _FNNTENDzYmRiWnVbaGFZ0sWY1U.mft (raw, json)
Hash identifier: dGttkK6QSfE+WVF5f4Bq6j2Ear05eQBWK5WsgKz7KV0=
Subject key identifier: F4:DE:E9:CF:44:16:C2:95:3D:4E:34:28:94:48:7B:D7:91:B8:6B:33
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Certificate issuer: /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial: 019874F5381B38CE2A4038371C1215443CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
Manifest number: 1013
Signing time: Mon 04 Aug 2025 12:01:24 +0000
Manifest this update: Mon 04 Aug 2025 12:01:24 +0000
Manifest next update: Tue 05 Aug 2025 12:01:24 +0000
Files and hashes: 1: _FNNTENDzYmRiWnVbaGFZ0sWY1U.crl (hash: MYLKcXugnclrHnVRa45xlOVpKUMDtQ2a+9OUeatIyXM=)
2: bjwBa29o8sLtvq0lB3wmXidRAXM.roa (hash: voja3TwiIQ0KziGC7wSgsvdSwQWHXLdVHcxuiguvZGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:38:1b:38:ce:2a:40:38:37:1c:12:15:44:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
Validity
Not Before: Aug 4 12:01:24 2025 GMT
Not After : Aug 5 12:01:24 2025 GMT
Subject: CN=f4dee9cf4416c2953d4e342894487bd791b86b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:81:59:28:72:7f:e4:23:e8:a9:0e:06:5e:
5a:53:3d:45:c7:89:e5:ac:c6:f7:23:f8:7c:65:03:
fa:18:36:54:07:cc:9e:4a:a2:85:bf:71:a0:9d:a0:
a1:d8:3a:68:55:84:96:ac:d4:36:86:9b:46:89:9c:
cf:01:a9:dc:3a:9a:4c:8b:f9:f5:2b:08:da:1a:67:
09:5c:a4:cf:a8:f0:a4:d2:47:00:d3:f6:71:5a:dc:
18:fa:1e:73:fd:e9:bd:ea:89:68:ed:f0:e8:c2:fa:
37:65:d5:29:ce:41:74:81:74:12:2c:2f:24:d9:c9:
1f:fa:1d:4f:d4:0f:ec:aa:a0:5d:15:d3:a8:a0:65:
07:06:d7:16:63:1d:99:2b:0c:ca:ae:67:7c:95:1d:
6a:9c:c3:b6:e5:d8:be:3e:1e:62:1a:d4:98:22:da:
2c:0a:f2:37:28:b6:18:b4:2a:a4:bc:a9:9c:d2:46:
df:08:9e:f7:9b:33:36:c6:77:f7:71:58:71:ad:5e:
21:10:3d:e5:00:a8:38:cf:0a:3f:99:00:86:21:b4:
35:5d:53:eb:aa:25:22:96:78:a7:83:a6:40:53:85:
33:2b:11:6e:c1:62:c6:48:85:5a:1a:29:0d:a1:f5:
55:8f:8a:fe:cf:26:7f:95:48:a4:ec:99:5e:5b:65:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:E9:CF:44:16:C2:95:3D:4E:34:28:94:48:7B:D7:91:B8:6B:33
X509v3 Authority Key Identifier:
keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:31:ce:c2:cb:41:c3:a0:c5:a2:fa:5e:1b:a0:10:09:6a:ae:
a5:df:45:03:44:2e:fa:0b:7a:f8:f1:a8:c1:bc:b5:cd:70:2f:
ac:6f:f0:5c:26:ee:80:ee:20:4a:4f:e9:97:a9:ac:47:1c:a3:
c4:04:81:d3:2d:88:35:0f:92:1e:36:82:86:b5:e8:8d:ac:c3:
a9:f1:4a:9a:e9:d6:e8:55:87:4d:3d:81:77:df:89:ad:87:e2:
68:0c:d0:59:fa:54:08:ab:9a:f5:d6:d9:9a:26:2b:bb:14:e3:
a0:06:b7:1b:42:b8:50:f6:8a:e0:c7:d3:f7:61:82:98:8b:d4:
b0:e7:4e:9d:17:94:b5:81:c9:02:28:c7:39:72:4c:b6:74:a1:
cd:23:ef:1e:e0:30:b7:38:c9:77:d5:36:55:de:d1:b0:71:4f:
12:6a:25:e4:b3:b4:7d:2c:f3:65:c6:7b:5c:6a:3d:49:0a:5a:
9c:d7:f9:32:ec:35:60:e8:31:a8:0a:4d:db:cf:f3:6a:a8:52:
c4:7b:af:8a:43:f5:e9:96:2d:36:ab:9d:a1:56:5e:f7:8e:31:
88:c9:66:56:52:10:66:9c:a9:00:00:35:82:9f:56:22:03:67:
bd:17:be:1c:27:6f:44:f2:0f:7e:8f:81:c6:7b:90:f9:94:8b:
b5:6e:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:12 2025 by rpki-client