Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File: Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier: lbTpRWfDQrRTxEgO5HoLjEj9BDxNFT5Yx67VMoI7Rfo=
Subject key identifier: F0:2B:0B:CE:28:84:B2:B9:53:B2:2C:B9:1C:B0:31:6E:86:3C:B7:28
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer: /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial: 0198A04EF4CCB4A00D3FFFED1CE4505010AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number: 05A3
Signing time: Tue 12 Aug 2025 22:03:05 +0000
Manifest this update: Tue 12 Aug 2025 22:03:05 +0000
Manifest next update: Wed 13 Aug 2025 22:03:05 +0000
Files and hashes: 1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: lXt/h3QmqfViOo040pfXHvMyL2Bir/xoHTxS7Xz7nW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:f4:cc:b4:a0:0d:3f:ff:ed:1c:e4:50:50:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Validity
Not Before: Aug 12 22:03:05 2025 GMT
Not After : Aug 13 22:03:05 2025 GMT
Subject: CN=f02b0bce2884b2b953b22cb91cb0316e863cb728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:97:06:1a:36:5d:1b:3c:24:f2:91:d0:4b:
aa:4f:88:46:78:d5:6c:13:ce:e2:90:e3:52:00:19:
19:76:2c:d5:96:a0:24:26:c8:ca:96:64:04:e5:3f:
2c:5c:96:e6:c8:d6:04:79:4a:c2:16:61:bc:c9:43:
5d:a0:c1:7f:51:a9:d6:02:0d:f0:dc:34:70:a4:b5:
a0:ec:db:e4:52:11:b2:93:34:04:c2:ca:01:ed:61:
12:19:1d:b0:cf:10:2d:09:b6:da:02:d9:c0:a5:ac:
83:2c:41:8b:d3:3c:32:5f:55:13:e2:35:80:8f:de:
95:f4:e6:d0:8a:5e:82:3f:8f:35:2f:4b:2d:eb:4c:
36:c8:44:7e:6b:ce:e1:3e:fe:6f:48:f3:b0:af:84:
1d:41:a1:54:81:7e:b2:f6:43:c9:53:8b:fb:46:4e:
bc:19:4e:49:28:ec:70:bd:87:01:f2:34:55:5c:81:
8e:dc:0b:87:79:a9:b9:11:df:eb:ea:24:7f:5a:d2:
c7:cc:34:b6:77:3f:3d:d8:da:4e:ab:a8:dc:fe:58:
72:aa:ac:b6:2a:3d:a9:52:c3:9e:6f:83:26:e5:99:
0d:bb:29:ae:ea:54:18:c9:92:8b:92:3b:51:9e:f2:
3c:83:13:c4:f6:04:b0:ef:ae:ec:6e:6a:81:73:5e:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2B:0B:CE:28:84:B2:B9:53:B2:2C:B9:1C:B0:31:6E:86:3C:B7:28
X509v3 Authority Key Identifier:
keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d6:e6:cf:dd:a2:4e:11:2d:c8:29:f7:fc:32:18:e7:77:46:
cc:c1:c2:f8:db:07:2e:c1:9e:3c:39:7c:67:d5:20:7a:71:76:
8a:7e:68:11:e2:0e:df:f5:52:0b:bf:4d:6d:31:b5:1f:6f:e7:
fc:9c:dc:ff:8f:f9:6d:4f:70:fb:19:5b:0a:2a:34:63:8a:ea:
87:9f:64:37:5a:42:f2:d0:78:21:7d:93:8f:79:5e:38:44:0f:
5d:7f:72:f0:38:fd:eb:53:bd:0e:ec:fd:96:bf:2d:5b:ad:f1:
a0:bf:c5:ea:ab:7a:28:b2:91:f4:14:21:e1:cf:7d:53:b8:6b:
78:10:ca:6f:08:30:3b:bb:6f:b1:96:f2:90:f6:19:dc:54:60:
23:0e:47:09:66:37:90:d3:6c:c3:a0:0d:c2:a9:f3:19:80:f5:
ff:f7:72:d7:50:67:18:94:75:02:d2:db:c4:87:b8:a0:66:1e:
24:8d:e4:a9:44:e5:37:ec:e8:81:d4:79:79:8c:1f:fe:85:b3:
10:de:be:22:3d:18:e0:e5:f3:2f:5a:47:43:83:0c:6c:f6:21:
3d:46:06:96:c5:95:98:44:de:18:0a:88:be:6f:e9:94:3b:5b:
1b:40:69:e1:ac:51:77:bf:dd:9a:3b:42:21:6c:de:bc:75:40:
fa:e0:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:14:48 2025 by rpki-client