Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: JLa4yXeu6WlK7ZNFFij0Q45CVLsyAxkL8qwieujnNjs=
Subject key identifier: A1:54:06:5D:A3:21:71:57:C2:4E:CF:13:4D:C7:3F:3C:6A:8B:77:50
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 0198733CF56409537763FABFBC9CFC71146D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 04:00:31 +0000
Manifest this update: Mon 04 Aug 2025 04:00:31 +0000
Manifest next update: Tue 05 Aug 2025 04:00:31 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: sFg2XnwqQVFtfpDSXuryrxdqDy7ixewn8o230ejz+x4=)
2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:f5:64:09:53:77:63:fa:bf:bc:9c:fc:71:14:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Aug 4 04:00:31 2025 GMT
Not After : Aug 5 04:00:31 2025 GMT
Subject: CN=a154065da3217157c24ecf134dc73f3c6a8b7750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:fb:e0:ae:29:e4:24:37:af:ba:a7:c0:f1:
97:ab:23:48:bf:3b:01:6e:6b:92:17:6b:d2:e8:31:
f6:c4:b2:ff:ea:0b:2f:1f:f7:87:00:26:cc:7a:3a:
57:75:62:71:2d:8e:67:c2:2d:b9:69:20:88:84:00:
f9:65:c0:18:db:ec:bf:2e:9b:76:76:23:60:82:2e:
4e:67:46:b1:43:91:1c:83:22:09:bf:92:e0:fc:85:
2c:78:48:e7:8e:e2:6d:da:6d:e6:0c:32:01:be:91:
bb:8a:32:30:ed:76:1e:ee:7f:b7:97:13:27:0f:b4:
fb:05:7d:f7:7f:9f:02:67:bf:59:58:95:f6:2d:e5:
77:25:4e:92:37:7b:7a:6c:e9:fe:15:a2:b8:ea:e7:
94:17:87:68:ad:0c:bb:e8:0c:0c:78:ff:65:b1:2c:
f7:07:cb:c1:43:cb:de:35:66:ec:bd:0c:ae:7b:5e:
0a:67:b7:ef:2e:e4:d4:26:ed:76:e3:27:47:95:c0:
7b:7c:ac:1d:c6:dc:d3:a6:cf:65:7f:46:09:b9:f7:
20:ce:b9:3e:26:d9:a4:ee:ff:93:9f:cb:be:41:c2:
ce:f4:51:51:a5:44:e5:d5:24:d2:d1:c3:49:1b:ab:
5a:41:05:d0:9e:0e:d9:4f:5f:9f:51:a2:e7:b5:c5:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:06:5D:A3:21:71:57:C2:4E:CF:13:4D:C7:3F:3C:6A:8B:77:50
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:20:f3:3e:9d:bb:d4:69:28:49:f0:44:dd:5a:5b:e7:c5:23:
df:f1:89:cf:17:71:c2:20:c5:b5:3a:c0:f8:8d:3f:e4:76:34:
17:4e:8b:36:d8:d2:8b:45:32:fd:a7:08:3a:4f:94:21:03:36:
49:55:88:f3:e5:7e:8a:6f:cd:c6:07:c6:84:1c:4a:2d:04:29:
2a:53:1f:1c:91:c6:83:80:88:1a:bc:e8:d8:3e:6c:eb:a8:df:
93:e9:a8:6f:d0:df:d1:d7:e4:ff:79:79:b7:19:82:d2:a4:4c:
b9:85:cd:1a:b0:0f:a5:aa:32:6c:3f:c1:5f:1d:0e:9c:30:f9:
bc:11:97:8f:79:ab:b3:31:f3:f4:f7:dd:23:4e:cf:ff:8f:66:
4d:b0:cf:cf:33:e2:51:c7:b3:52:3c:31:85:ce:15:70:6f:c0:
53:fe:26:20:c9:03:5a:78:fa:e9:19:56:b6:c8:bf:87:09:3a:
38:03:8a:a7:d5:81:6c:ed:d2:b5:2f:71:e4:43:ae:33:6f:43:
04:5d:be:f2:60:b3:4b:6a:8f:b0:7f:35:cd:41:1b:19:fb:09:
a3:e2:e3:fe:b0:b5:23:50:33:08:55:d7:21:f9:38:cd:b4:37:
2f:7f:26:ed:95:22:47:cb:50:43:6f:81:89:21:df:50:0d:f4:
8a:73:98:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:03 2025 by rpki-client