Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: LNWN33zUpfQSt3u5k6CpNwYbUOYrWBjIwjJGGu5/8wA=
Subject key identifier: 48:84:FC:A2:AE:7C:25:AB:E4:CA:E7:B0:07:33:5E:0A:87:62:6F:A3
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 019873E3011FD6E9259088F24F2AB205425C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:53 +0000
Manifest this update: Mon 04 Aug 2025 07:01:53 +0000
Manifest next update: Tue 05 Aug 2025 07:01:53 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: uxR419D4uaKs0I9IPLsLgZZCtGzsuI4cjDf1yqlooo0=)
2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:01:1f:d6:e9:25:90:88:f2:4f:2a:b2:05:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: Aug 4 07:01:53 2025 GMT
Not After : Aug 5 07:01:53 2025 GMT
Subject: CN=4884fca2ae7c25abe4cae7b007335e0a87626fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:d0:13:ed:bb:40:cd:97:38:15:7a:cb:b2:
2f:96:ec:9d:dc:e4:6a:fe:48:2b:17:a4:84:e8:f0:
d9:e5:39:e2:8d:37:ab:5f:9b:f2:77:a2:bd:97:83:
8b:37:84:d9:5a:f1:1c:fd:08:ac:13:55:65:66:c3:
8b:12:51:4a:63:3a:81:d0:c0:7b:90:cf:8f:a4:7e:
0b:14:11:ef:84:f8:cf:e1:8f:6d:cc:3c:43:23:80:
6e:5c:7c:af:c2:b4:60:c8:ab:47:e3:b3:5b:ab:80:
9f:0f:b7:f7:59:54:28:84:cf:b4:ca:bc:52:74:c8:
ba:7b:40:ca:24:93:b4:d3:14:d3:ee:41:f9:b8:4f:
99:cf:a5:f2:f7:5a:2a:d1:e1:8d:8e:96:32:29:4e:
39:02:a9:68:8f:59:98:11:ed:1c:7c:53:6f:a0:4a:
c4:ec:34:de:4c:5e:77:8e:20:1b:2d:9e:3b:ea:1d:
86:13:54:87:a9:85:22:73:c9:42:36:9b:f4:00:a4:
ac:02:cb:ea:02:ec:f1:37:0e:05:14:90:7c:61:4f:
19:cb:1a:ee:55:a6:84:ba:0a:68:8f:f5:8c:a5:86:
ea:e6:4f:ae:d6:65:0d:6e:20:88:de:45:0c:2c:5a:
96:24:6d:ed:a6:a1:87:6c:fd:c1:1d:45:62:92:6c:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:FC:A2:AE:7C:25:AB:E4:CA:E7:B0:07:33:5E:0A:87:62:6F:A3
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:cf:85:28:0d:44:89:bf:20:4e:88:43:e1:b1:d4:37:14:
0f:15:12:df:c3:37:82:52:8d:38:fe:ae:4e:6d:ff:90:ca:a9:
30:4f:f3:d0:e0:09:86:2a:e9:05:94:a0:7b:b6:5c:0b:20:3c:
57:25:49:51:3b:38:f9:2b:e9:60:c6:69:67:96:48:18:31:a2:
d1:57:1f:d5:8d:0c:8b:d7:4b:3f:3f:fb:58:5f:c3:8f:1a:2a:
33:ba:0b:ef:7e:53:86:6b:9f:2a:15:0e:eb:e6:b4:01:e4:8f:
88:56:b2:3d:a4:61:ba:55:4e:df:ed:49:30:be:6e:cf:0b:30:
2e:fb:bc:e1:ca:00:c2:01:4f:98:ac:29:c0:00:10:93:94:00:
d3:a4:5f:0d:8b:1c:59:78:33:26:98:2f:35:c8:d2:f4:f1:44:
bf:cc:d3:39:4e:43:0f:5b:03:b0:2a:c5:51:9a:1b:12:4d:7a:
47:03:3f:f9:73:6e:6b:4e:4c:82:ba:65:f0:52:59:83:3b:7a:
a6:74:f8:6a:2b:d2:95:a8:5b:52:2f:7a:ab:14:08:ac:87:f7:
eb:f8:73:5a:b3:1b:8b:be:3a:79:9f:7b:c6:92:10:a1:e1:62:
2f:fe:4f:39:95:2f:20:1d:82:d5:ee:3d:0c:84:00:ce:2c:0c:
ba:f4:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:01 2025 by rpki-client