
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: 1jmoLZDM0WXkAQ2QMKwEmSObreeFiGviAjDVVHNZl+o=
Subject key identifier: 43:C8:9F:26:2B:37:7E:F7:BD:C9:46:AF:CA:B4:00:9E:F3:31:A2:F2
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019872CF2794F162E34DADE7A6E0BEEF8AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 14ED
Signing time: Mon 04 Aug 2025 02:00:35 +0000
Manifest this update: Mon 04 Aug 2025 02:00:35 +0000
Manifest next update: Tue 05 Aug 2025 02:00:35 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: lzxUhhaGD/+y3FcFpHmZS4NczqhAtN6HDm2m342GF/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:27:94:f1:62:e3:4d:ad:e7:a6:e0:be:ef:8a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Aug 4 02:00:35 2025 GMT
Not After : Aug 5 02:00:35 2025 GMT
Subject: CN=43c89f262b377ef7bdc946afcab4009ef331a2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:45:54:d0:3b:22:98:c5:fe:ed:62:d9:e8:
1a:4e:0b:6a:79:a7:34:80:56:c7:ec:8f:da:a2:cb:
52:cd:75:26:c8:b7:db:5c:19:fc:d5:1f:e7:ed:8e:
0d:9d:ee:4a:0c:d4:fe:89:31:a9:25:06:ae:30:29:
66:a7:6f:85:f9:3f:40:6d:a5:80:80:d3:df:aa:c0:
b9:fe:72:bb:14:65:db:f3:45:76:16:89:3f:25:f5:
e1:92:73:cd:f8:c3:f2:2e:fd:1f:e9:21:48:5b:60:
e0:b0:4b:dc:bc:fc:bc:bc:c5:a4:be:a5:3c:70:1b:
b2:fc:86:9c:31:95:f0:b7:48:05:6a:32:a7:0b:0b:
66:93:a2:25:72:0e:28:41:51:dd:e7:c8:f1:35:76:
fe:81:77:e4:cb:cb:fd:ae:83:35:91:88:71:dc:85:
5d:73:ff:5b:9f:57:ff:54:bd:8a:47:9f:f9:bb:a6:
d2:cf:b1:05:5c:60:e8:b4:61:9d:c2:23:c7:26:44:
54:03:11:0f:3c:d2:55:7c:8c:28:5c:ea:fe:ba:70:
30:61:6b:3d:d3:cb:28:bd:ff:d6:f4:d6:77:a5:9a:
fa:d0:b6:54:84:af:a4:5f:a0:cc:9d:65:3b:fb:8d:
09:3c:cc:7c:73:a9:8e:19:0e:ae:e3:7b:6a:51:6a:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:9F:26:2B:37:7E:F7:BD:C9:46:AF:CA:B4:00:9E:F3:31:A2:F2
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4d:8c:48:f1:18:a5:78:dd:5f:95:26:1b:46:3a:7f:9a:c8:
34:00:0e:a9:2c:1e:a3:af:58:46:83:39:98:ad:cc:a4:b2:f6:
49:b9:65:4d:fe:53:dd:53:52:90:4a:41:ea:31:c2:30:0b:69:
c9:e7:a9:de:cb:4c:c2:12:9e:9b:84:a6:4f:11:c4:a9:58:bd:
c7:13:a4:74:75:78:ee:74:48:8a:36:5e:af:47:29:db:de:ef:
ae:aa:2e:01:4c:a4:50:3b:22:6b:8e:b2:55:77:8a:6f:ec:5b:
df:86:ee:28:6d:e9:2d:ca:8f:4b:e1:ad:5a:23:5a:da:09:91:
7b:b2:f3:a9:47:af:77:0e:77:a1:e8:ce:49:c1:96:68:26:f9:
85:9d:4a:bb:da:b3:d4:ad:76:7f:71:b8:2c:cd:82:08:1b:65:
56:de:71:e1:89:b2:cd:4a:af:30:07:c7:6e:47:32:8b:ed:33:
40:3a:7d:75:05:29:cd:c9:73:21:ba:25:b6:87:d6:62:a2:b4:
81:67:87:2c:0b:b5:db:ac:1f:e4:54:88:14:3f:59:6b:0b:83:
14:d3:48:e5:6e:3d:06:79:cb:28:34:f7:73:e0:8f:e1:36:00:
34:95:43:6b:f8:9b:ba:85:4d:5f:7d:df:a8:93:17:1a:3a:5c:
c5:e8:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:20 2025 by rpki-client