
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: ERe8vB0OoBlNUOOJuGPVNa9G+tiJv13sqp2idrLiSso=
Subject key identifier: 9E:33:5A:7A:A9:76:D9:5D:1A:6B:DF:8F:24:AA:43:5C:53:50:EB:1B
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 01988B7D0883ADCBECD3199D549CB752012A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 1168
Signing time: Fri 08 Aug 2025 21:01:23 +0000
Manifest this update: Fri 08 Aug 2025 21:01:23 +0000
Manifest next update: Sat 09 Aug 2025 21:01:23 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: nTTPj5q0wYow64dBMmBVkFQhAuVeOJHgpZfpiDfU6II=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:08:83:ad:cb:ec:d3:19:9d:54:9c:b7:52:01:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Aug 8 21:01:23 2025 GMT
Not After : Aug 9 21:01:23 2025 GMT
Subject: CN=9e335a7aa976d95d1a6bdf8f24aa435c5350eb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:80:de:78:0e:ce:7c:b7:4e:d0:32:2c:59:
40:ba:1c:88:56:40:61:a1:31:9e:b0:fd:53:a9:46:
7f:7f:6a:dc:f2:c7:2b:44:06:3b:49:4b:89:af:49:
3d:2e:18:36:03:2b:6d:42:f6:45:78:60:54:5e:4c:
36:af:f7:04:8b:a1:c1:e8:44:7f:a5:c4:20:c0:b2:
69:bb:fc:ac:43:d1:fd:5d:21:7a:b4:90:38:84:6a:
72:5d:b3:2a:6d:1e:3a:c1:ce:96:86:a3:74:ec:9e:
ae:5b:78:4f:99:f5:82:70:cd:ad:1d:04:10:1a:4b:
bd:e5:6a:0e:e1:76:ce:f9:26:b0:3c:c8:4b:b7:68:
d4:f0:50:5f:27:05:f8:e0:a2:4e:e2:22:d1:37:4b:
89:fc:fe:53:11:b5:33:68:8c:0d:7d:d6:5d:c9:92:
9d:5e:0d:4a:c0:2e:5b:8a:f5:3e:55:af:1d:78:03:
c7:1a:ef:82:91:98:09:ab:c5:88:92:48:5e:fb:3c:
7f:59:ad:50:38:21:6c:3f:f1:ec:ae:be:d0:a5:36:
ba:50:79:6e:12:a5:66:ec:04:cd:df:78:c2:d2:65:
ba:9e:5e:a5:5b:a0:b0:79:14:1c:aa:8d:94:25:5f:
78:d1:67:44:8e:11:d7:ad:fc:79:8e:c3:ab:18:89:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:5A:7A:A9:76:D9:5D:1A:6B:DF:8F:24:AA:43:5C:53:50:EB:1B
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:fa:f8:ea:c8:6f:1e:9c:df:87:4c:4d:1f:3e:34:f2:37:86:
f8:cc:47:c7:b1:25:92:f9:57:ba:dd:34:42:fa:be:25:30:a0:
fa:d7:63:c6:c6:e7:e7:99:c9:78:86:9d:7d:23:c1:12:22:7e:
85:02:fe:f1:d4:37:fa:d5:be:1f:a5:85:b6:eb:46:1e:77:17:
2a:68:f9:ea:70:99:a2:0f:f8:67:20:2b:24:1f:c9:6e:fa:c5:
8a:c2:5d:61:2e:3a:1e:c6:2a:9a:9d:44:44:b4:ae:62:6c:01:
89:b7:0a:69:7d:98:96:ea:63:ff:33:ec:32:62:cb:db:6f:cf:
83:b8:23:56:62:15:d8:63:b3:b4:9a:06:93:fc:d3:49:dc:01:
f8:3a:fd:50:99:8d:93:63:0c:da:ba:8c:d2:5f:29:27:47:ae:
ea:a6:3e:d2:44:22:be:14:a8:21:5d:d2:e7:25:3d:94:f8:9a:
8d:cc:18:e4:9c:e8:63:c4:1c:8f:78:45:5d:46:ea:16:cb:03:
d8:09:cc:31:8c:3d:13:82:86:f6:f2:c9:1b:0c:8a:52:dd:13:
dd:ea:2f:75:dd:51:dd:dd:87:a8:b7:64:4a:00:dd:70:41:7f:
99:7b:75:70:0d:12:b1:7c:a4:14:1b:bd:3d:f8:8c:f2:93:9d:
53:a4:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:08 2025 by rpki-client