Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: zF5cANgwg/cg9Fe/lhtGMhe6o1HnIgTthtqpHVuZLxs=
Subject key identifier: 45:7C:23:ED:D8:D3:C3:C4:BC:D5:7F:46:92:59:8D:F7:E2:94:49:C4
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 019873E305EEDDC1E727C5BE97E2F5C0222B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:54 +0000
Manifest this update: Mon 04 Aug 2025 07:01:54 +0000
Manifest next update: Tue 05 Aug 2025 07:01:54 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: N2bnrNSKBJ1+hv1N4Y2gpfZOVJWIvLlkGS2j+yEbrus=)
2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:05:ee:dd:c1:e7:27:c5:be:97:e2:f5:c0:22:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Aug 4 07:01:54 2025 GMT
Not After : Aug 5 07:01:54 2025 GMT
Subject: CN=457c23edd8d3c3c4bcd57f4692598df7e29449c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:24:62:e1:01:e4:f0:20:ee:59:eb:20:ae:
4c:dd:e3:ad:01:56:16:bb:74:bf:c8:fb:61:c6:f5:
f3:20:6d:6d:53:1c:d3:9c:52:55:dc:6b:3f:74:84:
c0:c2:52:58:eb:82:ac:18:52:37:6e:2c:d1:bd:43:
a7:a7:70:e5:45:2e:06:61:2d:df:09:c3:f6:5c:b4:
70:fa:3b:6b:1b:3c:ff:dc:f0:de:d0:a9:f2:b6:a1:
db:46:5f:60:fb:0b:c9:34:35:9e:7b:29:0b:16:28:
b1:49:7e:04:21:de:11:58:a1:0b:45:d6:b7:f3:60:
13:a9:cd:27:37:4b:f3:2e:04:45:ed:9a:f6:ba:de:
13:17:ed:73:87:94:67:27:98:b7:6b:92:74:e8:3e:
10:51:53:09:89:b4:1b:cc:ca:b3:59:77:cc:eb:be:
4f:96:d0:6f:4d:db:03:db:24:0e:5d:92:97:97:ea:
ee:e4:d6:d1:65:fe:3c:35:8f:6d:b0:81:bd:f4:38:
69:a9:c5:4f:0f:d7:6d:a8:93:23:a1:39:bc:a5:bc:
e9:4a:2b:72:f6:fb:4f:d0:f1:9d:bd:cb:35:1c:c3:
77:c2:fb:12:8d:2c:a5:f1:69:3d:c9:04:a4:b5:27:
a4:3c:f9:b8:47:22:7c:fe:6b:01:27:fd:6c:8f:78:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7C:23:ED:D8:D3:C3:C4:BC:D5:7F:46:92:59:8D:F7:E2:94:49:C4
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0d:2a:af:38:8a:17:ea:6d:a1:66:20:7a:c7:b7:ee:9f:fe:
b3:00:68:58:d7:00:21:3f:5d:95:47:2c:cf:04:d3:83:1c:4e:
0f:57:9a:b0:aa:16:73:4a:3b:3a:ee:38:7a:d1:d0:40:50:7a:
8b:cd:8f:13:9f:0b:61:81:19:15:48:ea:cf:22:02:82:0b:b4:
82:57:aa:44:72:0c:64:35:02:30:95:fa:00:ea:1f:25:2f:dc:
88:99:d1:e5:d2:37:a4:a6:0e:31:05:94:59:39:cc:63:c6:22:
cd:0d:95:b1:17:e5:d8:bf:c8:db:80:46:ce:16:a7:a4:09:03:
68:d2:da:5d:46:0f:6f:f5:7f:ca:91:b5:0b:fb:5a:0f:22:e7:
fc:b5:3e:8d:4c:b2:e2:15:98:33:29:2d:5c:32:57:7a:47:40:
1e:d3:87:b5:5d:22:06:a4:f0:0c:09:c0:02:54:c9:dd:7c:54:
7b:28:20:12:b4:e7:bc:4d:38:9e:91:ec:98:99:a9:91:3e:b5:
a3:0e:2e:0c:5b:01:00:e9:f3:1f:4e:cf:f3:c7:4c:42:fa:26:
99:05:83:18:1d:22:5b:40:fc:6c:fa:7d:4e:a1:4d:a6:e0:8e:
6b:f5:0a:1c:f9:a0:d7:e7:98:62:72:e3:f4:e0:4e:bb:37:0a:
04:61:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:47 2025 by rpki-client