Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: LRb8AThx3H+adPgl/y+MUYlFFeFvSvwMe1SdImwB+w0=
Subject key identifier: 24:DC:D3:48:E2:A3:F1:01:99:6E:4A:7E:4E:B8:6F:91:19:1D:D3:EC
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 019894119094A300989EB8457E6317FE6DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 13:00:35 +0000
Manifest this update: Sun 10 Aug 2025 13:00:35 +0000
Manifest next update: Mon 11 Aug 2025 13:00:35 +0000
Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: zi5/rBF1i8zMBpA/ViPUQlhwGMHMs8WSTJN9wlhcRoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:90:94:a3:00:98:9e:b8:45:7e:63:17:fe:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Aug 10 13:00:35 2025 GMT
Not After : Aug 11 13:00:35 2025 GMT
Subject: CN=24dcd348e2a3f101996e4a7e4eb86f91191dd3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:ec:a4:b1:db:94:d8:da:74:c5:bb:d3:6f:
d2:0a:88:28:3e:fa:59:bd:bd:4f:0a:ad:72:f4:2a:
f1:3b:c5:d9:21:a7:6e:00:1b:cd:2a:fd:3a:01:9b:
73:50:c3:1c:81:c8:12:7b:ed:c9:d0:71:6c:98:a5:
30:11:18:8e:63:f5:d2:7a:ae:06:a0:51:4f:cf:b8:
6d:df:0d:89:bf:51:26:24:4d:5c:a7:c7:f6:a9:a0:
48:43:1e:28:25:19:d5:3a:38:41:b5:21:b9:d3:45:
4b:65:96:23:1b:d3:fa:21:3b:06:53:c5:0c:d8:8d:
47:dc:68:d5:f4:30:15:aa:1e:d6:3b:e7:fd:25:3e:
c5:4b:35:52:33:03:97:68:34:5b:cb:e9:0b:d8:9a:
4c:3f:eb:67:3d:60:35:ad:34:2d:02:82:c7:ac:d7:
9f:ff:02:ff:17:00:fe:21:79:6f:56:52:d5:e7:ac:
36:4c:a0:ca:b1:01:ae:b3:79:17:9a:72:04:bf:09:
27:9d:21:53:69:8b:51:12:dc:00:91:23:6d:54:76:
b5:f1:83:d5:93:ff:c5:52:77:c1:87:a3:7a:64:59:
04:d9:1e:be:df:b9:b9:d7:0d:96:93:12:24:f0:4f:
16:6c:13:2c:b9:12:1e:32:7b:f3:0e:5c:c9:96:32:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:D3:48:E2:A3:F1:01:99:6E:4A:7E:4E:B8:6F:91:19:1D:D3:EC
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:68:e7:a2:2d:f0:3b:c6:ca:16:2e:70:58:89:14:58:65:11:
1f:81:e0:6e:7e:39:fc:3e:a1:ec:a1:30:60:33:b4:fc:32:43:
07:ee:b1:f8:93:86:1f:54:f5:83:7b:83:f3:1b:a2:0f:f5:19:
2f:20:35:c1:91:38:00:9b:c0:3e:b1:f3:6f:35:7f:4b:a8:74:
63:a9:ce:48:ff:62:22:02:09:33:8a:01:66:a1:d1:cb:df:77:
70:4e:ba:43:fd:40:54:85:df:61:94:34:c5:64:65:df:3c:04:
bc:87:5a:59:45:12:7e:9c:ee:3e:b7:cd:6c:87:b2:d6:c9:c1:
b6:84:f1:ce:77:e1:df:01:ed:5c:35:27:34:6b:c9:ea:df:af:
b3:9f:d5:7f:59:44:c2:82:a8:4f:a2:2a:35:74:73:e5:5f:32:
a5:f4:c6:59:c0:b5:47:da:1b:65:89:12:63:eb:ed:8c:c2:97:
bb:03:88:a3:a3:65:58:d2:07:b8:9e:e9:81:c8:2b:47:86:c6:
8d:96:6d:7a:66:5f:06:37:85:98:7f:7b:70:46:f6:0d:42:03:
6e:2d:83:fc:48:60:7b:59:f6:1d:94:3d:ec:1d:0f:f7:51:3e:
e7:de:99:e2:4a:48:3e:bd:75:f7:32:bf:1f:e2:bc:09:97:4d:
ba:36:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:22 2025 by rpki-client