Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: qcX/kpnXGUItvq+R93e+H67mBbEi/Q4diK7dLQiEPsE=
Subject key identifier: 54:B1:EE:34:E2:E5:5C:3B:B8:2B:50:66:BE:05:B5:43:91:9E:BD:05
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 019894B701225A48BAE72D16A00509438C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 16:01:17 +0000
Manifest this update: Sun 10 Aug 2025 16:01:17 +0000
Manifest next update: Mon 11 Aug 2025 16:01:17 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: L9Zj8uSj2tduHzV6pGzerGhFa62a54b6YEjpjKHcOkE=)
2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=)
3: nGeZMPiJHuxTp5r7-LPyVgsD0PU.roa (hash: l7oDkA0XjfZYSaNEYHxPZ+fCmO92nea2c0B83OBtIh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:01:22:5a:48:ba:e7:2d:16:a0:05:09:43:8c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Aug 10 16:01:17 2025 GMT
Not After : Aug 11 16:01:17 2025 GMT
Subject: CN=54b1ee34e2e55c3bb82b5066be05b543919ebd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:26:0f:18:54:12:1b:3f:51:c8:33:6a:83:
6e:e2:28:0d:f0:a1:05:1d:fb:71:09:eb:8e:c9:6d:
3b:25:4f:b8:c2:87:bf:29:55:5a:c2:14:20:aa:cd:
e6:b3:e0:95:44:41:62:e2:fa:b0:b7:8b:5b:93:86:
73:33:ed:c5:b5:bb:bd:06:fa:e0:58:f2:bf:1c:cc:
5f:53:81:b7:a7:dd:d5:a6:76:e5:bc:de:41:80:4e:
09:9e:f7:28:00:f1:53:4b:08:e4:4b:90:5f:96:25:
76:e2:a4:a4:36:37:a0:7c:0b:78:c5:4a:cb:c7:07:
4c:59:ac:c0:16:bc:ee:fb:36:34:98:f8:ba:b7:d9:
1f:04:6e:87:3b:6f:f3:a4:97:78:76:37:7c:48:b7:
b3:01:e4:16:18:30:ab:11:ac:01:71:b3:1d:9b:b6:
55:a5:ca:ce:16:da:e5:a4:5d:9e:cd:4f:d3:48:9d:
1b:6c:09:5c:e1:68:89:72:fa:7d:0f:13:a0:d5:65:
83:56:af:0b:a4:fc:8a:ed:b3:f6:d4:67:45:47:c3:
dd:a9:ef:be:5b:e6:31:ea:fb:79:e7:d8:9c:33:63:
55:f8:6b:7a:58:e3:f1:2b:0f:82:90:8d:d1:24:1d:
03:34:e9:63:da:00:6c:83:17:66:e6:ff:22:7a:67:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:EE:34:E2:E5:5C:3B:B8:2B:50:66:BE:05:B5:43:91:9E:BD:05
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:25:70:07:4b:b2:80:1a:60:c2:a8:58:e7:42:54:d3:5f:67:
c6:42:db:da:e8:29:60:79:b1:9d:d6:6b:8a:9e:fc:6b:08:60:
06:7b:c3:3a:91:3e:c8:f7:78:5d:dd:6f:c8:01:89:98:29:35:
ad:74:45:63:ac:9d:b4:a0:d7:b3:27:4e:a8:2b:3b:35:0f:1a:
ab:b3:27:7b:9d:e9:00:ae:bb:45:3c:09:59:e3:6c:bd:64:82:
29:ef:0a:1d:64:ce:c3:92:6a:a7:60:1a:f5:dc:54:34:ec:fe:
82:66:5b:9a:cc:7b:0d:db:32:e9:b9:6a:d3:eb:25:7c:59:09:
77:cd:86:af:00:b3:03:f3:2f:b3:79:15:72:1d:3c:a9:46:56:
d8:ab:06:14:04:93:3d:c0:d6:11:ee:08:10:a4:17:e7:be:25:
12:ce:dd:59:d4:0c:88:94:38:55:d6:32:54:bb:40:86:df:75:
33:57:6a:02:62:0d:53:5f:70:de:28:05:74:eb:89:9e:96:e2:
7a:05:96:ee:ad:9e:de:88:80:66:2f:b2:d5:b5:b1:c9:a6:cb:
77:44:b4:b9:15:f3:3f:13:83:2c:a3:9b:c1:2b:e5:c9:2a:76:
30:df:ae:b2:5b:05:76:c2:4f:e9:81:42:4a:b4:20:95:25:3d:
22:af:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:51:46 2025 by rpki-client