Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
File: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft (raw, json)
Hash identifier: U1AjJUbiF+ZCEUsoAwGMG3X1H3xBP8yOEQSTje03OQM=
Subject key identifier: C5:E2:43:82:78:60:5D:95:54:05:D4:D2:82:DD:43:FA:70:F7:3F:CB
Authority key identifier: 14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
Certificate issuer: /CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Certificate serial: 01984AAEC3F28A3E3122F9A90A29320F6F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
Manifest number: 1218
Signing time: Sun 27 Jul 2025 07:00:24 +0000
Manifest this update: Sun 27 Jul 2025 07:00:24 +0000
Manifest next update: Mon 28 Jul 2025 07:00:24 +0000
Files and hashes: 1: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl (hash: 7unkHNw08UAO/CWZFWukoQqjm3yR5lCqveH6c/vz1c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c3:f2:8a:3e:31:22:f9:a9:0a:29:32:0f:6f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Validity
Not Before: Jul 27 07:00:24 2025 GMT
Not After : Jul 28 07:00:24 2025 GMT
Subject: CN=c5e2438278605d955405d4d282dd43fa70f73fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:1e:cd:fb:3c:60:e9:66:a6:8e:7b:8c:ea:
8a:8e:e8:7c:0a:d6:0e:dd:9e:9d:61:8c:bd:4f:27:
1f:f0:c5:99:e3:a5:99:da:07:f4:6e:ad:d6:ee:31:
01:d1:b6:de:13:0d:08:df:93:7b:89:f6:89:df:67:
7f:48:2f:d0:ec:eb:cf:28:78:fb:bb:be:94:05:a4:
52:83:af:93:75:98:58:3d:2d:1e:47:39:9d:9e:20:
22:6d:4f:f2:8d:fb:1c:2c:42:3e:7e:f4:b4:fa:49:
83:1e:07:d3:59:00:bb:19:0d:3f:b7:1b:6f:82:ee:
e8:09:13:02:09:f6:35:e3:0c:5e:d1:5c:5e:c4:44:
84:87:3d:0f:a6:b9:08:70:9b:e7:d4:d2:d6:06:52:
43:f7:36:1d:50:d0:8d:17:f1:08:0b:df:bf:68:9e:
f0:e3:6c:17:f2:21:99:03:ac:9f:41:09:b3:99:3a:
62:22:f2:77:d0:c3:cf:ba:f1:83:00:38:f3:81:8d:
3f:4d:95:98:b5:17:c2:84:90:e0:42:98:dd:e1:35:
64:cb:46:e7:ee:e8:6c:c0:d6:d8:92:95:fd:1f:da:
1b:37:09:90:c9:cc:97:47:a0:84:a9:d1:03:8d:3a:
fa:35:3f:c8:71:24:1a:16:e9:c9:9a:3b:d3:c4:48:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:43:82:78:60:5D:95:54:05:D4:D2:82:DD:43:FA:70:F7:3F:CB
X509v3 Authority Key Identifier:
keyid:14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:af:74:1d:fb:3e:0e:8e:88:7e:86:03:c4:36:2e:7f:1a:eb:
83:17:2e:e7:91:bb:0f:22:d7:4d:0f:d4:9d:f7:9e:2a:26:8a:
40:f8:84:cf:d4:5e:6d:32:14:ba:f3:1e:03:2a:73:fb:57:05:
36:7c:99:36:98:cc:97:86:61:27:94:dc:97:d4:88:00:62:cc:
b2:e3:2c:0b:cc:6a:19:b6:d4:c9:f2:4f:b9:ef:5a:54:98:c2:
35:67:bc:6f:00:29:ef:ac:bd:f7:40:ef:c1:3a:33:92:83:5c:
4c:74:76:a4:b9:d4:13:bb:96:11:28:b2:26:9d:87:ef:a8:74:
a0:ef:b3:9c:c8:e9:0c:53:f5:d3:54:80:b4:7d:5d:2b:5c:56:
b3:29:bb:c2:75:2c:87:9d:e4:35:e7:cb:08:c9:34:b8:d1:0e:
7a:22:f4:ba:a0:d2:b1:3d:4a:47:d9:d6:a6:73:9e:0a:f9:44:
c6:3a:ff:7f:4d:96:8d:eb:0a:76:f7:eb:4d:49:3c:b4:02:7f:
bd:d4:a9:64:77:c9:54:41:2f:8a:ee:d1:0c:b6:86:64:f9:2d:
32:ca:9d:37:cb:6e:2b:e0:06:ff:fa:07:33:43:c0:13:3f:75:
22:14:11:c8:3f:38:0e:39:27:aa:89:34:be:80:c9:1d:de:83:
3d:93:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:19 2025 by rpki-client