Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: Tew1vZKd0EKjmoiw68jyaTBqk8V6Idrg/QOn8OQKyZc=
Subject key identifier: C1:F7:CF:FF:91:63:D1:17:BD:57:AF:CB:73:FC:84:C6:FF:B0:EB:00
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 01984EC28E94BF733F1A16118EC1E55DE3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 13A3
Signing time: Mon 28 Jul 2025 02:00:29 +0000
Manifest this update: Mon 28 Jul 2025 02:00:29 +0000
Manifest next update: Tue 29 Jul 2025 02:00:29 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: bBdc8KCV88rIu4w9oFFpimp9sPP/XFD/+7inzyvrMWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:8e:94:bf:73:3f:1a:16:11:8e:c1:e5:5d:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Jul 28 02:00:29 2025 GMT
Not After : Jul 29 02:00:29 2025 GMT
Subject: CN=c1f7cfff9163d117bd57afcb73fc84c6ffb0eb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:d6:64:96:a2:a5:98:3f:fd:37:22:57:1c:
d1:d5:82:35:c9:fb:16:de:cb:54:54:14:64:60:98:
0c:90:a8:59:38:ed:5a:91:94:74:42:5d:8c:dd:20:
7b:63:0e:e4:91:6b:1a:ce:2b:88:c2:9a:4a:ed:1c:
ac:88:8c:55:11:2a:de:ed:a3:3b:85:6f:a8:ea:1e:
74:aa:8e:4e:4f:cd:14:bd:91:d7:9f:9d:55:23:f5:
ca:69:82:b8:1f:6e:2f:9e:59:be:06:8a:c6:d9:38:
29:f7:d9:a6:fe:00:0d:5f:5d:58:ed:2e:45:59:27:
b5:11:c1:ae:a9:ec:a6:f8:30:e0:33:6c:ce:f9:f2:
4a:b2:ac:1e:1f:16:97:e2:a5:23:37:0e:9e:6d:08:
ed:e8:8e:be:4a:45:d5:69:7b:0f:25:a6:74:35:d5:
2b:a7:4d:18:82:a6:30:b6:15:ac:a3:1a:a6:46:0f:
9c:08:3e:1b:14:c1:68:59:bb:07:f1:d0:ff:9f:bf:
6f:3b:0f:1b:3c:45:7d:29:df:a7:8a:d4:fd:3a:c6:
1c:33:01:72:e0:bb:d4:32:e6:ab:bd:ad:1e:a7:b1:
06:ff:6f:fa:98:e9:1b:ae:6f:96:40:51:e1:6c:1a:
bb:4f:eb:61:b9:86:29:95:25:eb:08:0a:61:00:9a:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:CF:FF:91:63:D1:17:BD:57:AF:CB:73:FC:84:C6:FF:B0:EB:00
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a6:fc:4f:7c:6d:af:60:12:70:52:36:6f:35:28:be:71:e1:
2b:38:68:34:df:e1:df:d3:45:de:94:00:3b:0b:32:f2:10:ab:
c6:8b:4b:60:e5:24:16:f9:b8:64:3a:4f:dd:57:84:8c:97:ef:
f7:77:56:65:fb:48:18:47:39:7e:a9:f8:0c:6a:5d:ce:ea:fb:
81:d1:4a:3a:15:75:c4:29:cc:fe:99:c8:fd:23:89:5e:42:c4:
f5:89:e5:7a:c1:4f:25:7f:39:61:76:98:cf:1d:01:28:83:71:
a0:ab:e3:0e:82:c9:6f:c6:d5:b0:9d:3f:55:af:a8:5b:0a:85:
99:fe:e3:6e:72:ee:87:77:7f:d1:72:bb:14:9e:6c:26:17:03:
9e:41:0f:a4:3f:e7:dd:fb:c8:2a:a2:8f:20:c5:90:d0:62:44:
6e:e6:d8:80:0d:09:55:d8:80:42:e5:a9:6d:c3:e8:b7:d0:4d:
b3:bd:6f:1e:13:00:6e:da:24:8b:62:26:cf:83:92:9e:54:4f:
21:7f:72:5b:bc:de:d3:69:c5:d1:10:70:41:d0:b2:7d:6d:29:
6d:48:6a:30:50:24:88:27:78:55:92:6c:56:62:51:67:3a:f4:
ab:b8:92:a8:80:aa:4c:ea:90:53:cc:2f:8c:8f:67:c1:39:65:
1e:7e:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:12:18 2025 by rpki-client