Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: QgzMcMqK3Mz/XX3SgWjldJvrqRS82hjGMu4ibBrtoaE=
Subject key identifier: 68:0F:8A:53:D5:CF:4B:CF:6D:0A:C3:2B:36:84:40:2D:84:0C:96:12
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019847E4AB919A0CA22CE14D6463233AFD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 1145
Signing time: Sat 26 Jul 2025 18:00:25 +0000
Manifest this update: Sat 26 Jul 2025 18:00:25 +0000
Manifest next update: Sun 27 Jul 2025 18:00:25 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: dw9zk7QISuCGsAJke7hS2T3zUhjjcEbKCG984U2F2Bc=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:ab:91:9a:0c:a2:2c:e1:4d:64:63:23:3a:fd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jul 26 18:00:25 2025 GMT
Not After : Jul 27 18:00:25 2025 GMT
Subject: CN=680f8a53d5cf4bcf6d0ac32b3684402d840c9612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:6c:97:46:a5:d9:2f:64:c1:98:f7:1f:f7:
ea:c0:bb:83:8d:b2:21:31:64:d1:b8:47:55:b7:37:
68:90:0b:29:5f:d1:27:0d:72:98:79:ad:c1:6f:ec:
e0:07:1a:8a:e1:57:92:40:1f:32:e6:79:b6:d7:ee:
47:79:8f:12:f9:9a:ee:38:6d:a0:ef:ac:b4:86:16:
85:92:c5:d2:a3:70:63:53:be:20:0c:e2:e7:10:23:
0d:c5:6c:06:51:5a:68:25:3e:23:af:e0:e1:89:7d:
27:af:2d:06:75:93:27:75:e1:88:8d:39:b3:8a:d5:
17:df:7f:d6:67:d8:85:9c:d6:8f:87:9b:a7:22:f5:
5a:6e:32:c6:e0:02:00:61:99:02:27:b5:74:78:d9:
79:28:bc:1c:31:26:86:b9:53:ae:64:41:83:c5:74:
08:5a:51:f9:d0:89:61:d1:96:4d:9b:9f:51:34:a2:
45:9b:fc:b0:61:d8:60:00:1b:bd:d0:06:db:5b:6f:
cc:5f:a1:53:9b:54:60:40:4a:a2:34:21:a1:4d:3a:
0e:ce:a8:8a:c1:4e:d8:7f:27:07:93:d4:26:5d:cb:
d2:0f:36:f1:46:08:ad:3f:f2:50:22:5b:86:bd:c3:
dd:37:cc:74:28:94:01:b5:ff:d1:1d:50:60:54:68:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:8A:53:D5:CF:4B:CF:6D:0A:C3:2B:36:84:40:2D:84:0C:96:12
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:35:e1:62:92:4a:1d:9f:51:01:16:bf:b7:99:cf:31:b0:
b4:54:c7:75:ce:6f:6e:05:ce:7f:c0:29:c7:b0:9c:90:5f:98:
f8:67:72:c0:08:cc:45:54:f8:72:b9:07:6a:1f:8a:00:e6:ce:
a8:12:3b:77:ef:42:7d:7b:bd:a2:a6:dd:01:f9:19:a1:68:9d:
b3:2c:60:e9:b2:fe:d5:cf:91:e8:ee:1a:3e:d9:13:7a:70:7e:
26:a8:2c:6a:37:71:2e:ac:23:74:f3:ed:6e:20:99:1a:41:10:
b5:2f:7d:88:9f:12:5e:e3:d7:9e:3c:d8:59:76:7a:0e:d2:88:
64:40:5e:30:4b:c9:93:c4:6b:62:09:ac:7e:7f:13:29:c7:91:
9c:5d:e1:2b:ba:f6:f8:dd:af:4e:84:f2:23:e8:71:55:ee:f0:
47:39:53:51:4b:8b:b0:55:bd:9b:fa:14:35:25:0b:b4:a1:f7:
1b:3c:96:66:e9:0d:f5:f4:21:70:c7:20:a9:75:e1:56:41:ee:
5f:2e:91:21:bf:8c:cb:a6:64:cd:ee:7c:6c:23:22:cb:0a:39:
5d:fa:b1:1b:a5:28:f2:4d:2a:2b:ee:88:d2:57:79:d0:a5:3a:
2e:d0:7e:5e:76:57:6a:89:bd:64:80:d1:d6:41:2c:55:d3:93:
7b:38:3a:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5KuRmgyiLOFNZGMjOv2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw
ZGQ0OGQwHhcNMjUwNzI2MTgwMDI1WhcNMjUwNzI3MTgwMDI1WjAzMTEwLwYDVQQD
Eyg2ODBmOGE1M2Q1Y2Y0YmNmNmQwYWMzMmIzNjg0NDAyZDg0MGM5NjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Nsl0al2S9kwZj3H/fqwLuDjbIh
MWTRuEdVtzdokAspX9EnDXKYea3Bb+zgBxqK4VeSQB8y5nm21+5HeY8S+ZruOG2g
76y0hhaFksXSo3BjU74gDOLnECMNxWwGUVpoJT4jr+DhiX0nry0GdZMndeGIjTmz
itUX33/WZ9iFnNaPh5unIvVabjLG4AIAYZkCJ7V0eNl5KLwcMSaGuVOuZEGDxXQI
WlH50Ilh0ZZNm59RNKJFm/ywYdhgABu90AbbW2/MX6FTm1RgQEqiNCGhTToOzqiK
wU7YfycHk9QmXcvSDzbxRgitP/JQIluGvcPdN8x0KJQBtf/RHVBgVGhxVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgPilPVz0vPbQrDKzaEQC2EDJYSMB8GA1UdIwQY
MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt
NThlZWZjZDY1MmQ4LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4
LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+M14WKS
Sh2fUQEWv7eZzzGwtFTHdc5vbgXOf8Apx7CckF+Y+GdywAjMRVT4crkHah+KAObO
qBI7d+9CfXu9oqbdAfkZoWidsyxg6bL+1c+R6O4aPtkTenB+JqgsajdxLqwjdPPt
biCZGkEQtS99iJ8SXuPXnjzYWXZ6DtKIZEBeMEvJk8RrYgmsfn8TKceRnF3hK7r2
+N2vToTyI+hxVe7wRzlTUUuLsFW9m/oUNSULtKH3GzyWZukN9fQhcMcgqXXhVkHu
Xy6RIb+My6Zkze58bCMiywo5XfqxG6Uo8k0qK+6I0ld50KU6LtB+XnZXaom9ZIDR
1kEsVdOTezg6qQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:32:05 2025 by rpki-client