Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
File: FCKHkIfdKSaAJjvDlOMch1lyLZA.mft (raw, json)
Hash identifier: 4jWreRmZ8wPFtu6P5o6u/PFI9Ww9bookhnioXpvk+dE=
Subject key identifier: 4E:1D:E0:CE:18:89:30:D4:C2:96:6C:36:E3:00:E5:EE:DB:91:BE:AA
Authority key identifier: 14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
Certificate issuer: /CN=1422879087dd292680263bc394e31c8759722d90
Certificate serial: 019922FA96E8F4BDBAD94CBCCB2A4DD8AB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
Manifest number: 36
Signing time: Sun 07 Sep 2025 07:01:11 +0000
Manifest this update: Sun 07 Sep 2025 07:01:11 +0000
Manifest next update: Mon 08 Sep 2025 07:01:11 +0000
Files and hashes: 1: FCKHkIfdKSaAJjvDlOMch1lyLZA.crl (hash: 80F80+5u4+AKy/z6gRKUJdYcajxqaTVEN86+/r1gfQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:96:e8:f4:bd:ba:d9:4c:bc:cb:2a:4d:d8:ab:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1422879087dd292680263bc394e31c8759722d90
Validity
Not Before: Sep 7 07:01:11 2025 GMT
Not After : Sep 8 07:01:11 2025 GMT
Subject: CN=4e1de0ce188930d4c2966c36e300e5eedb91beaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:d8:3e:ec:7c:d9:22:54:e8:2e:97:85:13:
88:10:85:ea:53:6a:f6:73:dc:8a:51:a1:e2:6b:43:
6f:12:0e:5d:4d:93:e4:00:ac:6a:e1:f1:2f:b8:2d:
37:e6:74:a3:35:3f:92:50:ab:87:5b:e6:95:db:1b:
86:69:88:e0:5a:26:8d:e3:bd:50:f0:ad:9c:c9:44:
d8:59:0d:8f:a6:3c:a9:48:97:d5:fc:3d:2e:a8:57:
ef:e8:e3:ee:6b:13:8c:ef:ba:30:d0:f7:97:12:d4:
0f:fc:b7:2d:3d:17:18:92:0e:c3:69:b1:bb:e8:d1:
0b:87:c8:48:14:e5:06:58:bf:19:19:d9:ff:44:d7:
4c:5f:3c:95:f2:3d:1a:5e:4c:54:f3:3e:0d:fb:70:
19:a6:50:9c:1d:b5:61:7a:22:bc:0a:65:aa:47:3b:
d2:7f:29:c3:6b:fd:f3:22:16:6a:82:59:a2:20:e2:
0e:98:2a:a2:ba:7e:8f:9b:cd:4a:d8:1e:9a:59:f5:
2e:d2:d6:e2:6b:b6:3a:3b:2d:23:15:f1:91:ba:2b:
1b:a3:8a:e7:63:29:41:47:ce:7d:e2:e7:3b:bf:69:
59:7a:65:63:d2:75:41:e5:16:98:08:34:6c:44:d6:
a5:cf:1c:23:f7:1e:c8:00:24:f7:03:53:82:2d:4b:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1D:E0:CE:18:89:30:D4:C2:96:6C:36:E3:00:E5:EE:DB:91:BE:AA
X509v3 Authority Key Identifier:
keyid:14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e9:d6:11:27:64:05:8e:d0:6c:0a:13:92:49:7f:27:4a:0f:
9f:14:c7:8d:b9:e6:12:78:dd:da:ef:e8:71:a6:ec:73:39:f6:
ba:e5:87:59:b5:06:7c:81:b2:18:9e:89:da:d3:4c:0f:37:fe:
e1:46:50:80:03:78:a1:cc:45:ce:c8:78:d2:b1:74:d4:b2:e9:
ec:b8:90:51:1b:40:e6:e1:bf:aa:20:56:11:b0:ea:9a:fc:6e:
7a:d7:88:bb:50:52:5d:7d:b9:e8:fd:68:7d:ed:c6:99:f2:92:
e8:14:72:0a:25:41:88:13:0f:46:a9:d2:6e:b5:ac:f4:e1:d5:
96:2a:89:24:36:5a:80:55:8f:57:76:8d:fb:04:3c:8a:26:7d:
17:b0:b9:38:a3:fa:49:db:b5:65:7c:48:17:51:6c:8f:3d:ab:
e2:7b:a9:fc:6d:9b:02:26:ae:e0:e1:68:eb:29:ab:2e:5f:db:
48:90:c8:5a:f3:b8:a8:91:0b:8d:8a:8e:87:04:50:f1:ef:2b:
d2:b6:3b:14:82:42:3c:bc:ae:79:3c:15:b2:8a:77:b8:3e:f3:
6b:68:f3:7c:91:53:0f:fd:5e:2f:ae:49:d6:62:42:35:9e:09:
82:80:89:9e:7b:0e:f4:b7:02:0b:08:4a:ab:a0:27:6b:f8:10:
a3:21:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:16 2025 by rpki-client