Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: Sl3OaKtHD6ZcGAWcI7kDiclnit1FypM51tS9l8eaM78=
Subject key identifier: F4:E5:C2:FA:C4:2E:B5:2D:A6:03:87:F5:71:FC:02:60:0B:68:E7:AD
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 01992D48781902103F0A169AB20B1CE310C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 07:02:28 +0000
Manifest this update: Tue 09 Sep 2025 07:02:28 +0000
Manifest next update: Wed 10 Sep 2025 07:02:28 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: li+pT+7SfdSa6BERT037kixTanufOCjm+wyBb1lez80=)
2: rEnYgfgJaCjn_qIROc2RziotFd8.roa (hash: tyTMLNN1BSIUG9pwd6OlkaqCcb+yNG9RgWzpF+pWE60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:48:78:19:02:10:3f:0a:16:9a:b2:0b:1c:e3:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Sep 9 07:02:28 2025 GMT
Not After : Sep 10 07:02:28 2025 GMT
Subject: CN=f4e5c2fac42eb52da60387f571fc02600b68e7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:47:12:9f:cc:d2:d9:6c:6c:34:ee:13:1e:
21:09:ed:9a:b6:ae:d8:11:8e:72:8c:98:59:9e:3c:
44:74:b2:01:21:28:cd:09:27:d5:09:c5:0d:98:81:
e6:9d:3a:0c:67:77:7c:6f:b6:4b:d6:07:c6:35:3c:
85:65:d3:cf:9e:cb:6a:fc:de:36:83:25:7b:92:28:
1c:6f:6a:ea:13:5c:18:7e:7c:6a:39:13:2c:73:39:
9d:86:ed:74:3f:99:22:97:a0:27:e4:b8:4c:62:71:
dd:91:8a:b0:25:64:88:c8:96:5f:57:29:90:95:0a:
ea:bf:3b:2a:26:44:77:fb:64:4f:02:e1:1f:50:e0:
39:3b:ae:40:0f:ec:8a:04:b9:3b:ad:26:62:7d:28:
5b:83:ed:78:2a:57:fe:9a:af:0a:2c:89:82:38:15:
4f:d3:fe:b4:d9:5f:bd:b5:9d:62:70:3f:a4:3d:34:
e1:ae:e6:4d:cd:29:fe:61:b1:d7:fd:d4:99:9a:ea:
74:a3:77:b5:ad:dc:92:4f:f7:0a:ee:46:0c:26:5a:
7d:c1:37:fa:b3:4c:8c:21:cb:2b:e0:1a:c9:42:dd:
2d:75:65:b7:22:38:92:29:27:c6:df:5b:63:a3:a6:
c6:b6:32:28:dc:83:17:29:f4:56:63:4f:75:bd:bb:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:C2:FA:C4:2E:B5:2D:A6:03:87:F5:71:FC:02:60:0B:68:E7:AD
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a4:60:83:28:2d:b2:c1:dd:9b:a3:9c:8d:f3:fb:5a:49:a0:
da:f6:ec:67:97:e4:b1:be:e9:55:ce:24:be:4f:13:81:58:6d:
b4:32:fc:cf:99:39:1c:46:9d:96:31:01:d5:dc:5d:b6:bd:36:
b6:6f:14:a4:f7:85:53:f9:53:fe:6c:53:66:a8:99:2d:7d:c2:
05:1a:ce:fd:65:80:9f:0b:35:b9:67:50:43:43:b2:67:e5:b1:
6a:c7:60:38:0b:2e:a7:8e:32:fe:c6:c1:de:e8:53:91:4c:a9:
97:f5:a4:16:68:fc:84:ec:39:03:69:ae:6a:9a:78:73:6a:6e:
4a:ae:be:e1:74:9a:79:bb:62:f2:b3:14:83:d2:f9:d6:3b:d2:
48:2a:cd:8a:d7:88:a1:75:1e:90:f3:83:c7:7a:b8:38:12:51:
ea:93:3e:d0:ef:30:a9:cf:67:aa:ed:af:24:ce:83:06:6f:40:
13:b4:d4:3d:2c:a1:b8:3e:fd:c5:e8:52:17:af:c5:fa:03:7c:
f7:63:a2:a9:cf:ce:50:c4:23:20:51:06:1f:a6:a4:a3:df:1f:
95:88:95:2f:be:cf:9b:53:b0:75:fa:cb:b6:02:da:8a:40:2d:
3e:0b:4d:c6:82:f6:4f:6a:f4:91:e1:2c:6e:af:d5:c6:41:61:
0d:8f:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:48:04 2025 by rpki-client