Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: aOUIuZFdLlnmwDaA0MtPjQGoc8uTvSUFpLPEayrfbWk=
Subject key identifier: 7B:89:7B:5E:42:84:6F:B0:E3:AB:99:9D:D6:D9:C1:89:52:9F:15:46
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 01991BE6D63E9B0624989BE81375F4ECEAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0DD1
Signing time: Fri 05 Sep 2025 22:02:16 +0000
Manifest this update: Fri 05 Sep 2025 22:02:16 +0000
Manifest next update: Sat 06 Sep 2025 22:02:16 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: jmTCyzQCE7jZnj6MWaIQ0UNUNt9hYhZ0cCTf5m2/XNo=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e6:d6:3e:9b:06:24:98:9b:e8:13:75:f4:ec:ea:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Sep 5 22:02:16 2025 GMT
Not After : Sep 6 22:02:16 2025 GMT
Subject: CN=7b897b5e42846fb0e3ab999dd6d9c189529f1546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:53:52:a9:42:55:aa:fb:4d:24:05:3e:8e:
d5:86:79:21:be:36:a0:0f:f6:12:2e:8f:94:d5:91:
70:d1:52:6d:33:44:f3:bb:a7:33:3c:bf:53:54:51:
00:55:77:9d:38:ba:b3:23:f6:0c:b0:c2:f6:28:cd:
4e:df:aa:64:ab:76:51:28:93:2a:26:31:4d:97:0e:
4a:4d:04:3d:00:39:9c:96:b3:c2:79:e4:3c:32:9c:
a0:55:8c:df:70:60:40:18:f2:53:3c:e6:90:c7:96:
3b:d3:9c:30:8a:f2:a6:9a:4e:bf:e6:f8:4d:91:3d:
05:78:a1:83:00:67:f8:de:98:c8:3f:a2:92:d9:dc:
a9:97:32:69:aa:e1:2b:0e:e4:2d:15:a9:cf:c9:40:
6f:b3:c1:94:ca:9c:e4:88:0c:71:77:f0:b8:dc:4f:
83:09:36:5c:21:26:04:44:1e:ec:61:8a:e4:26:11:
e9:9a:2a:fe:9a:45:14:70:4e:ce:96:4a:16:c2:2e:
58:fb:94:da:65:7d:53:4d:d8:d2:62:b6:a4:52:0f:
ec:f9:21:66:06:0d:44:ba:1b:b3:37:c8:eb:f2:1c:
d0:d0:69:24:91:ad:af:62:74:ed:2c:0d:e6:e5:76:
00:bd:97:4d:64:0d:cf:01:4e:45:72:a9:46:0c:ec:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:89:7B:5E:42:84:6F:B0:E3:AB:99:9D:D6:D9:C1:89:52:9F:15:46
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0e:96:62:73:b6:91:13:83:8e:ca:e7:d4:6e:df:eb:ae:00:
a9:0f:da:b6:d0:95:09:0e:5d:b1:a8:ac:5e:9f:a1:d9:8e:b5:
56:80:e6:35:fa:2b:db:c1:07:56:49:43:48:4b:b5:f5:6f:10:
79:7c:67:5f:29:7d:fb:d7:37:8a:72:9e:9c:b4:e6:5d:ae:70:
1f:1a:15:45:e3:f6:94:d9:1f:f7:fe:5e:92:e1:36:31:cd:57:
ed:a0:ba:88:6a:ad:48:3d:e6:84:b5:d7:2a:1a:58:00:e4:62:
f7:1f:27:d7:b3:0d:51:d6:6d:94:86:69:ea:11:01:82:c0:bc:
8e:bf:9f:8e:ae:ce:ec:ae:c0:15:cb:c6:68:a8:00:e9:21:40:
72:c6:c8:e4:51:12:11:11:6f:f0:ba:dc:b1:3f:6a:5a:57:55:
08:7b:e5:f3:f0:0c:27:63:3e:8c:86:ea:51:79:66:b8:10:46:
2c:b4:35:58:ed:2d:d9:93:86:28:5c:0f:a7:13:63:e7:22:15:
42:b9:4f:79:9c:e7:bd:7c:db:0c:da:a3:c2:5a:13:d3:00:1b:
05:21:5b:96:2f:c7:8b:10:69:55:ba:56:c3:c4:60:38:98:d9:
75:f2:35:35:de:dd:a4:b1:d8:a5:d0:89:63:9f:8e:5d:e0:5d:
3d:b3:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:06:06 2025 by rpki-client