Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier: i8bTrGz5MyYBlubGH2KUueAH7XR1P/6EGaPGhW7a2VU=
Subject key identifier: 3A:A8:30:EF:44:98:02:46:40:F9:A2:00:3A:BF:6A:C5:81:A4:14:B0
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial: 019923D5BE84BD9EF742DF2487AB05461CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 11:00:34 +0000
Manifest this update: Sun 07 Sep 2025 11:00:34 +0000
Manifest next update: Mon 08 Sep 2025 11:00:34 +0000
Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: 2zeHRqS24gbwQ+TdDkb+B7MvPtfCr87UT5kUvd9oxzY=)
2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:be:84:bd:9e:f7:42:df:24:87:ab:05:46:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Validity
Not Before: Sep 7 11:00:34 2025 GMT
Not After : Sep 8 11:00:34 2025 GMT
Subject: CN=3aa830ef4498024640f9a2003abf6ac581a414b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:4c:8f:44:4a:6e:2f:08:9c:8d:f7:ca:60:
4a:72:19:2c:d0:6c:65:8f:db:94:79:0b:bf:e9:9b:
9f:6b:11:2f:e9:f9:f0:64:39:8c:33:46:1f:57:ea:
da:d4:07:12:fa:c0:c9:4a:de:48:7d:84:92:77:71:
0f:7c:b6:9a:dc:5c:92:6f:be:40:0a:07:78:af:56:
a5:a2:ef:52:a3:28:a0:85:e7:3a:91:06:33:ec:60:
51:b7:b0:9d:db:65:ba:de:da:d7:a1:d9:97:5e:0d:
f2:10:66:6c:13:07:f2:75:df:28:b3:f6:16:8b:cd:
51:f8:e3:46:61:3c:51:9b:13:78:df:c6:a7:95:13:
2a:16:5a:4d:3d:62:8d:d8:7a:9a:90:04:1f:c8:35:
08:cc:0e:fd:89:23:01:7a:2e:f8:d6:8b:19:7f:e1:
92:d9:ee:92:c5:d6:ff:a6:2a:cd:a0:27:ad:24:b5:
60:7f:7f:49:ec:37:a8:c2:a6:b9:2a:7d:f2:12:fb:
e3:78:a2:72:d0:7d:13:55:c3:32:fa:53:2a:e8:17:
ff:23:2b:b4:77:72:66:2f:63:8a:aa:b1:25:de:a9:
2c:40:52:46:e9:fa:4a:32:d0:82:00:ae:07:00:66:
0f:6e:b1:6c:d5:15:f1:f5:ac:8f:89:7d:b1:71:47:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:30:EF:44:98:02:46:40:F9:A2:00:3A:BF:6A:C5:81:A4:14:B0
X509v3 Authority Key Identifier:
keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c4:fb:b2:11:3b:12:4f:40:76:24:d5:35:a2:e4:8c:b8:9c:
7a:dc:c7:a7:8f:11:3f:57:2d:7f:91:ce:e3:36:f4:fd:41:b7:
6a:3d:81:61:2c:e3:cc:5f:d7:6e:77:e5:88:41:69:33:55:a5:
1e:a1:11:b2:b5:d7:5a:e6:23:73:70:3c:c0:fe:92:a3:67:62:
b4:fa:ca:b7:a1:9c:39:c1:0b:fa:05:79:7b:e0:1f:91:8c:37:
54:19:02:d8:9c:e5:18:6f:94:ee:52:fb:49:c3:d5:98:e9:dc:
96:f0:68:9a:ca:d1:e7:ed:81:b0:bc:ce:f4:5a:50:0e:8e:ca:
53:5f:e9:9a:e5:6a:b1:74:75:3a:5a:e9:91:d2:88:48:c7:d7:
28:e4:0b:c3:2a:8f:28:46:02:06:50:ed:85:71:cd:70:f4:cc:
12:bc:27:51:09:02:ac:9f:2f:08:19:b0:4b:84:5f:25:84:28:
1c:07:33:31:b0:22:2b:15:17:8e:56:24:c9:a0:01:15:4a:eb:
ee:ec:68:33:38:c5:86:91:aa:2b:e0:b8:47:58:93:df:1c:32:
fe:da:17:cd:dc:3c:25:c0:c1:58:88:90:b2:ad:d2:6d:94:8f:
0b:fb:cb:9d:a6:47:7d:8e:18:b7:45:a9:04:c8:b3:c5:11:90:
b6:36:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:46 2025 by rpki-client