
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
File: FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft (raw, json)
Hash identifier: KptnM5/B5qdGBPAwLAePhZVI4z1woNO84sVrIhZV8qk=
Subject key identifier: D4:E5:22:64:E1:A1:0A:E7:12:16:82:CD:6F:88:EC:48:63:12:45:39
Authority key identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
Certificate issuer: /CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Certificate serial: 0199180A7D1626C8A86EB98ABB9826BB96EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
Manifest number: 0B0E
Signing time: Fri 05 Sep 2025 04:02:44 +0000
Manifest this update: Fri 05 Sep 2025 04:02:44 +0000
Manifest next update: Sat 06 Sep 2025 04:02:44 +0000
Files and hashes: 1: FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl (hash: gDVpb1Ol8ZZGD6Edb0F8bwP0bEhkt3n7X4O05y0j3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:7d:16:26:c8:a8:6e:b9:8a:bb:98:26:bb:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Validity
Not Before: Sep 5 04:02:44 2025 GMT
Not After : Sep 6 04:02:44 2025 GMT
Subject: CN=d4e52264e1a10ae7121682cd6f88ec4863124539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:0b:ef:bd:b3:ea:41:22:73:2a:e8:35:20:
20:f7:17:7b:1b:dd:95:8b:1d:1e:11:8b:e1:4d:91:
a6:5d:8a:75:fd:2a:c1:58:ab:b0:45:c9:be:b7:e9:
fe:bf:b3:38:1f:8c:d8:42:2c:78:53:2c:d5:c3:c9:
6f:79:03:dd:c8:8b:b3:a4:79:5a:56:a0:74:91:93:
45:f0:64:2c:91:32:4a:59:c8:08:20:06:d9:5f:56:
19:53:04:a7:15:8c:a2:8c:ff:51:db:47:44:b7:bb:
22:1d:19:2b:6b:a2:07:ab:e1:28:1c:16:da:35:3d:
3e:0c:26:4a:43:ce:bc:21:53:de:d6:2e:2a:30:df:
20:01:99:d0:ab:89:e4:35:4f:de:19:7e:b6:bf:39:
b7:8a:62:5e:cd:bb:0d:39:d1:c3:de:c6:f4:10:b1:
dd:e7:26:d8:84:23:1b:8c:24:91:10:70:23:4b:2d:
b7:70:79:4f:a7:8d:5f:27:3a:b3:8b:41:3d:bc:58:
71:98:89:1c:45:00:17:16:63:d2:3c:ad:2d:ca:b4:
9f:8a:e7:42:ed:81:f9:7e:43:6a:44:33:4f:f3:ed:
b8:b5:64:a6:56:cd:74:96:ac:3d:ed:a6:0d:2b:b5:
35:40:66:8f:37:c3:72:42:8a:70:bf:f3:55:c6:1a:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E5:22:64:E1:A1:0A:E7:12:16:82:CD:6F:88:EC:48:63:12:45:39
X509v3 Authority Key Identifier:
keyid:14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6d:e9:e3:6b:11:b7:d0:be:bf:c0:43:34:5a:ea:a2:d9:34:
68:b9:ed:6a:4a:e4:33:8d:c4:b4:18:8d:a6:a2:07:6d:1f:ee:
68:e4:32:21:ee:5d:41:de:bf:8a:5b:f2:75:5b:8f:3c:b7:96:
61:d0:f6:28:39:3e:75:6b:66:c1:62:bb:7b:39:83:89:20:ed:
64:f7:34:39:6d:d5:7a:1a:01:4b:9c:da:eb:f6:e5:9c:1e:48:
1f:96:83:eb:4f:8b:fc:7d:94:8f:38:84:51:ca:18:ee:d2:58:
cf:6e:ce:40:d4:d0:5d:43:c3:56:35:c3:c4:f0:75:79:8c:51:
a3:d3:f2:a9:d7:aa:c2:b9:37:82:36:fb:9e:c4:33:cd:ac:59:
31:ab:1f:85:06:bf:5b:f8:5a:6b:70:f1:c7:eb:4a:0f:e3:69:
f1:ed:d7:15:25:b6:87:0f:94:11:30:f7:f9:92:89:4f:ba:7a:
1e:1c:fd:76:52:f8:d1:df:0b:31:74:77:6d:cd:29:f1:7e:5c:
94:0d:38:77:9e:cb:97:48:51:0c:4d:71:01:86:8e:cd:29:de:
71:e6:35:b8:39:e2:08:d2:e0:21:92:d8:50:ae:3a:eb:2c:f1:
df:a9:93:28:c5:7f:3b:51:ad:be:b7:11:58:ae:3d:99:5e:b8:
f8:1d:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:26 2025 by rpki-client