Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: GPUTzdInIKs5MUR8LCGjFCspZVXgUOftWtbj8QnBEtM=
Subject key identifier: BD:10:5E:60:18:A6:6C:B1:13:5A:09:33:9D:6B:4F:59:6E:96:60:54
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 0199239F418AEA423737EC1DD9BA28132BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:03 +0000
Manifest this update: Sun 07 Sep 2025 10:01:03 +0000
Manifest next update: Mon 08 Sep 2025 10:01:03 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: 2rq2r2u6Vv5m3sNYm8bh+g7c9zB1a6e+BWkwOWFUsrk=)
2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:41:8a:ea:42:37:37:ec:1d:d9:ba:28:13:2b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Sep 7 10:01:03 2025 GMT
Not After : Sep 8 10:01:03 2025 GMT
Subject: CN=bd105e6018a66cb1135a09339d6b4f596e966054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:0d:ad:b6:14:b5:53:44:83:50:98:3c:aa:
2a:27:9d:d1:e6:b0:d7:d0:71:5c:c0:73:6b:2e:c1:
65:1f:c8:cc:65:53:46:71:6c:87:7a:10:f7:ff:d1:
1f:2e:68:1f:3e:02:d5:f3:a8:83:0f:43:b2:ce:fc:
5d:44:5a:f3:0a:cd:77:62:39:a9:6a:f6:75:69:d3:
a1:14:e5:de:29:e6:7e:7a:b2:32:68:22:4e:48:64:
70:21:b3:4d:75:cb:aa:62:33:d8:c3:98:1e:5d:8c:
31:ad:e0:51:0d:eb:8d:3d:bd:91:22:f1:b7:8b:46:
a6:80:5a:b2:bb:65:bd:2b:64:ab:92:ea:57:dc:b4:
d7:a0:c6:ec:d7:37:fb:6b:32:75:26:51:77:0c:99:
e7:7b:43:73:b4:a2:d2:e6:80:66:10:79:cf:12:28:
74:c1:66:33:2f:8c:17:c2:f5:6d:85:b9:9f:c8:9e:
7e:6c:57:57:9b:fd:03:90:dc:73:a3:ce:e7:33:cc:
0b:74:d3:d3:a9:0b:08:33:ac:a7:72:18:a4:8e:dc:
3a:cd:1a:79:04:74:04:de:d1:98:16:74:d1:44:41:
79:aa:bd:46:4f:7c:c1:52:56:af:08:72:e0:13:0e:
40:a5:36:f8:0d:43:b3:86:d9:a7:98:00:c5:cd:b2:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:5E:60:18:A6:6C:B1:13:5A:09:33:9D:6B:4F:59:6E:96:60:54
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1a:50:57:df:68:47:78:a0:03:b0:a6:f0:a8:75:3f:2e:f4:
49:28:21:31:3a:a3:4f:35:ca:06:79:43:52:74:c1:e1:ab:ca:
b5:1e:48:25:0e:79:5a:c6:7f:d6:36:60:d1:95:91:6c:d8:0b:
ab:8d:f5:1e:5d:3a:42:85:04:d2:c4:aa:2e:f7:df:d4:85:da:
20:2b:f7:61:7a:c9:70:db:27:25:16:19:c5:25:ec:b5:a6:9f:
f4:71:81:9c:3e:3e:01:9e:a9:b5:0b:13:bd:c3:ba:ae:b0:13:
6e:72:d9:f6:71:ed:de:93:6b:7c:31:5a:a1:67:a5:26:fe:fb:
9d:d8:c8:b3:7f:cf:a1:64:5d:15:3b:d3:46:96:19:2a:6f:a2:
d0:1d:b3:43:ce:b7:b0:1a:fd:ad:2d:d8:c7:49:25:0d:15:71:
c4:39:e0:66:59:44:25:91:27:e3:06:b2:bf:82:61:bc:fa:26:
4c:04:25:92:5f:08:2d:62:8c:23:e5:55:fb:b4:bd:10:88:56:
21:f6:d1:55:58:e5:af:22:bf:80:b3:de:45:5a:c2:b7:06:30:
58:ef:07:44:f9:16:39:51:69:e5:37:e8:56:96:6b:0e:4c:cc:
f6:14:7f:5c:51:48:1f:30:3f:5c:d7:ae:ab:2b:ea:99:50:cb:
dd:e7:62:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:56 2025 by rpki-client