Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: 8EBHTIlacDR0G892iNTiYuL+ZHtD25Gvzy5P/kNop8Q=
Subject key identifier: 84:2C:D5:06:8C:20:3D:54:E2:62:60:C5:80:A2:E6:9C:43:98:F5:85
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019922FAE1A9916116F1BBAE5E63EDE8615E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: 33
Signing time: Sun 07 Sep 2025 07:01:31 +0000
Manifest this update: Sun 07 Sep 2025 07:01:31 +0000
Manifest next update: Mon 08 Sep 2025 07:01:31 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: k5UHi/FF3pr6wjirnqjC3zyXjUp+K7fT6W00+DueAUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e1:a9:91:61:16:f1:bb:ae:5e:63:ed:e8:61:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Sep 7 07:01:31 2025 GMT
Not After : Sep 8 07:01:31 2025 GMT
Subject: CN=842cd5068c203d54e26260c580a2e69c4398f585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:40:92:d8:d3:4f:4d:23:3f:40:0b:38:bc:
6b:a1:85:65:45:38:2d:f0:89:f4:32:5b:e4:30:c2:
14:20:72:2f:84:3f:90:25:58:55:9b:ff:7a:b3:be:
aa:4f:e9:cc:9b:65:7c:00:cb:dd:ab:ed:11:8b:60:
83:4a:4b:1d:30:4b:56:23:6d:7a:13:f5:50:69:01:
1c:e0:19:c7:dd:a7:34:88:b9:99:8b:84:e0:7b:f4:
cb:a8:07:37:e2:1b:ee:ac:1b:95:3e:3f:ac:33:83:
ab:ee:22:e4:5b:16:eb:05:f5:b0:c0:98:80:46:d2:
fc:85:fe:8c:f0:67:b2:8d:00:c1:50:f7:c7:53:8a:
a7:30:64:89:5c:f7:41:a5:b3:a3:0f:21:ea:78:3a:
2e:76:3f:2e:07:fb:04:9d:3c:ac:3b:04:bc:09:cb:
d6:60:1c:fe:06:a3:ef:f3:f1:5e:91:a0:66:90:f8:
20:d7:4e:b1:7e:da:b8:a0:c6:f8:16:1c:12:38:f1:
67:56:63:6b:93:cb:8b:ce:13:cd:8a:e4:8d:9b:a3:
7c:08:fe:93:7b:bb:36:6e:1e:7d:b0:69:3b:3e:67:
e8:45:1d:24:57:f4:08:43:99:2c:11:ed:9c:a8:66:
8a:8e:f0:e4:b5:ae:e6:69:08:7e:19:db:05:ac:60:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:D5:06:8C:20:3D:54:E2:62:60:C5:80:A2:E6:9C:43:98:F5:85
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d3:18:e1:51:dc:74:97:f0:87:d6:56:65:be:ac:bb:73:a3:
9e:8e:c9:6a:ad:bb:e1:e9:61:6b:7e:38:ee:ac:e7:c8:23:bb:
ca:9e:1a:9f:4c:f4:91:0a:c4:6a:90:27:66:8d:31:1b:58:60:
0a:da:f2:91:56:ae:da:bc:c6:97:d8:3a:46:6f:92:8b:e2:b8:
7b:57:71:5c:80:34:df:8f:db:9d:65:62:a6:8d:6a:f8:01:0a:
ad:29:09:0d:ba:74:4f:34:42:ca:c5:1c:a2:40:53:29:da:8a:
0e:89:e7:e8:47:41:1d:d1:99:1a:bd:5a:b8:46:78:f3:98:b1:
7e:48:9e:ec:80:00:49:ba:01:ba:83:d9:31:15:31:d5:8e:63:
b2:7d:5e:7c:ba:e4:2f:8b:bd:90:bf:3a:f7:dd:14:2f:c7:9d:
0d:4d:80:06:8c:34:88:ff:1b:ca:06:28:90:ed:77:e7:41:19:
a6:95:80:1a:b6:4a:c7:05:69:9d:18:db:4e:ff:fe:96:a2:f0:
cc:70:8d:28:2f:e4:55:51:35:a9:6a:ef:41:02:f8:4e:f3:46:
9a:50:43:88:87:c8:19:5e:e1:09:6f:fa:98:4b:cd:f0:2a:c6:
33:0e:ab:c7:d8:22:af:84:21:20:5e:46:1e:fd:28:9c:54:ba:
a4:40:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:43 2025 by rpki-client