Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: tO4RA6shR064E8MP8lKU4DjDoN1iiRvvgmpRNuI6vIA=
Subject key identifier: B8:E3:54:1F:61:36:17:3E:CC:AE:C1:02:2F:8A:DC:3B:C5:CE:84:9C
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 01992EC792052E65533E1CBBDE5138E2A9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 14CD
Signing time: Tue 09 Sep 2025 14:00:54 +0000
Manifest this update: Tue 09 Sep 2025 14:00:54 +0000
Manifest next update: Wed 10 Sep 2025 14:00:54 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: QaRBr8xRRChk1QZJwoDhY2fyquQ+R89PGNj+m9a3H90=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:92:05:2e:65:53:3e:1c:bb:de:51:38:e2:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Sep 9 14:00:54 2025 GMT
Not After : Sep 10 14:00:54 2025 GMT
Subject: CN=b8e3541f6136173eccaec1022f8adc3bc5ce849c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:23:5e:1f:3f:08:59:cd:29:ee:22:b2:86:
d4:cc:f0:fc:d1:58:9c:78:38:3d:31:c6:10:5e:44:
e3:f8:48:33:1a:c6:80:d6:d3:23:1d:d1:88:f1:74:
49:4d:c4:97:ef:3d:fe:bc:e9:28:59:28:8a:3d:5d:
cd:31:31:25:1b:18:ca:38:4f:a4:de:c9:28:fe:e2:
82:4e:e8:ec:47:a4:c6:26:18:05:7a:c7:8c:e7:33:
9e:21:5e:3d:b0:55:5f:7c:59:aa:69:fb:dc:05:ff:
61:32:0f:68:37:10:92:d6:33:97:e8:96:1f:7e:8b:
ff:e1:d0:4a:e9:13:8d:e2:ae:97:36:37:a0:bb:dd:
db:63:97:f2:28:85:9e:04:ea:b6:c4:12:91:76:fe:
f8:af:f3:ff:8c:c4:98:d9:d0:71:55:53:54:f9:9a:
70:5b:40:f9:60:17:31:10:41:28:11:70:19:d9:32:
58:81:62:1a:65:28:c5:1a:43:2a:32:64:83:e3:9a:
94:89:fb:bd:9e:4e:b9:fa:c6:13:f3:ac:ef:65:52:
bd:bf:4e:52:47:1a:c3:a8:0b:bb:90:05:77:8a:f3:
4c:5c:36:0f:d5:8b:1d:08:93:d8:0b:72:cd:3d:ae:
e3:e1:a9:8a:22:2a:7e:f7:64:32:52:3a:9e:fc:56:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:54:1F:61:36:17:3E:CC:AE:C1:02:2F:8A:DC:3B:C5:CE:84:9C
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fe:33:c6:db:65:6e:0b:51:49:26:53:05:ca:0f:65:45:75:
14:53:cd:43:cd:60:f4:86:e9:6b:dd:31:dd:4b:b1:16:2d:d6:
a6:db:86:97:58:d4:47:3b:d8:74:84:ee:19:96:59:dd:87:4f:
4a:4d:18:b5:5f:ee:70:ed:3c:17:e1:bc:5f:4f:74:b6:52:a6:
5a:ff:58:61:60:d9:62:b7:e2:2c:7d:0f:78:4a:ae:dd:2e:e5:
7a:5d:7f:6f:4c:ed:3a:61:03:a5:a5:c3:6e:d1:04:ce:98:17:
7b:cf:c9:6f:42:d1:21:b3:00:ff:ec:23:dc:9d:75:2f:cd:08:
e6:be:ab:0b:f6:80:a7:5f:f0:15:d3:68:03:e3:27:f4:03:ba:
59:08:da:68:03:81:18:0e:95:36:01:df:e0:db:4d:81:05:3f:
46:19:a3:c5:f9:09:f3:d2:44:a0:de:81:af:88:79:8f:bb:7e:
6a:45:da:c5:b2:f3:ac:50:68:4c:ae:07:44:04:52:06:e8:de:
f4:7f:93:63:ad:7f:60:69:02:6f:32:2d:35:04:46:df:13:24:
1c:94:05:e7:e7:84:1f:c5:47:5d:ac:e5:b8:40:43:6d:ef:23:
9a:cf:64:b5:f7:fb:52:ac:93:cd:e9:85:4a:3f:56:f5:28:f1:
0b:d6:28:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:54:05 2025 by rpki-client