Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
File: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft (raw, json)
Hash identifier: lMpud5J/wzCtTSwkbOGQNoCihAurfAQfUAI6meOkUHw=
Subject key identifier: BA:07:67:A7:50:ED:E4:68:D5:6B:73:43:6D:97:12:27:3C:BC:FD:8F
Authority key identifier: 14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
Certificate issuer: /CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Certificate serial: 0199326DB609C04F2095C7187170A836F430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
Manifest number: 1290
Signing time: Wed 10 Sep 2025 07:01:14 +0000
Manifest this update: Wed 10 Sep 2025 07:01:14 +0000
Manifest next update: Thu 11 Sep 2025 07:01:14 +0000
Files and hashes: 1: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl (hash: sInqCqteWPy7kfhh1KSxmHsp9YpFZedZDG9z4GFq2c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:b6:09:c0:4f:20:95:c7:18:71:70:a8:36:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Validity
Not Before: Sep 10 07:01:14 2025 GMT
Not After : Sep 11 07:01:14 2025 GMT
Subject: CN=ba0767a750ede468d56b73436d9712273cbcfd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:cf:41:2b:3e:d1:f4:49:98:cb:33:aa:50:
82:2b:a2:53:b1:42:8e:cd:db:7b:af:e1:76:d4:41:
19:2f:db:05:e7:01:c3:44:39:79:76:dd:59:4a:e6:
2a:98:9d:87:21:b2:f0:1e:9c:47:61:71:92:13:d7:
00:41:7d:1e:a4:0c:b4:f1:5e:74:bc:c3:f6:bb:66:
02:e7:93:56:77:38:a1:7b:ab:26:b0:93:70:b3:06:
6d:c7:83:a0:41:4c:45:d7:99:31:34:a3:53:05:d7:
13:44:89:8a:97:9c:ac:43:b0:66:30:da:9e:a7:6e:
e4:e2:4f:0a:d5:a1:09:38:18:15:49:19:c3:37:a1:
e9:02:b0:91:08:41:cf:5a:5d:89:5f:1e:4d:d5:5e:
43:7e:2a:c1:f5:43:bb:59:0b:c1:5a:2b:a2:a3:c4:
ab:1e:47:42:7a:ca:6f:f8:6a:7e:d0:ca:c0:81:d3:
d7:b5:f3:58:ee:ea:b4:62:7c:b2:ac:78:6c:5e:e8:
3d:07:5a:5e:1e:2f:44:b2:42:95:bb:23:bc:9b:25:
7d:41:b5:1c:57:5c:9e:99:9c:bc:0d:6f:f8:00:cc:
b8:12:f5:87:e8:f7:80:35:a3:c9:b3:0f:bf:23:27:
1f:5c:3c:af:7f:c2:43:41:9f:41:f2:b8:ec:39:0f:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:07:67:A7:50:ED:E4:68:D5:6B:73:43:6D:97:12:27:3C:BC:FD:8F
X509v3 Authority Key Identifier:
keyid:14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:65:9d:44:96:78:4f:6e:1a:27:8f:9e:63:a0:81:45:e2:d1:
3d:a2:b7:3a:6f:34:08:07:42:0b:a7:57:c8:7a:fd:c0:27:6c:
8b:0c:11:15:bd:6f:70:64:18:39:8b:2a:00:3f:3e:73:a0:87:
cd:32:35:be:36:50:20:3f:eb:60:12:16:22:68:b3:9e:36:10:
4c:28:30:5c:89:a4:44:63:d3:5c:1b:9b:59:1c:ff:c3:ae:00:
d2:92:b5:08:c9:07:33:9a:b5:00:15:d7:51:29:52:e4:6f:19:
4c:2f:fb:d3:f5:33:bd:9d:81:cd:36:a7:52:3a:80:bc:76:63:
af:ea:fc:28:04:95:79:1a:84:b6:dc:f8:6d:db:9c:e9:b3:39:
8c:1a:4e:20:e6:4b:e4:e9:8c:69:b3:69:81:26:0d:df:3e:e6:
8e:dc:45:42:0d:81:93:13:cd:53:47:80:b7:ed:54:4c:c1:5d:
63:dc:54:24:43:54:1a:75:99:4f:f8:fd:8b:84:0b:64:fb:86:
61:6c:c1:e5:4f:f6:60:aa:3e:f4:eb:9f:cc:60:c5:48:c1:e3:
0e:60:1c:72:7f:8a:8c:39:8d:53:8b:c6:ac:77:cc:d9:73:e6:
c4:e7:69:60:16:42:ac:03:41:61:b8:f1:ab:c3:09:15:e5:c6:
76:28:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:31:46 2025 by rpki-client