Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier: RzlgeXaVtRxi5Q2M23tokRluMFk9FdlXvEfqIwNhhNc=
Subject key identifier: 59:DB:32:89:38:1D:AE:DD:46:8A:88:3C:55:2C:5B:8A:13:21:41:15
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial: 0199240D385BB5DAE973090F37AF23382FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 12:01:10 +0000
Manifest this update: Sun 07 Sep 2025 12:01:10 +0000
Manifest next update: Mon 08 Sep 2025 12:01:10 +0000
Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: DQLh3uprmLSOR9OgDSYq1J1rVixF/mIf/58TMPm/Z/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:38:5b:b5:da:e9:73:09:0f:37:af:23:38:2f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
Validity
Not Before: Sep 7 12:01:10 2025 GMT
Not After : Sep 8 12:01:10 2025 GMT
Subject: CN=59db3289381daedd468a883c552c5b8a13214115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d7:a4:be:3e:53:87:27:f3:50:3d:94:6d:28:
98:d3:2e:41:42:14:b9:f8:63:52:80:6d:57:51:fc:
0c:5d:d8:43:91:69:5c:9c:b0:3f:38:06:37:d6:88:
75:57:7d:72:f3:9a:23:6c:de:66:fd:39:22:d4:ea:
7f:c2:5f:6c:24:a6:e6:ff:ad:82:88:58:dd:cd:54:
53:0c:e5:96:28:7d:e7:0e:82:8f:43:44:8c:d4:b8:
4a:c0:c3:70:5a:4c:48:ee:2d:a4:c6:26:73:d3:97:
61:1a:6e:84:91:9a:9d:ae:ca:92:83:f9:b6:78:9b:
9e:71:24:12:fe:b6:df:09:2f:9c:03:f1:6f:95:52:
d6:3f:fb:70:1b:ed:fc:ff:d0:db:06:1a:4e:99:13:
64:d9:c2:04:68:f3:32:a8:bb:d5:82:f2:d6:a9:c8:
d8:03:eb:78:a0:14:0a:03:83:c5:4a:b2:9b:ce:76:
cb:2a:17:68:9d:ad:9c:98:83:01:d2:32:09:b6:c3:
fb:e3:9c:61:f0:a5:71:94:6a:77:00:77:c9:c7:aa:
5e:43:58:6a:04:de:c0:7d:28:ce:0f:aa:92:9e:b2:
38:ab:b0:4b:32:08:55:62:f9:76:94:8e:e9:3b:18:
0f:9a:f1:49:f0:3c:22:0a:2c:c0:bc:f7:72:84:68:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:32:89:38:1D:AE:DD:46:8A:88:3C:55:2C:5B:8A:13:21:41:15
X509v3 Authority Key Identifier:
keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:57:a3:2c:0b:90:37:31:f1:3f:be:75:fd:fb:9a:f1:69:79:
ff:07:13:6c:55:97:84:7a:3c:f5:29:ba:20:03:7e:c5:0a:83:
e2:c2:29:9e:b6:43:cc:13:aa:4b:b7:3d:e1:e1:27:e3:5d:9c:
7a:6c:3a:da:86:13:3a:73:c9:fb:51:53:b7:e7:d2:0f:39:62:
aa:cf:aa:f9:14:95:fc:59:f6:75:6d:e9:3b:67:0f:8c:08:06:
88:61:97:f1:bc:db:7c:1d:2b:71:f5:47:c9:ea:0c:2b:69:5a:
0c:6f:6d:c1:9c:6b:59:16:8e:ff:30:c6:5b:fe:61:6f:24:1a:
ab:9d:44:f6:60:7a:ca:76:19:08:b3:fd:cf:b6:1f:6c:dc:47:
76:4d:98:77:1f:d4:00:4a:49:73:04:cb:fa:de:15:40:0a:30:
34:3c:8d:13:89:d6:b9:ed:1f:1e:d1:d7:e8:81:71:b7:ec:7e:
0a:23:83:00:c7:d8:05:49:fe:b1:e9:86:9d:67:96:b5:21:7f:
e6:00:e5:06:68:a5:50:e8:c3:c0:f9:6f:08:ca:62:82:27:ab:
dd:eb:be:d8:3d:fd:25:6a:22:b9:72:70:5a:b8:73:0e:05:86:
5b:3b:d0:f9:ab:2a:c2:23:39:70:47:a5:5a:87:80:63:4d:4d:
dd:62:a8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:18 2025 by rpki-client