
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File: Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier: 37flIXm6J7oVYYUeTVtbbtXXnJGDEB10/yMxPn519Mw=
Subject key identifier: 54:8F:2C:D2:DC:2C:2D:57:D2:9D:CB:5D:E5:94:89:76:57:22:62:29
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer: /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial: 019923A0E4992C3F0B50B3017139373BD45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number: 05E7
Signing time: Sun 07 Sep 2025 10:02:50 +0000
Manifest this update: Sun 07 Sep 2025 10:02:50 +0000
Manifest next update: Mon 08 Sep 2025 10:02:50 +0000
Files and hashes: 1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: E0is1Trh8JGoE/tvBrhqfLATg3wyq3YYnqSkQLhPwH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e4:99:2c:3f:0b:50:b3:01:71:39:37:3b:d4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Validity
Not Before: Sep 7 10:02:50 2025 GMT
Not After : Sep 8 10:02:50 2025 GMT
Subject: CN=548f2cd2dc2c2d57d29dcb5de594897657226229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:96:b0:93:00:f6:a7:02:e3:e5:79:87:62:
e5:17:d2:81:08:c5:2b:a2:ff:e5:66:7f:18:bc:8a:
77:ed:b2:25:1e:b4:10:71:c9:aa:a6:1c:4e:7f:b1:
9e:d3:35:51:ca:d7:37:40:e9:95:e1:a5:59:1a:ff:
93:23:da:e7:b6:1e:13:c4:eb:36:fd:96:14:b5:b0:
0b:92:90:8c:1f:25:82:3c:f2:bc:6f:56:4f:67:98:
a5:a0:f4:8a:f5:c0:a8:2c:43:68:67:ed:bb:51:31:
26:7f:0f:10:9a:49:e2:71:44:81:3c:20:cb:d8:47:
94:8b:4c:ca:ad:55:b3:b2:fc:e4:3f:82:0f:7f:22:
dd:11:3e:51:41:b1:b1:fe:bd:bd:ae:cb:0e:a0:20:
9b:c8:e4:0e:50:b1:91:b1:a7:aa:3e:d2:85:df:cc:
ab:8e:23:05:53:bb:7a:38:59:1c:1c:de:87:f0:8e:
94:76:b0:fd:c1:e1:57:97:41:30:c3:25:2f:ff:0a:
24:18:21:77:fd:fe:60:73:b4:a7:59:cf:22:51:c7:
7d:82:71:b8:8e:1b:18:4a:a1:83:cf:57:4b:b3:dd:
10:0d:71:d2:32:fc:b4:b8:44:48:32:46:3c:41:53:
b3:fd:05:99:5d:92:ae:88:d1:d5:3b:4f:00:39:4c:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:2C:D2:DC:2C:2D:57:D2:9D:CB:5D:E5:94:89:76:57:22:62:29
X509v3 Authority Key Identifier:
keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:17:81:09:69:4d:a1:23:f4:c2:e1:be:e6:6b:27:d7:62:88:
fe:bb:d1:4e:5d:54:31:1a:d5:2e:5d:66:84:32:de:bf:c7:68:
05:b1:40:e5:8e:af:5a:53:81:25:b8:43:ce:60:df:b9:ad:e5:
f6:b3:93:6f:db:03:4d:33:b9:3c:8f:f0:2f:08:57:0a:97:14:
1d:43:4c:78:1f:4b:51:72:8e:a9:74:50:2d:81:26:a6:7e:56:
19:73:a0:12:53:b8:4a:f3:76:f1:24:27:b8:5c:f5:50:53:ec:
4a:4b:3c:da:8c:24:b7:3a:62:a6:f8:04:7d:4b:72:01:87:4a:
c4:5f:1e:9e:61:d6:14:b7:89:64:5c:56:88:43:29:ae:7b:01:
31:d1:66:bb:1a:3b:ae:6d:0d:d1:e5:0f:93:b5:37:b9:00:13:
48:4a:17:99:ed:2d:1e:9c:cc:6e:60:40:1c:8c:d8:30:ba:59:
e0:b4:53:80:2f:4e:17:c4:05:98:f2:f8:9c:2a:9c:4d:d1:08:
fc:b0:56:1c:dc:dd:07:60:05:2f:87:b3:34:87:78:43:80:38:
08:d0:80:57:fe:cc:20:93:fc:aa:45:f8:9b:13:fd:90:95:f0:
30:24:cd:e1:ad:9e:80:77:51:3d:b2:18:2f:7a:6a:08:f8:b4:
dd:d4:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:03 2025 by rpki-client