Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: BwMMAYOiiaFZGMMVsndgYXLhK/C4zMl7GKMmpdOhb/A=
Subject key identifier: 7A:62:33:08:BE:40:F0:5D:BF:86:8E:47:C8:BD:2F:77:35:77:50:AA
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 0199239EA6FE9741320DC979482455B45E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:00:23 +0000
Manifest this update: Sun 07 Sep 2025 10:00:23 +0000
Manifest next update: Mon 08 Sep 2025 10:00:23 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: v8+1OpjYAmNy4ei/hyqjOK+sLIFCiy6VpMvc4ITVjnE=)
2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:a6:fe:97:41:32:0d:c9:79:48:24:55:b4:5e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: Sep 7 10:00:23 2025 GMT
Not After : Sep 8 10:00:23 2025 GMT
Subject: CN=7a623308be40f05dbf868e47c8bd2f77357750aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:c4:99:1b:b7:31:34:18:8c:43:8c:86:09:
1b:fd:c1:cb:b7:81:7d:25:c2:2e:9f:40:22:e5:1c:
ee:9e:67:3f:d0:c3:b7:fd:3e:a7:37:4e:11:b1:4f:
b8:c0:ed:17:58:02:db:90:c8:86:22:94:c1:3e:83:
5d:c7:62:46:db:7c:03:e9:11:fa:e5:01:bf:d5:ed:
61:2a:71:8b:82:e6:5f:35:95:ac:73:03:6e:11:14:
e3:de:23:95:7c:ff:0f:b3:49:d8:9e:ac:0d:02:66:
51:0d:6f:64:02:95:2f:3c:85:83:f5:26:eb:a5:a5:
d5:73:46:31:82:bd:28:f1:6f:2a:ba:41:ec:a7:14:
72:b3:44:3e:49:2d:5a:f7:ee:ef:b5:3b:a3:e0:e6:
43:82:48:00:a8:3b:f8:18:c3:ae:b0:04:d3:f6:51:
d7:93:e5:cd:e2:ba:17:1d:5f:73:4c:6c:c0:fa:ca:
be:f1:83:30:a8:7b:cb:4a:41:3b:ed:81:0d:58:16:
d5:76:a6:a5:cb:c7:76:f3:24:2f:f3:34:37:c9:b7:
a6:05:b6:97:b4:cb:9f:8e:fd:52:c8:12:cb:00:7a:
48:2e:5a:69:c7:d5:11:df:fd:4d:ed:02:bf:63:6e:
56:0e:d0:60:03:92:38:dc:a4:aa:31:28:e5:42:0d:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:33:08:BE:40:F0:5D:BF:86:8E:47:C8:BD:2F:77:35:77:50:AA
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:23:c3:ec:f1:3f:47:94:be:c8:a8:3e:a5:13:c3:08:0c:c4:
ab:bb:62:38:0d:90:0f:fa:13:83:0a:89:9f:79:ae:1d:76:5c:
dd:e2:28:8d:f9:ec:ad:89:07:4c:06:36:06:cc:68:45:40:91:
30:9b:0d:20:a9:b8:e9:60:0c:26:a8:4e:4f:52:85:d9:69:45:
e0:f3:8d:7b:7a:eb:88:22:6d:d3:39:e0:57:5f:10:dd:bb:2a:
20:a2:01:f4:5b:4c:de:58:00:eb:4b:b7:34:ed:86:fa:06:18:
51:34:38:d1:c0:4e:45:85:3f:8b:e9:af:18:e7:74:d2:25:13:
95:67:78:0c:5d:4c:89:ea:d1:da:c7:c5:92:8e:48:31:95:6c:
92:69:5d:70:80:af:89:75:7a:8c:62:be:52:72:15:8d:67:48:
7d:04:d4:2d:92:9d:8f:ba:2b:e9:68:a9:57:45:7b:1b:44:31:
9e:d9:e1:71:30:04:f3:20:67:67:ee:57:70:38:fa:08:c6:5d:
bb:71:b0:7e:b5:0f:ab:68:1a:d4:46:01:87:0c:82:dd:df:0e:
6f:66:80:ed:50:62:aa:e0:60:de:a0:31:b5:b1:b9:45:46:e6:
73:2e:c3:a3:37:76:47:03:49:48:6e:dc:bb:e0:16:69:98:2c:
b8:0f:5a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:20 2025 by rpki-client