Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: doGSwMGYXsYWqRSeEQqHz7w0Ai1ksjQ/1dKGjRbGT0I=
Subject key identifier: 4F:0C:43:2D:B6:16:26:F3:A8:BF:80:9A:15:52:03:12:1F:52:BB:E2
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 0199228D0208C1F58B5E9084B9ADCBB1A1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 1548
Signing time: Sun 07 Sep 2025 05:01:30 +0000
Manifest this update: Sun 07 Sep 2025 05:01:30 +0000
Manifest next update: Mon 08 Sep 2025 05:01:30 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: NWfAZv1dt3YBgB7ORYmFYW+1oea9896akW7/ZuzSlG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:02:08:c1:f5:8b:5e:90:84:b9:ad:cb:b1:a1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Sep 7 05:01:30 2025 GMT
Not After : Sep 8 05:01:30 2025 GMT
Subject: CN=4f0c432db61626f3a8bf809a155203121f52bbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:ba:61:f7:6c:3b:96:23:3c:88:ef:d5:ca:
44:06:9f:c5:ab:b0:b2:4d:8b:08:c5:27:cc:a4:3a:
8e:47:97:bd:f6:de:81:81:99:81:de:93:a2:7c:ab:
bd:f2:b6:7e:c8:ef:6f:bb:33:c8:85:9c:d9:4a:a7:
d8:af:b8:aa:2e:73:a7:4b:22:e8:28:05:d7:5f:2a:
8a:72:9b:09:0d:b9:fd:7b:2b:2c:e5:e7:af:ad:a9:
96:ce:a2:76:91:f0:77:6c:89:2d:46:48:f9:79:7a:
f3:87:38:e3:ef:05:c9:e7:db:34:bc:bb:8b:3f:95:
64:f8:de:38:93:8e:e9:bb:f1:c1:ac:ec:3c:6d:28:
d2:d3:4b:db:22:7c:46:f8:21:53:d4:06:61:89:d3:
1a:2b:82:83:f4:d2:0e:9a:c8:c2:5f:ee:29:cd:72:
62:66:5d:7f:c5:66:76:10:4c:ed:b9:7d:8c:82:6d:
d3:95:31:32:61:06:10:51:86:1b:5d:1e:06:83:6d:
e9:ce:9b:24:a8:dd:85:55:33:c2:e9:13:91:ed:00:
61:1d:35:93:1f:b1:67:38:98:f0:fd:2d:5f:11:fe:
4d:ab:30:18:1c:09:85:aa:c5:c0:a1:80:fa:8b:fd:
0c:21:7f:37:3a:eb:03:b9:4f:b3:8f:c1:c0:12:29:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0C:43:2D:B6:16:26:F3:A8:BF:80:9A:15:52:03:12:1F:52:BB:E2
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3d:ac:71:46:45:d3:16:02:7e:22:98:a6:b2:04:d0:d3:4f:
e5:25:62:a5:38:2f:31:f7:2b:df:cf:dc:be:e1:fc:6f:e2:c7:
89:21:69:f6:25:68:7b:18:d2:5b:02:f3:0c:cf:5a:94:b0:9f:
32:51:90:e9:0d:f7:8a:76:b6:89:37:bb:e1:2b:43:53:22:fa:
67:5d:17:1c:f3:fa:ec:ae:4f:4f:be:c9:df:79:c3:07:31:33:
04:65:f4:5f:55:69:4e:92:3d:cc:1c:5d:ee:71:73:9d:61:f7:
51:db:fd:a5:cc:65:fc:30:2e:be:02:be:d2:48:df:81:e7:62:
35:b2:94:52:c6:3e:95:ab:91:e6:52:00:88:49:b7:00:3d:ab:
92:3f:d0:18:2f:54:6d:06:de:4d:34:75:63:f6:6e:78:47:81:
74:28:d4:3f:05:d8:2b:23:32:14:27:1b:de:f9:50:e3:78:82:
1a:d4:20:93:35:b4:ea:35:57:b6:57:62:25:0e:ad:56:41:0e:
ef:76:de:1b:92:70:ab:af:97:af:58:20:73:d7:91:04:ee:42:
63:eb:27:74:0e:e6:62:a3:53:c1:f6:d8:3c:23:8e:40:5a:8f:
a6:f1:0f:fe:36:f8:1a:7f:f2:40:22:95:bf:cc:ac:81:13:f8:
0c:35:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:46 2025 by rpki-client