Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: TK8d1GRI7YI92wTb03RU1h4h86lFVTiukTEKIRiIphU=
Subject key identifier: D4:EF:BE:5B:92:72:35:32:D3:E0:59:EF:98:DB:93:0E:82:26:B7:78
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 0199375C9A16B67A713DC0FD5B078A0AB0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 11C1
Signing time: Thu 11 Sep 2025 06:00:39 +0000
Manifest this update: Thu 11 Sep 2025 06:00:39 +0000
Manifest next update: Fri 12 Sep 2025 06:00:39 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: cya9ToFXq6RY6gB/947c6tVPupUS7cpYUCu6mfwS4rI=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:9a:16:b6:7a:71:3d:c0:fd:5b:07:8a:0a:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Sep 11 06:00:39 2025 GMT
Not After : Sep 12 06:00:39 2025 GMT
Subject: CN=d4efbe5b92723532d3e059ef98db930e8226b778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:8b:51:e0:a4:49:97:d1:57:de:49:e8:6e:
dd:55:1f:a0:80:2b:43:5b:3b:a8:73:0b:a5:60:38:
3c:6e:60:15:de:3b:60:0f:66:15:a1:e7:51:69:fc:
fb:31:46:aa:8d:a9:eb:26:5a:f0:4d:bf:e4:ca:28:
07:e9:2f:98:2c:f6:98:54:40:d5:0e:f0:a7:cc:8f:
61:fa:69:86:3d:29:a5:76:e8:14:b8:b5:40:be:e1:
90:62:07:14:b2:0c:34:78:a8:31:9c:02:32:5f:22:
97:55:71:21:f3:64:9d:fc:69:f4:6b:4c:78:7e:2f:
d0:79:5a:1c:6b:70:f1:cc:33:99:cf:81:e6:26:5e:
36:30:b1:e0:fc:12:7f:31:71:22:fc:f4:dc:36:4a:
d1:1c:82:c2:07:f8:47:e1:6f:c1:9a:22:a5:3d:d2:
be:41:45:63:fa:0a:b2:16:df:b6:57:1b:b2:55:f9:
48:93:ab:c5:62:b5:d1:e2:6c:53:29:66:0e:02:da:
03:fa:c4:73:56:c7:60:22:c0:86:a8:ab:63:a5:c1:
ab:94:cb:dd:27:ec:ee:13:d6:12:66:db:52:66:6d:
ee:e5:2f:bf:f0:d7:f7:a6:0f:f7:3f:eb:1f:64:9d:
2b:0b:4e:77:02:79:8a:09:3d:73:b1:da:ae:2a:ce:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EF:BE:5B:92:72:35:32:D3:E0:59:EF:98:DB:93:0E:82:26:B7:78
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:c5:04:c7:fb:74:cd:7d:a4:d2:9f:20:23:82:31:73:fd:
19:06:0a:fd:95:51:e6:be:3d:e1:21:6c:85:0b:7e:e9:ef:45:
11:c7:c3:e4:08:e8:37:a6:e5:82:58:70:88:a9:ed:05:58:01:
0e:d2:8c:f1:70:53:83:1c:d5:c9:bc:13:92:5a:15:11:6b:56:
b5:f6:68:2e:42:21:9c:08:a9:a6:22:d3:ee:e9:ac:7c:65:97:
ef:5d:06:c6:26:f4:70:c0:ee:b6:6c:4f:f5:83:5e:87:ae:e9:
2f:24:22:f4:bf:0e:23:e7:23:2c:33:74:bf:aa:c1:09:3a:65:
9f:3d:e0:98:d0:38:39:06:e5:62:58:b7:e7:36:12:64:96:57:
3b:5f:2e:63:67:4c:ae:17:95:69:d5:1b:b7:6c:b8:0b:73:be:
52:8f:12:c4:66:e0:72:81:6d:bf:f2:c1:b5:1a:b0:85:1e:f0:
50:93:2c:44:9c:16:01:1b:c4:65:3f:e5:af:d6:1d:61:66:39:
72:2a:f4:8d:1b:7e:30:42:db:62:28:df:a6:4e:80:32:fb:df:
4d:7b:c8:28:d4:1f:f0:e1:56:d7:d4:2c:99:a5:96:47:58:61:
bb:a2:46:73:6c:71:73:30:0b:c6:0f:2c:e3:c5:18:fe:9d:65:
49:51:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:04:23 2025 by rpki-client