Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: KSFVOAlrFPEti6z+pcCdwQzt6Zt2EJz3R2+jz/XMREM=
Subject key identifier: 32:0D:04:91:77:DA:EA:79:BB:12:8A:F5:CD:DA:6F:73:57:D6:F2:E8
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 01984965AD1C540E613E9D4912F616AFC6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:00:56 +0000
Manifest this update: Sun 27 Jul 2025 01:00:56 +0000
Manifest next update: Mon 28 Jul 2025 01:00:56 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: Ud0pIQBU88KojCWz7Xed8bqG8eKUYslSmSxeoeu0zGY=)
2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=)
3: nGeZMPiJHuxTp5r7-LPyVgsD0PU.roa (hash: l7oDkA0XjfZYSaNEYHxPZ+fCmO92nea2c0B83OBtIh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ad:1c:54:0e:61:3e:9d:49:12:f6:16:af:c6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Jul 27 01:00:56 2025 GMT
Not After : Jul 28 01:00:56 2025 GMT
Subject: CN=320d049177daea79bb128af5cdda6f7357d6f2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:8a:57:9d:21:28:e4:fa:df:3d:ce:24:0d:
48:80:06:ff:02:dc:ab:8e:cf:5b:81:56:68:c5:e3:
d1:bf:66:85:f1:0d:00:9c:ba:3b:9e:c8:cd:50:07:
7c:d6:95:8b:d2:8c:14:aa:27:55:45:0c:9e:1a:40:
6d:f2:1c:7d:72:21:53:e6:c5:55:5e:20:ad:35:e2:
de:31:88:0a:23:e8:75:0c:d7:c4:a7:6f:e2:e4:39:
c5:bc:f6:be:30:c3:8d:27:54:8a:0a:b4:4d:3f:d5:
b5:77:56:bd:ec:ff:ed:dd:32:b6:f9:54:4d:41:f3:
63:d1:24:23:d4:bf:3a:4d:25:96:b7:ce:31:c3:68:
c7:2e:5f:95:f3:46:88:d5:e1:c4:24:e4:9b:a1:d9:
11:4e:7c:68:d0:6a:5a:35:d4:67:09:ea:99:a4:b2:
90:29:1d:91:9c:14:43:e2:af:50:c8:6c:c9:81:07:
7f:69:e4:b0:63:72:c9:ee:c0:d7:31:3b:e2:d6:f0:
bb:80:ac:5b:a4:3c:7c:85:ee:c1:51:af:b3:d3:b2:
ff:bd:d4:e5:b9:2d:4f:93:f9:ed:02:e8:4e:2a:a4:
4b:43:51:19:dc:a7:6c:3a:f0:1c:cc:bf:d7:8b:0a:
32:ca:94:9b:1a:bd:6a:2e:6f:da:33:11:e6:9b:91:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:04:91:77:DA:EA:79:BB:12:8A:F5:CD:DA:6F:73:57:D6:F2:E8
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:78:d5:0b:90:ee:af:fb:17:a3:bd:0d:27:87:9d:00:ba:32:
dc:9d:20:5a:da:75:a1:52:71:b9:61:7d:23:5c:74:fd:01:b9:
4d:30:54:57:03:1d:68:d6:58:07:cf:41:6c:31:99:c6:9c:ed:
c3:cb:d2:42:db:91:8a:08:c7:b4:b1:c5:bf:7d:5a:a9:10:73:
b8:d0:e3:2f:9e:80:9b:36:22:23:98:54:64:db:b8:49:b7:5f:
87:4a:30:27:46:b7:82:51:5e:23:2b:6e:5e:d9:02:2c:c0:e6:
9e:f9:2e:19:9a:a1:f3:ee:90:f9:ab:e7:d2:7c:43:a7:88:ce:
a0:d4:af:9c:13:82:34:f3:60:f2:3d:cf:d0:36:31:4b:52:d4:
c2:35:f0:95:bb:26:32:a4:dd:0c:9e:e9:08:12:91:2d:ef:f4:
16:2c:7b:42:ae:da:69:ba:1a:e9:34:65:e8:5e:fc:06:6f:46:
92:f2:32:2e:51:fd:c9:6e:9d:3f:8e:69:7f:a9:73:0c:fb:b5:
ca:c4:cf:31:a4:64:93:8d:fe:e7:69:e8:64:3f:22:43:e3:5f:
82:c8:e6:05:91:8a:3e:e2:a9:4e:25:a0:aa:6e:8e:85:af:70:
72:71:f2:58:4f:ee:e5:c4:a6:93:d5:3f:c2:bb:dc:e1:bd:a4:
07:51:f6:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZa0cVA5hPp1JEvYWr8a+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTNkZTRiN2U2NmM4N2NmOWMzM2UwMDhhMDJkMWE0NmUz
ZmM3NjYwHhcNMjUwNzI3MDEwMDU2WhcNMjUwNzI4MDEwMDU2WjAzMTEwLwYDVQQD
EygzMjBkMDQ5MTc3ZGFlYTc5YmIxMjhhZjVjZGRhNmY3MzU3ZDZmMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GCKV50hKOT63z3OJA1IgAb/Atyr
js9bgVZoxePRv2aF8Q0AnLo7nsjNUAd81pWL0owUqidVRQyeGkBt8hx9ciFT5sVV
XiCtNeLeMYgKI+h1DNfEp2/i5DnFvPa+MMONJ1SKCrRNP9W1d1a97P/t3TK2+VRN
QfNj0SQj1L86TSWWt84xw2jHLl+V80aI1eHEJOSbodkRTnxo0GpaNdRnCeqZpLKQ
KR2RnBRD4q9QyGzJgQd/aeSwY3LJ7sDXMTvi1vC7gKxbpDx8he7BUa+z07L/vdTl
uS1Pk/ntAuhOKqRLQ1EZ3KdsOvAczL/XiwoyypSbGr1qLm/aMxHmm5EjyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDINBJF32up5uxKK9c3ab3NX1vLoMB8GA1UdIwQY
MBaAFBSj3kt+Zsh8+cM+AIoC0aRuP8dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQt
NWRiYjM2ZjdhMDMzLzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQtNWRiYjM2ZjdhMDMz
LzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHjVC5Du
r/sXo70NJ4edALoy3J0gWtp1oVJxuWF9I1x0/QG5TTBUVwMdaNZYB89BbDGZxpzt
w8vSQtuRigjHtLHFv31aqRBzuNDjL56AmzYiI5hUZNu4Sbdfh0owJ0a3glFeIytu
XtkCLMDmnvkuGZqh8+6Q+avn0nxDp4jOoNSvnBOCNPNg8j3P0DYxS1LUwjXwlbsm
MqTdDJ7pCBKRLe/0Fix7Qq7aaboa6TRl6F78Bm9GkvIyLlH9yW6dP45pf6lzDPu1
ysTPMaRkk43+52noZD8iQ+NfgsjmBZGKPuKpTiWgqm6Oha9wcnHyWE/u5cSmk9U/
wrvc4b2kB1H2ng==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:42:52 2025 by rpki-client