Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: SmDK/Nx2FvOWROht33arNA9oZ1nBJiBNEXZN1jLR/pQ=
Subject key identifier: 14:F7:40:DC:2E:4B:25:79:0F:BE:DB:1F:37:43:89:D0:C3:3C:8E:4E
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019A225251A0A705DEE11334AF667A119D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 138A
Signing time: Sun 26 Oct 2025 21:00:11 +0000
Manifest this update: Sun 26 Oct 2025 21:00:11 +0000
Manifest next update: Mon 27 Oct 2025 21:00:11 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: ODzgtVGULrRyp2MPuTKCelWXdrwj0mixieLuawfK88g=)
3: NjP1-VxcjUYnG6zS7LVSKs7x9vY.roa (hash: SBm121KuisZ5EZTIvc68c0K3yTgGq/5rmdZ6mqu0hNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:51:a0:a7:05:de:e1:13:34:af:66:7a:11:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Oct 26 21:00:11 2025 GMT
Not After : Oct 27 21:00:11 2025 GMT
Subject: CN=14f740dc2e4b25790fbedb1f374389d0c33c8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:13:15:57:6a:7d:62:ec:60:bb:00:a3:a5:67:
7b:05:bd:08:0d:8d:a6:96:36:e7:47:fb:90:f6:ff:
4c:c9:ca:fb:ee:ef:55:f1:7c:fd:50:45:00:fe:a0:
24:0f:fb:8e:b0:55:11:a6:d6:b3:47:03:89:ed:fc:
b3:a0:bc:0e:97:72:6e:ce:b0:5c:19:68:0e:98:fb:
80:00:12:9f:22:de:49:f8:02:c3:e5:b1:a0:d8:ac:
20:25:89:d0:64:07:a1:d9:c7:a8:64:9d:2e:0a:77:
4d:0e:d8:e3:67:e2:f7:cd:42:0e:c6:85:cd:2f:4d:
ed:ff:ad:40:38:aa:eb:b9:4c:bd:89:41:9d:92:a5:
78:da:73:47:4d:47:74:c3:b4:a8:57:9f:b7:0d:9f:
22:81:93:d1:19:95:58:5f:02:88:f4:13:ee:df:85:
91:3c:77:d5:c6:44:74:be:c7:68:e6:44:db:0e:ba:
5f:bb:0f:95:b7:ee:bc:74:35:dc:c3:9d:e3:51:34:
1d:c5:28:ce:e5:bf:d9:7c:c3:c6:1a:bb:75:ea:0c:
43:06:11:2b:1f:dd:f7:ac:1e:03:d8:93:9f:38:bc:
55:e6:c2:ef:08:b5:2f:2e:84:70:58:3d:99:60:22:
b8:49:d0:72:a9:8d:16:0e:da:0d:b8:ca:59:3f:4f:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:40:DC:2E:4B:25:79:0F:BE:DB:1F:37:43:89:D0:C3:3C:8E:4E
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1a:6b:df:92:30:a0:33:b3:ca:7c:74:a9:f7:2c:ac:7f:4e:
4a:39:20:83:9f:21:79:d8:5b:ff:0b:df:2f:39:b5:ca:eb:bc:
c1:94:96:2b:ef:57:a9:e5:dd:df:f4:1e:da:9a:89:45:b2:72:
b0:42:e1:ba:86:f9:8c:e7:67:a0:f3:1f:92:99:63:b1:b5:51:
32:96:df:48:02:69:ff:d6:8a:14:71:f0:f3:97:d6:75:30:bf:
6b:a8:16:a0:99:e3:85:e0:5c:1e:63:d9:2f:4f:2e:cf:48:7c:
87:e6:f1:dc:77:38:23:5d:97:da:af:0f:8b:5c:8a:99:95:e0:
2e:52:cd:66:9f:05:0a:6b:76:86:dc:a2:ce:42:53:96:12:4f:
43:fe:01:0c:4b:f2:81:1a:3d:39:40:02:c7:af:1f:ab:63:d9:
44:07:d1:a1:d9:a0:9f:77:60:1e:78:fe:89:0b:55:15:ad:4e:
12:03:c2:4f:31:50:b9:05:f6:5e:c1:63:c5:6d:c4:2a:d9:0f:
88:fe:bb:47:3a:f8:b6:3c:ba:a9:ef:88:68:01:ea:af:a7:7d:
cd:81:90:ab:84:21:69:1a:bb:f7:6d:d5:ce:b4:fa:4a:45:78:
8a:7f:99:d4:17:fa:3b:07:76:97:54:98:85:7c:67:aa:e8:11:
6b:dc:59:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:37:37 2025 by rpki-client