Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: NqSyPaN7RwDjAjdcuP5ZwDq6pkOX5Opk8p2/Mcf7fj0=
Subject key identifier: EF:3F:FD:BE:37:48:AE:27:F8:87:14:C8:54:FE:BA:9B:87:81:6B:5B
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 019A714A039CCA57FABC391BA99CE4154FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 1663
Signing time: Tue 11 Nov 2025 05:01:07 +0000
Manifest this update: Tue 11 Nov 2025 05:01:07 +0000
Manifest next update: Wed 12 Nov 2025 05:01:07 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: d6ogGE9aMUBUTHd4MpL0c5NoTfmw99xyx8jASkn7Qxc=)
2: Jan-36Lo7cls_qlYXAYwCHL-IM0.roa (hash: 9QKHqIJMi/8WyyfdqnXT2xQCCgDbraKMeYqVzfnxL6A=)
3: rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa (hash: 4ZmwtT19+5Iz0mku0LqIMr+TT72kqcPqLFHR2qlNxGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:03:9c:ca:57:fa:bc:39:1b:a9:9c:e4:15:4f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Nov 11 05:01:07 2025 GMT
Not After : Nov 12 05:01:07 2025 GMT
Subject: CN=ef3ffdbe3748ae27f88714c854feba9b87816b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:c1:9e:ae:8d:66:41:08:70:80:6b:45:ab:
0a:df:67:4e:dc:e2:57:59:53:47:e1:5d:3f:f2:4a:
1d:52:7c:ba:68:8a:82:e6:25:b8:9e:24:5a:02:8b:
44:90:ff:ac:da:2c:7b:8e:cc:c2:6e:96:ed:d5:6e:
86:4b:a6:11:12:e0:29:07:79:6a:9b:c2:85:3b:a8:
09:22:d0:5f:fc:2e:4a:18:c3:e4:25:90:2b:4b:f6:
53:a1:09:c2:26:4d:3b:f2:2e:e1:3d:1c:51:03:95:
5d:e2:31:36:c2:cb:1c:0f:66:78:35:21:40:81:21:
a8:1a:2b:3a:23:5e:3d:8c:0e:d8:07:2e:e4:c6:bd:
ef:36:58:4f:86:cb:2f:e1:b9:da:5b:b7:57:29:40:
81:de:a8:02:01:9b:5e:a4:df:7a:6d:b5:d4:4f:db:
46:77:54:38:97:62:f8:b3:94:13:27:26:9e:60:98:
bf:ff:6f:db:24:4b:1a:18:3c:ef:9e:61:ed:4c:52:
d8:bf:05:ea:8c:89:d1:3b:29:79:66:74:ec:77:02:
49:74:17:82:60:54:dd:d7:fc:17:68:c4:03:f3:8b:
21:73:56:49:84:1f:42:05:8f:e1:76:82:dc:0d:f6:
6a:f9:d3:70:33:bb:f4:fb:71:18:82:95:cb:cf:cf:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:FD:BE:37:48:AE:27:F8:87:14:C8:54:FE:BA:9B:87:81:6B:5B
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:a0:be:d4:74:67:5a:31:d9:89:f3:4b:f8:00:ec:7b:bb:
c1:79:fb:5c:3b:f8:ed:cd:33:91:16:4c:7d:9f:02:c9:3c:51:
fc:16:a9:8e:69:63:53:e1:ae:1d:79:05:99:17:2c:59:1c:70:
a1:7e:15:41:3f:e7:2d:09:15:58:93:1e:ce:57:d4:59:10:e9:
cc:9d:a8:da:28:1a:cc:32:22:02:29:9a:ba:ac:75:d1:ea:c4:
30:37:fc:7d:65:12:28:8a:c2:54:8c:d2:61:14:b5:b1:d2:ca:
ce:c3:a7:45:bb:0a:bf:ec:fa:fd:87:4b:7c:58:ca:7d:99:cc:
cd:c7:56:16:3e:a6:e9:1d:68:d4:a3:dd:a9:21:f5:c7:62:0b:
3a:a5:b7:e4:f1:4b:34:7a:44:db:50:06:16:ff:2c:cf:c6:ac:
c2:22:17:7d:dd:01:cc:58:0b:b9:46:0c:b7:2b:f4:6a:c1:82:
53:67:2d:49:77:c8:b3:c4:35:fa:63:05:d8:9c:a9:94:46:f1:
e6:f7:3e:e7:ca:17:2d:db:11:72:ce:3c:1f:6a:89:e2:12:21:
1d:2e:9e:3b:bf:71:66:30:13:5a:4f:06:ed:a1:dd:58:89:fe:
af:6c:85:5f:b9:5e:1d:3b:19:c9:24:e7:c7:e2:1d:2b:a9:d7:
6b:6e:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:23 2025 by rpki-client