Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: NBOoybTwH4hrZNbID/O5X8wTU7Fns6HXNz4zFHjUV6w=
Subject key identifier: A2:30:90:21:6F:B6:C8:F3:7F:4B:DB:E1:3B:6F:20:2B:3C:E6:64:07
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 019A72264EF6090365AA7A73CF45307FFC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 1225
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: r3CxrgacuADUg2rklkh74a+1ip8akKCJuT9jGVXwwhA=)
2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4e:f6:09:03:65:aa:7a:73:cf:45:30:7f:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=a23090216fb6c8f37f4bdbe13b6f202b3ce66407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:51:ff:7e:96:ff:cb:38:be:68:4e:a0:a4:
ea:8e:25:24:ea:49:b6:e8:ab:a8:28:55:fa:7c:38:
ee:32:6e:9a:74:a7:3e:2f:93:6f:9f:29:5c:24:b3:
4e:e7:03:cb:5a:a0:f0:9e:50:1d:05:e4:6c:04:a7:
2c:bc:a1:40:10:0b:52:f0:c9:00:0c:5d:ed:d4:a6:
7d:a8:ae:1e:cf:ae:c5:c3:62:f4:7d:f7:ed:17:9e:
fa:94:1d:cb:9f:c1:2e:a8:05:43:f1:20:39:71:66:
ee:7a:07:6a:71:01:19:32:1d:26:6e:2f:d4:db:af:
ef:bd:34:a4:f8:ef:82:2d:cb:e9:47:49:ae:5b:bf:
fe:15:42:3f:16:b0:06:bd:4b:b7:52:f5:b9:5b:d3:
58:ef:d0:05:45:45:76:38:fd:40:62:92:89:41:dc:
f9:e9:39:6b:12:a6:25:d7:07:df:4d:95:93:b7:7b:
0e:81:34:56:b1:e7:07:24:0c:70:82:7b:3f:84:21:
dc:f6:3a:77:f8:29:a8:46:83:1c:f7:f1:c2:e0:f3:
a1:c5:1d:8e:ba:72:04:b8:53:7f:12:75:7a:8c:1e:
59:cd:7f:c8:ce:f6:2f:31:6e:06:11:ee:0c:cf:53:
52:63:6c:49:1a:c5:b2:3c:0c:b7:0b:43:a8:cb:bb:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:90:21:6F:B6:C8:F3:7F:4B:DB:E1:3B:6F:20:2B:3C:E6:64:07
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:65:de:34:c5:5b:76:d9:05:5f:a1:91:35:8d:f2:5f:0e:a0:
06:20:52:40:28:d5:e1:ec:bf:24:c5:48:e4:51:03:04:b2:4f:
b1:74:bf:21:c0:72:62:e7:7b:93:b7:6e:7d:fa:cf:d9:48:f4:
84:c4:03:c4:7e:2a:91:2e:dc:fa:2a:46:04:73:ce:d0:a0:cd:
cb:90:36:cf:91:af:8a:fd:e2:af:ca:13:48:f7:c3:6b:09:b5:
54:ae:df:8b:e0:b7:88:93:9d:a9:e5:87:27:1f:6c:08:d4:d3:
b4:fc:e4:d9:38:8d:ae:27:6f:2f:6d:f1:46:21:34:77:b0:15:
a1:7c:d3:30:62:01:4d:1d:fd:e9:78:d1:14:aa:38:f1:7d:42:
1b:99:d2:c4:7d:82:8a:24:6d:22:8e:87:31:93:0e:66:d8:70:
c4:14:9c:8b:7f:1e:ac:06:dc:5d:b8:63:30:64:38:06:44:32:
63:47:bf:17:1f:e7:a3:b7:96:3f:01:97:a6:a9:42:9e:5c:2c:
59:71:f4:a6:b7:13:a2:f0:20:be:8c:03:4d:ba:14:14:71:c8:
fd:dd:36:9d:dc:9b:34:d5:f5:0a:77:32:b4:38:47:ec:02:75:
48:60:e2:64:ad:e8:1f:d3:12:ac:5e:0b:02:02:59:13:9f:c7:
76:da:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:25 2025 by rpki-client