Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
File: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft (raw, json)
Hash identifier: CUH0HoeR8vvVf4kl++ORZ9+Pz1DXlPPCoUmoicT+6bc=
Subject key identifier: E0:39:F4:DE:1E:C0:A0:F4:2E:33:25:25:38:99:99:F4:D7:0F:60:D6
Authority key identifier: 14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
Certificate issuer: /CN=14a9d3c7406e276005488871d5218c05a07166d1
Certificate serial: 019A240A40919AC45E29ABCA7365663EDB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
Manifest number: 0CAB
Signing time: Mon 27 Oct 2025 05:00:42 +0000
Manifest this update: Mon 27 Oct 2025 05:00:42 +0000
Manifest next update: Tue 28 Oct 2025 05:00:42 +0000
Files and hashes: 1: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl (hash: HYEJh0aQ3SV/WQe6VB26ncqjjnGXnMYZm59SHmfbhv8=)
2: foAFIag6bLElaUey2ZaxoI-rq9U.roa (hash: 9IbR/5Hj38Nx2RBHaHIpWS+CIYm87fW1bNphG8TyovY=)
3: o_RVkUo12yIsWwd92ReBZuoWw6Q.roa (hash: SRUesdEiY2Y5wOgnJsCRLKIjGy9NIgo1L8w/6rAHzkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:40:91:9a:c4:5e:29:ab:ca:73:65:66:3e:db:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a9d3c7406e276005488871d5218c05a07166d1
Validity
Not Before: Oct 27 05:00:42 2025 GMT
Not After : Oct 28 05:00:42 2025 GMT
Subject: CN=e039f4de1ec0a0f42e332525389999f4d70f60d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:58:c1:13:41:c5:63:7e:b2:bb:bc:28:49:
a8:a5:ea:e4:81:90:dc:f0:d0:b1:5e:b7:ca:0f:ad:
44:19:71:2d:9d:10:90:ad:41:a8:5c:46:35:7e:4c:
18:81:c5:f9:43:0b:c1:43:f1:12:ff:2c:01:40:a6:
51:43:98:f4:4c:f3:31:25:53:76:c6:6d:6f:28:59:
bc:d4:7e:ce:a8:e1:30:76:e3:95:ae:95:eb:30:d9:
e0:6c:dc:29:30:a5:6c:11:1c:d8:16:57:69:01:2f:
0e:15:dc:f9:56:69:3c:60:78:08:01:24:1f:49:0f:
0f:9d:d6:01:a1:d0:13:7a:51:ed:42:84:d8:c1:cc:
60:f9:2e:18:fb:5f:d5:d4:7a:65:c3:e1:b1:f4:58:
3c:c8:1b:6a:c8:e7:95:01:d8:e8:43:47:b5:fa:59:
a7:ef:72:79:c6:c1:43:e8:7a:ca:43:3e:61:db:cc:
e3:fb:cd:26:75:0a:1a:10:b8:31:0e:2f:92:f1:f6:
a7:e2:20:ec:8e:d3:05:4d:ca:b8:0e:4d:10:7c:29:
3f:7b:1d:d3:a5:e1:47:d7:09:8d:65:ce:4d:13:f6:
bb:45:1e:2c:10:99:1f:c4:20:75:94:e4:e2:74:71:
2e:5c:be:d8:58:dc:c0:71:68:69:2b:c4:12:f8:2b:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:39:F4:DE:1E:C0:A0:F4:2E:33:25:25:38:99:99:F4:D7:0F:60:D6
X509v3 Authority Key Identifier:
keyid:14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b8:ed:0d:e8:ef:b5:11:aa:81:18:86:a1:0a:bb:b6:5f:bf:
f2:13:b8:6b:f7:34:fd:e7:23:e6:cd:91:bd:6d:7c:95:ae:8b:
fb:29:92:e4:9e:ba:d0:e5:3a:02:4c:e2:45:f9:5f:88:41:bc:
df:37:02:6b:d4:2f:1f:e7:49:43:12:58:6b:23:71:24:3d:b5:
20:c6:83:fc:a2:2a:ac:15:9f:e4:51:96:39:fc:62:bc:de:d3:
ce:6b:d9:d5:e7:7f:bf:cd:e5:c5:1b:7e:0e:12:2b:d9:dc:ca:
c7:02:a1:aa:e8:0b:3c:67:74:eb:76:d4:df:6a:e9:20:08:1c:
6c:b7:6d:c5:02:e6:7a:af:5f:86:4e:d4:9d:c3:c8:e0:22:fa:
06:40:ce:ec:8b:7e:62:e6:b7:66:9f:7b:06:fd:d6:db:9a:f4:
91:8e:36:1e:97:ff:90:de:73:b8:95:c5:80:36:97:72:7f:bc:
a3:67:10:d9:9a:ce:9c:ad:f7:84:8b:ea:71:94:74:3d:89:eb:
2f:82:25:42:0b:7a:4c:ba:06:38:a4:97:eb:b2:1e:e9:36:ae:
bc:00:82:69:24:b2:b1:e0:36:92:62:86:cc:29:e8:e4:df:68:
7e:9a:f0:e3:9a:9d:4e:db:65:3e:91:b0:6c:70:be:6e:f0:8d:
dd:83:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:48:10 2025 by rpki-client