Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: cAdkGixPXDBe62AieOEC1c8IJnEQexQgdX6Gfug1l2U=
Subject key identifier: 45:DA:0B:AD:55:9E:33:4D:57:55:00:AD:D9:18:80:0E:7D:AA:99:0A
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 019A72265BAC8BC35D88570060EF5BEA82F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 04BA
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: BLTH2GUowOcObAxjkTpswdCVmdy5QZ2GwS58t+Fji1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5b:ac:8b:c3:5d:88:57:00:60:ef:5b:ea:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=45da0bad559e334d575500add918800e7daa990a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:60:56:a3:ea:60:5d:a1:32:13:a8:9a:62:
d7:b5:11:4e:8e:da:0a:98:c9:d4:ae:69:9c:ce:49:
d1:08:c9:47:6c:f2:d4:5e:f2:36:05:01:f1:8c:68:
63:4f:fe:2c:72:73:f9:98:a1:a7:66:33:0c:b5:bf:
3d:6a:b3:35:f3:cd:0e:31:cc:e8:8c:d4:2d:05:0e:
86:0d:34:61:ca:bf:3c:e1:4c:1a:a1:e4:67:78:1c:
dd:c9:e9:ea:3d:86:7d:9b:52:a7:36:45:89:d7:38:
76:83:15:cc:be:74:88:ea:b3:23:91:de:73:e7:f1:
60:55:77:2a:e5:56:f0:df:1e:d3:73:dc:cd:fd:31:
e3:5e:9a:7f:e0:c9:d3:2c:a5:96:67:13:f1:81:01:
11:33:1d:f6:7d:c1:7a:3d:31:84:a6:d8:61:df:64:
3a:df:e2:8c:19:a5:98:e2:12:75:15:59:3f:fe:01:
0e:05:95:8c:fb:80:39:63:d5:25:28:35:d8:95:39:
ba:63:0c:0a:9e:70:00:3a:a2:23:43:9d:a8:61:c5:
6c:14:ff:49:45:e4:13:e7:e8:36:d9:e5:57:c0:40:
fe:2f:d9:c6:17:ff:83:58:a5:6a:0b:07:c3:92:93:
f4:42:2e:95:97:14:f3:eb:d2:5c:4a:18:3f:dc:15:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DA:0B:AD:55:9E:33:4D:57:55:00:AD:D9:18:80:0E:7D:AA:99:0A
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8a:b0:eb:32:c1:ff:0a:ba:20:0b:02:13:69:04:af:3d:0f:
86:8b:a1:ab:8b:4a:cf:62:8f:99:ad:ec:7c:2f:d3:40:ce:87:
f6:55:0a:b5:f9:33:91:44:5c:9f:98:35:62:54:63:97:79:51:
52:8d:8b:0e:28:39:5f:c7:79:f0:38:f0:ab:f4:16:7e:63:db:
12:67:28:03:95:b7:5d:28:98:9a:61:42:d4:a1:34:12:61:61:
31:3c:70:32:56:1d:b7:1b:f8:e3:21:83:ff:61:dd:8e:c2:8c:
f7:d4:59:66:f8:21:0b:37:89:b8:44:c5:a9:28:2f:13:a3:12:
10:a2:e6:29:3a:a0:53:3f:ff:15:18:28:cd:03:d7:e9:80:a6:
fc:39:29:58:6a:b4:bb:93:e7:02:8e:e4:ff:f7:31:09:8b:20:
68:4f:ce:b4:1e:a6:54:b1:df:7f:3b:82:bb:e1:f8:70:17:b3:
3a:f6:74:f9:88:b1:9f:f0:3f:44:97:7b:ce:0a:fc:d3:97:80:
57:07:89:36:42:1c:f5:3b:3c:2e:d4:6e:c9:23:af:63:bb:02:
72:22:89:7e:9e:12:c8:a0:3b:10:dd:c3:7f:a1:4a:89:63:10:
7c:94:c1:cc:6a:14:2b:f0:05:09:cf:2f:a0:ce:08:bf:96:9f:
25:4e:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:10 2025 by rpki-client