Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: 8BmNV1Si/TinfrtDQ3Sy4zgyveUpvPK8Hy6gfNQsqys=
Subject key identifier: 0A:72:5A:B0:43:FA:F2:6C:2A:B3:E5:C2:DF:72:B1:51:CA:67:57:52
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 019A1CBF5E15E86F70FABFD7E1D4750D9D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0F32
Signing time: Sat 25 Oct 2025 19:01:34 +0000
Manifest this update: Sat 25 Oct 2025 19:01:34 +0000
Manifest next update: Sun 26 Oct 2025 19:01:34 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: Tt5pjvtnx1hi/RR+BVC5//jNH+E35gGfU9yfjPmnU1Y=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:5e:15:e8:6f:70:fa:bf:d7:e1:d4:75:0d:9d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Oct 25 19:01:34 2025 GMT
Not After : Oct 26 19:01:34 2025 GMT
Subject: CN=0a725ab043faf26c2ab3e5c2df72b151ca675752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:02:79:8e:0b:d0:b8:5e:d9:53:ce:29:e6:
e7:b2:3f:cf:7f:54:50:34:61:a9:ad:2f:cd:0a:f9:
3a:b8:db:4d:90:d4:06:ca:45:79:24:0a:96:23:9c:
0b:9d:d6:04:0f:80:07:18:fa:1c:73:c7:d8:fb:d1:
48:a0:c0:43:02:ed:86:d1:c5:82:30:28:83:5e:f1:
ff:f6:59:69:07:de:f7:1a:f2:9c:67:83:e9:b4:8a:
ff:b3:c2:05:9c:30:cc:a2:53:09:ce:8d:b3:0b:65:
50:3d:9c:82:b8:a8:16:60:7c:17:88:8c:84:18:ba:
12:b2:11:ae:8f:41:22:87:79:99:1a:ae:cf:df:4c:
df:b3:a4:be:9c:f1:55:b7:63:20:a8:7a:03:ae:b9:
f3:66:31:1c:95:03:08:65:da:2c:f5:83:c7:58:89:
af:5b:32:ed:dc:fc:65:f0:c9:80:d8:83:96:a3:4e:
ca:0d:a9:d4:d9:e3:50:72:5b:a4:c6:72:11:c5:19:
a5:66:bd:f4:ad:74:86:26:6e:da:48:56:ba:21:76:
23:d3:34:cb:1d:3c:15:b7:05:cc:dd:ce:5f:cf:20:
9c:e4:68:8f:41:bc:3e:08:e0:d5:c4:d8:4e:78:76:
d0:44:0b:8e:16:81:b8:b5:9e:60:0a:7a:b7:37:77:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:5A:B0:43:FA:F2:6C:2A:B3:E5:C2:DF:72:B1:51:CA:67:57:52
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1a:37:de:04:6a:35:26:7b:62:e1:52:17:7c:ac:d3:26:16:
c2:f3:7b:44:ca:3a:68:5e:68:5b:5c:25:25:43:22:54:f6:7a:
be:5a:91:0b:dd:8a:20:58:93:d5:0f:58:a0:83:ab:61:62:56:
4c:a6:56:54:be:a2:b4:17:0a:ac:33:3b:70:81:06:e1:aa:65:
b3:6f:69:00:a4:c1:53:ad:e8:43:af:c4:ab:8b:1d:f0:04:e8:
87:7a:16:00:b1:4d:31:7c:d4:94:dd:90:79:f9:57:bd:3b:93:
2c:48:b8:0a:c6:d4:de:5f:a2:dd:27:e1:85:ca:c4:c3:62:d3:
61:68:81:e8:e5:45:78:63:37:5b:b7:6b:a0:d9:33:50:85:e9:
86:b4:6b:60:a8:a0:66:59:7f:dd:f4:25:7f:6b:19:cb:af:3d:
a7:25:0b:b5:47:62:d3:23:8d:f3:54:31:c9:38:7b:c7:58:e5:
09:8e:9e:83:87:6d:07:f5:1e:cf:7b:be:e4:f2:b8:6c:8f:3d:
d3:5e:d3:09:08:45:ac:41:ec:52:70:f4:68:5a:3e:1d:f9:92:
1b:90:25:3b:97:0f:1a:88:b8:10:0a:0a:36:8c:43:a9:d8:36:
af:cd:54:e3:26:fd:9c:0f:20:5b:50:ab:ba:19:a6:d0:d2:fd:
7e:39:ba:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:07:16 2025 by rpki-client