Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: AGKB2svSFtyE4OAYPds1GTZ7PetfEUt/aRmLQMk9Iik=
Subject key identifier: 39:8C:17:48:47:26:DF:A3:BE:FB:7D:08:68:E3:63:FE:1F:1A:C5:A0
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019A72933B98C8ACEE8CA3B9DB13B599AB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 15F6
Signing time: Tue 11 Nov 2025 11:00:42 +0000
Manifest this update: Tue 11 Nov 2025 11:00:42 +0000
Manifest next update: Wed 12 Nov 2025 11:00:42 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: TlC5eLSjFVaBGJPAkCF0fCX0nTJDNamA1G+eaud8Nt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3b:98:c8:ac:ee:8c:a3:b9:db:13:b5:99:ab:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Nov 11 11:00:42 2025 GMT
Not After : Nov 12 11:00:42 2025 GMT
Subject: CN=398c17484726dfa3befb7d0868e363fe1f1ac5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:3a:9c:21:28:37:59:12:57:24:ee:7d:ad:
0e:7e:b8:80:61:df:a1:2a:a3:f5:b7:d8:24:c7:57:
e7:f2:af:3f:3e:1c:ec:a1:99:f5:99:38:86:6e:9c:
8a:87:51:50:fa:68:f1:b0:04:f9:84:25:6d:9f:fe:
af:a7:89:e8:c9:3d:00:7b:fa:fa:d7:c7:66:40:25:
a7:86:61:9e:68:06:9c:4a:6f:11:bb:5b:42:72:35:
6d:1d:ef:ef:40:19:9b:7a:eb:4e:be:b9:92:a2:6b:
80:e6:e3:5f:e5:86:a6:62:9f:4d:e0:71:09:91:da:
81:8f:f9:ad:ba:b6:48:42:a5:53:99:a7:06:ba:b6:
95:83:5d:6b:d4:2e:c8:2d:b2:43:0e:c3:04:97:62:
48:69:c3:b5:5a:9f:47:f3:74:19:58:c7:2f:fe:98:
ba:38:81:99:5d:4c:79:4b:07:55:1a:12:25:06:bb:
dc:4b:95:40:7f:93:9d:d6:d7:4e:2f:81:5e:53:06:
6a:eb:50:e6:8e:e8:e1:d1:d7:b0:6c:73:23:cc:d8:
b7:18:77:62:ec:9d:a4:df:94:3a:f8:5d:e0:72:79:
6c:76:6d:12:27:42:1e:6b:f8:a7:a6:00:a3:5e:23:
6f:c8:a1:11:96:42:a2:48:26:ce:ed:c0:1e:51:bb:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8C:17:48:47:26:DF:A3:BE:FB:7D:08:68:E3:63:FE:1F:1A:C5:A0
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6c:74:0b:1c:7a:c4:d0:10:21:9c:d8:f8:f6:06:54:71:1b:
8f:7b:20:4e:b5:74:0a:3f:4f:38:e8:67:d6:55:ba:17:d4:67:
e5:31:47:44:f3:e7:b3:ba:ac:f9:1a:a2:8f:1b:59:74:e1:41:
60:86:f8:62:9f:75:c0:c6:57:fe:6f:0a:39:9a:23:67:b3:51:
b4:70:3b:cf:24:e8:a7:13:22:03:53:9f:0c:61:b5:b8:7c:f3:
dd:36:1d:8d:92:5e:8d:f0:da:6f:47:f2:af:02:1f:69:1b:bf:
70:5d:9f:92:f6:d3:37:ab:44:63:ce:4f:ac:c3:f9:47:a1:db:
a4:70:39:ee:95:63:cb:64:5c:7b:56:50:d0:b9:e6:8b:9b:78:
af:26:a2:8a:28:d1:c0:df:6c:d1:da:c5:50:65:ae:ad:8b:7c:
59:b2:94:93:3a:9d:aa:87:0c:94:44:2d:6e:32:ab:ca:52:29:
5b:ec:cd:61:98:6c:07:f8:44:fb:53:36:8b:e1:81:98:ec:e4:
b5:db:2b:19:38:d6:44:21:de:9c:f7:56:5b:fd:98:80:e5:80:
06:98:c2:3a:ea:ea:80:c5:93:33:83:07:3d:9d:a4:85:08:75:
0b:9c:08:4a:64:17:66:65:32:56:29:3e:64:40:38:61:f5:84:
d3:7f:5d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:45 2025 by rpki-client