Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: ZU44S19PKG/JJQVf+7qeVzp7VA3eEI/AvKoTM+Ps6w8=
Subject key identifier: 01:DE:11:F5:14:14:A3:EB:CE:A5:5A:B9:A8:13:0A:30:65:D2:B5:39
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 019A7149EEA35CAC8F78F9A5C99AD60F2F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 14BE
Signing time: Tue 11 Nov 2025 05:01:01 +0000
Manifest this update: Tue 11 Nov 2025 05:01:01 +0000
Manifest next update: Wed 12 Nov 2025 05:01:01 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: Ftakabatxt8SpvmRbqbZNg8KdwOhSX53TruPs/jQG7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ee:a3:5c:ac:8f:78:f9:a5:c9:9a:d6:0f:2f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Nov 11 05:01:01 2025 GMT
Not After : Nov 12 05:01:01 2025 GMT
Subject: CN=01de11f51414a3ebcea55ab9a8130a3065d2b539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2a:8e:77:37:1c:8a:7b:88:a7:84:cd:01:d5:
df:31:51:0f:8c:e3:cb:e5:34:fb:c1:91:1e:f4:39:
10:f0:39:fc:87:2e:0a:6e:d3:75:a2:bf:bc:46:39:
e9:2e:8a:b1:41:6d:ef:80:41:36:6a:28:e5:0e:9a:
ff:2a:4a:80:f7:c6:be:4e:46:71:b3:f1:d3:dd:45:
f1:8e:60:0e:61:58:90:9b:00:6b:6c:f5:b2:42:ae:
8a:65:dd:07:77:eb:16:a5:a6:f2:17:0d:ad:cc:c6:
3e:1e:88:f3:5f:40:5f:82:b1:7f:f8:7f:52:72:cc:
af:62:b3:73:65:fa:a1:75:73:d5:1f:73:bd:fc:04:
59:17:c8:4f:9b:98:b0:65:b6:88:25:45:d8:65:e3:
cd:76:36:d6:2a:2a:ac:fd:90:57:23:c1:b9:8b:ca:
c1:2e:19:4d:e4:ef:5d:8f:99:e7:56:c0:79:3f:2e:
28:47:f9:2e:75:9d:ba:92:77:11:3f:00:0b:88:91:
01:c3:77:cf:0d:4c:4a:e8:18:00:18:da:cd:54:64:
3f:ad:9a:8c:5f:74:a0:23:a5:a7:bc:93:3a:ce:c3:
63:2f:90:e7:50:3d:2a:59:1c:18:c2:22:e2:bc:e9:
52:35:4b:04:27:8c:52:27:60:a7:f9:3a:0a:d4:11:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DE:11:F5:14:14:A3:EB:CE:A5:5A:B9:A8:13:0A:30:65:D2:B5:39
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e1:bc:ed:aa:b6:9c:8f:90:66:68:62:c4:df:f7:9b:27:08:
8c:0d:7d:7f:69:f8:7d:54:6d:be:8a:e6:2c:ef:ed:20:03:f7:
6d:90:fe:d0:66:39:a5:61:42:32:d5:e8:b4:68:8c:45:84:be:
10:6c:c0:52:2b:ba:19:ee:1a:d1:06:66:c2:24:8e:4f:99:a4:
65:a1:d3:63:b9:fc:c5:18:e4:74:4c:94:51:99:2b:ff:05:ae:
aa:86:1a:82:1d:58:d6:c3:48:44:cf:fb:ec:95:3e:17:a8:87:
e4:83:16:e1:27:5b:0c:10:89:89:c7:70:91:0e:d6:a2:ad:da:
7e:df:bf:01:2c:4f:e9:53:3c:89:bc:13:61:46:5f:d5:74:73:
b0:31:54:e4:8e:cc:49:01:d3:6a:54:95:4a:57:6c:39:23:c0:
63:4f:85:aa:24:48:19:5b:81:e8:62:8a:00:e9:ab:f1:f6:37:
18:81:10:e2:76:a3:14:be:40:63:76:04:f7:5c:94:fd:13:e7:
ae:7c:3a:8b:c5:e2:31:27:d4:46:ba:e4:16:f5:7b:d4:bf:23:
88:8f:b7:93:af:78:7c:52:cb:75:c1:e0:bd:59:42:aa:df:41:
b1:43:e8:f5:5b:04:c8:92:3f:cf:83:b3:3d:80:aa:cd:59:9c:
34:87:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:29 2025 by rpki-client