Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: bbJNPCT/N3RKD+oVwAC4E6+003lE6fO/pHA2tuR+TXE=
Subject key identifier: 97:D1:06:F7:FC:A1:17:3D:7B:0B:DD:75:93:FE:5B:FA:9A:4F:F2:FD
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 019A2E567F51DF23AE87E68A0A780FF582A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 16FF
Signing time: Wed 29 Oct 2025 05:00:11 +0000
Manifest this update: Wed 29 Oct 2025 05:00:11 +0000
Manifest next update: Thu 30 Oct 2025 05:00:11 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: 6qw4dx2SGN56Kel3leYUeINpk3Ss0idFLuDXe4UOD48=)
2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:56:7f:51:df:23:ae:87:e6:8a:0a:78:0f:f5:82:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Oct 29 05:00:11 2025 GMT
Not After : Oct 30 05:00:11 2025 GMT
Subject: CN=97d106f7fca1173d7b0bdd7593fe5bfa9a4ff2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:4b:8f:8e:c6:27:bc:5c:c0:54:e8:f6:00:
bb:95:43:94:7d:b7:80:3c:13:9c:cd:f8:d0:48:d1:
01:1e:fb:7e:a5:04:58:8b:ff:d0:9d:db:88:d4:60:
1e:29:a3:d3:34:60:04:b1:b9:c9:13:45:5b:60:d9:
df:d6:dd:1d:89:4a:28:b5:e0:1a:20:4d:38:63:75:
87:12:63:14:ce:9a:5e:c8:b5:71:a9:9a:54:dd:e0:
4b:e5:6d:5a:ed:e1:86:1c:05:43:2d:4f:40:0b:fd:
79:46:54:de:a0:19:ce:8e:7f:a0:c5:3e:d7:0f:0d:
a7:82:7f:6b:1b:9a:d9:47:c1:16:a6:e0:db:ec:aa:
0b:20:64:5a:72:83:8f:ed:50:36:03:39:40:9d:9e:
aa:69:1a:f8:03:a6:63:81:18:18:5e:aa:08:f6:fe:
6a:ff:c2:6e:c0:9c:27:26:ac:2c:e2:c4:86:b5:f0:
86:ef:9d:10:38:f3:8b:24:7e:8d:82:1b:0e:13:52:
cb:92:34:8f:24:74:bc:81:6d:9b:54:f9:b8:05:83:
74:b4:92:28:7b:7f:8f:04:83:13:62:01:21:2e:a4:
b3:a1:e7:fc:5a:2a:d5:a6:be:2d:85:f0:00:26:6e:
74:d3:99:86:5f:5c:8c:55:5b:45:dc:0c:3f:13:28:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:06:F7:FC:A1:17:3D:7B:0B:DD:75:93:FE:5B:FA:9A:4F:F2:FD
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:dc:a3:1e:44:32:6f:45:9c:45:40:4c:79:b5:26:2d:7f:05:
a4:73:e7:de:7e:aa:b1:41:b6:80:b4:fd:cd:5b:1d:b3:78:ef:
b3:45:14:c2:be:69:a3:40:60:4a:1a:0a:4e:f1:43:53:c9:1f:
b9:71:6d:54:83:33:22:0f:cf:90:3e:e4:a7:c6:cd:15:4b:fe:
37:10:8f:57:c4:d2:e7:a3:76:79:f4:ad:d6:04:d2:31:dd:3a:
62:dd:24:0c:14:96:3c:48:c8:21:87:e1:e2:0e:b7:0d:02:af:
3d:2f:8e:37:84:5b:39:b0:89:93:61:6b:61:8d:7f:38:3a:71:
af:7e:65:e4:8f:ed:ff:00:4c:fc:87:de:03:8b:65:3f:80:0d:
ea:ac:88:bf:2d:e7:1f:ff:8a:65:1a:af:ed:0f:e1:f7:87:96:
7c:c3:f8:b4:fd:e0:13:97:9a:49:02:fb:ea:22:a8:4b:af:49:
ef:a3:a3:3b:69:11:88:fd:5f:4e:00:a7:7c:c2:8c:90:eb:54:
fc:a0:e0:ce:54:7c:f5:32:e0:a6:a2:a0:cc:28:be:0a:1d:a4:
da:48:21:67:c3:ce:c6:9d:26:40:68:75:7f:af:62:1b:88:c5:
9f:cf:ab:18:cf:ff:04:51:f2:7e:94:62:ed:b2:ee:c2:46:55:
4c:bc:c3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 13:28:37 2025 by rpki-client