Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: Gs5FpVREfZGh0ld73T8F5x09fwIw4Xze6/xNCE0qcnk=
Subject key identifier: 0F:E8:4D:CD:06:F0:22:BE:48:83:15:3C:92:42:67:D4:C6:2B:DF:0E
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 019A71B90DC549CAE258A0643CBE9FC10B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 14A1
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: HsURq8EdDZJEXOI/iZFP1vPyaxmceGvJtwBid6WWlVY=)
2: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (hash: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0d:c5:49:ca:e2:58:a0:64:3c:be:9f:c1:0b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=0fe84dcd06f022be4883153c924267d4c62bdf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:a1:b2:57:20:4e:81:c1:25:29:28:bc:af:
2e:3d:b7:b8:fa:1d:41:cc:a4:f6:87:cb:2c:8d:8b:
ed:ea:5e:7b:3f:8a:d0:f3:d2:3f:29:18:99:7a:f1:
89:8c:87:ef:bc:14:f8:c2:53:11:f6:af:15:b6:0e:
6a:9a:65:05:a2:a9:88:7f:1f:fd:7c:5e:db:9a:b6:
e9:84:5b:b8:a1:a4:78:8b:b2:57:11:8b:da:e0:c7:
d7:49:82:a1:ac:24:be:e5:76:63:1d:42:e5:3e:2c:
ef:e9:b9:24:b5:0d:30:88:8f:77:ed:15:b4:87:1c:
a7:d2:20:b5:4f:dc:fe:1f:6e:8f:93:03:9a:23:61:
a4:12:b0:32:b2:f8:80:22:8b:85:c9:c4:49:ee:94:
a9:60:85:1c:88:da:24:ec:15:ac:c3:91:44:2f:76:
a1:7c:2b:f5:c4:bc:64:65:f2:17:04:ed:af:9f:96:
1d:ed:a6:db:ef:82:63:e1:a0:d9:51:74:5b:02:4c:
76:6e:a8:34:dd:ca:d7:4f:a0:4e:92:ce:58:8f:9d:
06:c8:39:72:41:37:41:f9:cf:e7:da:b0:60:49:41:
82:f1:43:35:0e:3e:58:01:cb:88:7e:2e:00:89:75:
86:1b:61:9e:38:59:e2:aa:67:4d:f0:bb:d5:29:e8:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:4D:CD:06:F0:22:BE:48:83:15:3C:92:42:67:D4:C6:2B:DF:0E
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f2:7b:e1:eb:fe:d6:28:a9:92:ef:3c:50:37:85:6f:05:90:
93:d7:09:3b:c8:0c:9e:fb:81:26:1f:b6:b4:3c:3a:aa:4f:45:
64:4f:7d:01:40:2b:dd:10:31:46:e0:ee:54:55:d5:0e:22:5e:
92:fc:de:a9:af:7c:b7:9d:8a:74:5c:02:76:f7:22:34:29:16:
61:13:2c:e5:6a:79:85:80:b8:ec:aa:bd:e9:07:ed:29:c2:6d:
7e:99:9d:82:6a:fa:e3:88:0f:d9:ad:b0:e0:76:d7:67:6c:b6:
b4:b6:c2:4e:b0:89:0d:59:43:bf:13:63:10:4b:8f:6e:b0:e6:
57:13:9d:de:cf:30:7e:1c:a4:9a:7a:f0:01:21:81:34:73:f2:
de:3c:e2:32:d1:34:06:0f:d8:d6:d1:19:ff:fb:a5:97:aa:80:
31:43:27:02:80:3f:cf:d0:9e:57:cf:8f:cd:d6:3d:d8:a3:31:
6d:ab:2a:33:a7:58:1d:22:dd:f3:6a:07:d7:04:4e:2c:2f:88:
8e:e9:bc:01:19:49:bc:57:e0:df:01:99:a4:2d:ff:1d:14:d1:
4b:29:0b:d9:0e:9e:34:c4:89:80:59:42:93:07:e1:a9:57:67:
28:e3:e8:33:79:a0:02:7e:64:be:cf:c2:a2:e6:07:63:43:01:
98:81:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:20 2025 by rpki-client