Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: m8HlA+PVV0C+K2d1lbZIaJTmk9CWhlyRYaCbO1N3sQs=
Subject key identifier: CA:55:01:B2:4E:01:82:CE:50:39:71:27:C1:3A:2C:90:A4:E2:0E:F4
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 019A2E20758204CCD51A21072C1A9518FC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 16FB
Signing time: Wed 29 Oct 2025 04:01:10 +0000
Manifest this update: Wed 29 Oct 2025 04:01:10 +0000
Manifest next update: Thu 30 Oct 2025 04:01:10 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: tEMRMjkJO1dDq1MnBYFG2qv/zmU0MoeI2DLTpNkmk8w=)
2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:75:82:04:cc:d5:1a:21:07:2c:1a:95:18:fc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Oct 29 04:01:10 2025 GMT
Not After : Oct 30 04:01:10 2025 GMT
Subject: CN=ca5501b24e0182ce50397127c13a2c90a4e20ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f4:02:01:ed:43:d8:75:67:b6:9e:1c:fc:45:
93:6b:bb:3b:c2:fb:97:d6:0b:62:e9:36:65:03:8f:
d5:51:97:70:4e:7b:40:dc:6c:dc:65:71:e9:6a:d7:
7c:e5:7a:7f:d1:4a:82:a0:61:01:82:4c:6e:43:65:
2c:c2:ed:8f:1f:57:ba:e5:d0:c8:dc:64:09:ed:25:
fe:91:a0:39:c3:1f:a5:a0:31:2f:30:48:e9:e2:b5:
4d:1e:8d:71:fa:ef:a8:3b:03:ac:6c:c0:ba:99:13:
73:52:30:d1:56:fa:de:ef:10:2f:fc:a7:2a:62:79:
76:9b:d4:07:df:44:ac:27:72:a9:36:0f:5f:ee:ca:
03:56:a6:a3:12:00:0a:ef:2d:5a:11:e1:c2:19:eb:
eb:3c:be:f4:d6:00:eb:61:ed:6e:8a:d3:91:87:71:
36:99:68:cb:45:90:d6:7f:0e:92:33:cc:46:d2:d4:
f9:02:b5:4b:db:87:0f:45:7a:f4:6e:aa:74:80:8b:
f5:4a:fa:bf:e8:a0:92:c6:66:73:8b:6f:a3:98:76:
39:21:be:45:25:83:45:38:fd:8d:dc:e5:b4:ca:2d:
9e:6c:0f:4c:a1:4a:0e:52:9f:7e:75:98:f9:9e:f1:
1e:86:9b:8b:d2:af:0c:e9:84:e9:2b:95:0d:0b:6a:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:55:01:B2:4E:01:82:CE:50:39:71:27:C1:3A:2C:90:A4:E2:0E:F4
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4c:22:70:49:e0:e5:e0:0a:85:f2:c1:a6:ce:06:3c:98:7c:
5c:e9:21:d7:3c:e7:04:e6:f4:a5:cf:0b:56:84:e2:68:1b:9b:
2a:72:d1:e8:40:43:69:89:c8:6b:87:23:84:cb:ad:38:70:72:
c1:57:fb:31:22:cc:a2:20:70:ab:63:ae:8c:57:45:52:3b:b3:
ae:07:ff:58:60:61:9e:1e:5a:da:93:32:49:13:10:b9:79:64:
07:04:fd:bd:7a:53:48:24:e5:62:82:75:8b:6a:e1:69:0a:c0:
ce:d7:9e:b4:60:ad:71:75:95:4b:69:32:b7:33:82:32:0a:5f:
77:07:5c:37:d0:95:5c:78:a6:c9:9e:73:c5:3f:55:c0:6b:fc:
13:c5:81:cc:2b:df:96:e4:fb:ae:9c:e6:8e:0b:36:c2:24:c3:
28:91:ab:86:98:0d:79:2b:23:c3:bd:06:d7:0b:7c:d4:46:58:
a2:59:d0:49:a3:fa:ca:61:8c:a7:03:62:ee:d9:b0:e4:5a:b9:
cf:e1:9a:ac:d1:57:ca:6b:31:4a:ce:68:5f:c3:88:e3:81:75:
71:b9:6a:69:c2:62:88:6f:54:71:8b:3e:fc:7f:95:0d:c7:16:
ac:c4:35:d9:35:5d:e5:04:1e:c1:51:0d:83:f3:d0:8a:e2:a6:
d2:d0:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:14:58 2025 by rpki-client