Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: wnaz/uQd3Gear2ex65ZBqR8kzpTLigqLBjmMrP1uQ94=
Subject key identifier: DC:48:A3:50:7B:19:94:A9:6C:B7:41:7D:0C:85:AC:62:DE:22:0B:64
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 019935016829013B1778F645424AFA820855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 19:01:48 +0000
Manifest this update: Wed 10 Sep 2025 19:01:48 +0000
Manifest next update: Thu 11 Sep 2025 19:01:48 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: ToSnyRbXOeJXKCHt2831TgKw/8U+MT7yfqvHATylbnw=)
2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:68:29:01:3b:17:78:f6:45:42:4a:fa:82:08:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Sep 10 19:01:48 2025 GMT
Not After : Sep 11 19:01:48 2025 GMT
Subject: CN=dc48a3507b1994a96cb7417d0c85ac62de220b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:34:5e:db:08:c6:33:43:35:8c:6c:58:f6:
37:c1:f2:52:fe:39:5e:d1:1f:57:a6:1a:eb:a3:ab:
01:60:e4:d6:09:ec:9e:a7:ca:d0:ea:a4:cc:b9:60:
93:34:9b:d8:7a:b9:ff:e7:20:cc:eb:86:48:5d:1e:
61:ef:1e:6e:92:a1:bc:03:66:d4:1a:c2:e6:48:fe:
2b:57:ae:cf:19:10:26:ee:a6:c1:57:ff:7d:15:b0:
2d:32:09:ec:7b:3e:a0:3e:ea:49:82:80:d1:68:80:
38:ac:d1:2f:87:98:9f:93:a7:f0:5a:a8:33:02:dd:
d7:10:c6:c4:d0:29:13:dc:6d:ee:c0:1e:fd:68:1a:
a0:01:89:66:2e:15:b8:50:91:12:5c:8c:35:ad:d0:
5b:a1:73:6a:fd:21:7e:31:80:e7:e5:67:b1:35:cd:
22:19:f6:3e:49:32:b3:34:e2:58:2b:f5:f1:82:61:
23:94:f4:c5:a1:4e:05:ee:20:36:33:f7:c4:58:c5:
7d:bb:27:cb:eb:4f:da:0b:7f:60:ee:75:eb:03:bc:
cf:9c:c5:42:e3:70:df:5a:40:12:04:d9:bd:98:db:
14:5c:20:12:10:44:b7:09:a3:0f:17:b1:9b:96:a6:
52:4a:65:d6:a3:61:bf:d2:5f:88:33:a9:8b:1e:4d:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:48:A3:50:7B:19:94:A9:6C:B7:41:7D:0C:85:AC:62:DE:22:0B:64
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8e:07:8f:da:0b:c2:b5:34:6f:c2:73:ab:cf:da:01:3e:bb:
05:ce:c4:39:c5:69:5c:e1:cd:34:b0:d8:07:9c:3a:f5:77:13:
f0:e3:80:86:47:8c:5d:c4:ec:a2:28:14:e1:5b:f0:e0:be:f2:
cb:aa:63:e2:01:08:2e:9a:82:58:2f:82:10:51:7d:64:eb:b2:
98:a4:d4:ee:91:24:d2:e3:64:3a:ab:19:71:43:7c:13:72:cf:
fc:d2:a7:57:c6:f7:d3:21:25:3f:34:63:3a:6b:9d:fb:22:44:
87:88:7e:98:75:0c:66:12:38:ad:64:d5:4a:57:b1:1c:90:4e:
1f:45:20:35:a4:a0:fa:bc:ad:51:3f:d6:27:ca:09:15:7a:e5:
ec:b5:94:c3:22:61:77:28:13:95:22:05:e8:28:7b:dd:01:24:
a7:fe:37:29:5b:f8:0e:6c:76:47:46:6b:ca:ee:24:ab:aa:73:
fb:41:a8:78:d4:8f:14:97:e6:79:79:29:53:52:ad:45:89:f1:
02:bf:4a:94:65:de:5b:d2:c7:7f:67:b0:03:1f:07:19:de:37:
61:1e:9d:b3:8f:a1:b8:06:53:b1:24:b2:b1:c7:4b:1e:60:18:
bb:58:fe:86:a7:6f:26:b5:a9:f0:e7:7f:b4:ae:d6:7c:21:85:
5d:bb:0b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:04:29 2025 by rpki-client