Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
File: FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json)
Hash identifier: pe0lDk+oxWe7JOK5LTAhzL4ZESewCNxtiYIsbA3yvbM=
Subject key identifier: EE:AA:0D:B9:DF:23:19:21:2C:51:54:AD:94:29:A1:83:4B:11:1E:B0
Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Certificate serial: 019A722660F6BE87BEC1B0806A6EAB7A448A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
Manifest number: 0554
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: 5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa (hash: 2S+nSZvpWE37VjSR3BnNzUoM6C8tVAdRbE/bGKNExEc=)
2: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: u7chuoM8XvoSk9yTBbcleZ3FI4dY6d+9py9AitGl1TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:60:f6:be:87:be:c1:b0:80:6a:6e:ab:7a:44:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=eeaa0db9df2319212c5154ad9429a1834b111eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:60:d5:27:9e:11:03:f7:64:ac:96:d6:cc:
ce:b9:d3:04:60:c8:21:68:06:b9:9a:54:c7:b2:96:
ba:9f:bc:ef:67:9d:7d:7d:c8:e4:58:99:16:77:09:
84:0a:4e:f5:aa:cc:c0:8d:c8:34:8d:8f:9a:43:3d:
ef:b3:12:57:52:1b:d7:44:7c:e9:b9:32:2c:0c:5f:
ba:02:23:32:7d:cb:d3:48:e9:d3:bb:3c:9d:d3:52:
62:0c:e2:7b:86:c3:7f:12:79:26:8f:93:49:f4:e5:
f6:05:3e:d0:20:b5:aa:1f:25:34:76:57:96:da:ec:
cb:61:24:4b:04:5f:1d:ce:ed:17:a9:55:f7:5b:30:
4d:19:6d:a6:34:2d:77:db:ab:fe:17:55:6f:97:b1:
3a:ba:e4:59:b0:16:18:a9:c7:30:13:32:0a:cd:c3:
49:7e:de:4f:4e:a5:59:58:53:92:8f:36:4b:0d:50:
bb:60:0d:b6:31:a2:c2:f5:b0:0a:39:fa:63:4f:27:
f4:69:66:b6:8c:18:65:26:7e:60:a1:51:a0:6d:9c:
b2:e9:df:f0:c3:1d:d2:5c:f7:aa:4e:d7:1f:5d:60:
52:11:c0:ed:68:9c:8a:a9:88:f9:f9:7b:c4:9f:fd:
d8:92:b9:5e:0d:e5:97:4c:0c:ae:13:e8:1a:6a:cf:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AA:0D:B9:DF:23:19:21:2C:51:54:AD:94:29:A1:83:4B:11:1E:B0
X509v3 Authority Key Identifier:
keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:28:99:30:3c:6c:14:de:37:2b:a1:53:28:39:04:69:bd:3a:
97:87:1f:33:55:09:6b:d0:c6:48:da:53:9a:90:5c:85:39:3e:
85:9f:6c:df:4d:bd:1b:15:a3:37:e4:83:62:0d:82:36:59:fc:
6e:67:52:ac:bf:59:0a:76:80:31:b3:46:3f:33:97:b8:39:08:
75:e3:ac:02:b2:a2:99:a3:3e:41:9e:b6:e9:e2:b9:4a:3c:fc:
70:69:9e:24:44:bc:f5:87:9b:2a:40:ad:ee:c8:b5:a0:ee:32:
a0:b3:eb:c5:10:65:35:62:cf:d3:4e:a0:cd:86:d8:e9:d1:d5:
c2:6e:1d:e0:98:b8:50:74:b3:cf:2e:c9:34:aa:35:d3:36:46:
df:b7:55:0e:9a:b7:f2:8c:8a:05:d9:f8:92:1c:00:3e:82:06:
e7:b7:d4:f3:c7:86:1f:02:66:eb:d9:3a:6f:f4:cc:b3:a2:08:
23:0d:b0:8e:a0:2b:0b:bf:9d:ae:58:58:27:28:93:95:3a:13:
0b:a2:3d:e1:9a:b8:41:f0:2a:6d:5f:02:1d:04:d1:7d:15:30:
25:44:6b:92:96:6b:e9:41:cd:8a:7e:86:07:fd:da:b9:71:22:
21:f1:d1:d5:c8:9c:cc:18:94:5a:ca:c1:97:4a:06:80:0d:80:
5c:f3:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:59 2025 by rpki-client