Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: 1kZRfIU5XVOYNkTrtRTBqE1jdSELwHKyjvkkMAgcqdQ=
Subject key identifier: 85:76:D8:F0:5F:5E:91:07:6C:C5:3D:25:76:F7:6C:34:EC:92:5C:2C
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 019A2D7B46BE3C1A4DF94586F7753EACA247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 16FD
Signing time: Wed 29 Oct 2025 01:00:45 +0000
Manifest this update: Wed 29 Oct 2025 01:00:45 +0000
Manifest next update: Thu 30 Oct 2025 01:00:45 +0000
Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: hWNHWOT2QtpulxPTPZxSUyyMislV4+yr67vc+Wbq7q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7b:46:be:3c:1a:4d:f9:45:86:f7:75:3e:ac:a2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Oct 29 01:00:45 2025 GMT
Not After : Oct 30 01:00:45 2025 GMT
Subject: CN=8576d8f05f5e91076cc53d2576f76c34ec925c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:9c:ee:a0:c7:5a:92:43:d6:31:bb:7b:17:
fc:fb:02:34:5c:d0:da:82:06:7f:ff:cb:3a:06:93:
e2:cc:b0:4c:0a:3e:1f:6f:df:9b:0f:ad:42:d5:74:
2b:aa:39:e3:d4:ec:97:3d:5f:02:14:7d:38:2f:a3:
aa:db:49:1d:cf:51:24:d6:11:fe:d0:ba:d5:2a:54:
01:75:fa:92:79:d2:ad:4f:66:98:90:c3:42:14:1c:
c3:50:8c:d6:9f:3e:3c:35:d1:99:1c:84:b2:09:9c:
c5:f5:0f:f2:15:81:ed:42:4c:df:ea:5d:b6:cd:40:
18:9a:41:69:96:81:c3:59:16:4b:b1:cf:74:88:1a:
64:28:90:9e:31:40:d0:04:1b:ba:0d:58:1f:47:1f:
e1:65:f5:a9:e4:63:81:2e:fd:b4:f0:2b:98:37:27:
a7:f3:3e:15:43:1d:b8:89:01:69:fa:21:a4:b1:82:
0f:4c:dc:a5:8d:ef:77:ae:3a:06:82:be:02:d8:93:
22:8e:74:18:e8:87:43:15:5a:66:66:32:50:06:53:
ac:19:7b:80:f1:eb:97:1d:37:4c:2b:c3:c2:3d:a1:
57:50:74:d4:f9:3e:9e:5a:74:7b:a9:12:24:5a:c3:
0f:dc:8a:f8:fa:ef:c0:87:e3:ec:78:2e:04:b7:4e:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:76:D8:F0:5F:5E:91:07:6C:C5:3D:25:76:F7:6C:34:EC:92:5C:2C
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e5:09:44:d8:7f:43:7b:b5:d6:dc:4c:43:f3:a6:69:20:d0:
5d:07:37:28:e1:58:7f:f3:97:b1:aa:f3:df:06:8e:1d:85:0e:
66:4c:0d:61:7f:73:4c:6a:9f:e3:aa:6c:aa:45:52:bc:7e:a0:
ed:46:7b:8b:c7:8d:3d:40:c9:ab:fc:b1:a1:3e:c8:4d:10:79:
4a:f3:60:3b:c6:b0:e8:c8:58:f4:7b:0d:92:7f:ea:b9:0c:14:
e1:3d:f0:ec:d1:57:24:98:ca:8b:e1:b1:d1:60:f3:90:9b:e6:
c2:27:51:bc:d6:ea:21:04:aa:a3:55:20:7e:2b:32:aa:c6:9f:
46:2c:0c:e0:d1:5e:4f:c9:6a:eb:ef:d3:a3:4e:bf:21:9b:89:
47:25:43:ea:18:3d:32:87:71:05:c1:4f:e8:95:42:96:bc:b2:
0d:4a:06:75:fd:a6:35:e5:50:4c:44:c3:1b:06:0c:a8:15:f2:
ce:3c:4a:a2:cd:cf:e4:0f:9c:0a:9e:6a:96:8c:8e:b6:d6:1d:
2e:72:e4:25:0a:d4:56:cd:c6:34:0a:5b:a3:f0:61:d0:42:0c:
73:61:4b:5d:65:63:7c:2e:d9:9a:47:8f:e1:26:d0:80:77:71:
87:df:67:57:05:ca:6c:73:82:97:b0:23:7d:b7:59:29:03:20:
50:34:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:32:19 2025 by rpki-client