Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier: CgtuWnz5Orz7oolcd2KOL7RB0Lmcj/bIMT0hc+JklVU=
Subject key identifier: 84:23:0B:11:F2:53:D5:7D:6B:89:BB:5C:7A:FC:EA:55:70:57:A0:21
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 019A7293DB2A015C9622CA33E2C577A21E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number: 0A2A
Signing time: Tue 11 Nov 2025 11:01:23 +0000
Manifest this update: Tue 11 Nov 2025 11:01:23 +0000
Manifest next update: Wed 12 Nov 2025 11:01:23 +0000
Files and hashes: 1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: hSvFGudJEXRttgv7A6NXdUe/Azs5sXc3WH4mCOsaduQ=)
2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:db:2a:01:5c:96:22:ca:33:e2:c5:77:a2:1e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Nov 11 11:01:23 2025 GMT
Not After : Nov 12 11:01:23 2025 GMT
Subject: CN=84230b11f253d57d6b89bb5c7afcea557057a021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:11:ff:e8:30:db:91:46:5e:e8:b6:bd:0d:
b1:78:84:78:87:7c:c0:9d:20:65:ce:8e:a2:14:d9:
38:3d:69:ec:96:da:1d:5e:4d:c7:58:0f:2d:44:e7:
a1:15:ea:cb:bb:52:eb:08:99:70:a5:df:4d:51:cf:
0f:25:87:e5:8b:d6:a3:c4:c1:a4:24:42:de:6d:c6:
7c:99:23:81:b9:31:d6:d5:83:21:8e:4e:a8:fb:25:
13:e5:eb:40:4a:f9:57:7a:9f:27:9d:8a:89:ff:08:
ca:e0:cd:11:a8:d5:3f:7f:88:f6:a8:78:8f:db:6b:
dd:83:f9:80:1b:14:7e:dc:9c:7a:02:5a:02:df:28:
16:c2:c2:6f:b4:c0:c3:a4:4a:34:6a:ae:38:73:b9:
77:7d:96:f9:57:c0:bb:0d:7c:e9:32:ea:6f:c7:20:
82:c7:ed:13:79:bf:36:bd:df:4b:58:5f:58:4e:df:
b6:aa:2a:8a:3b:f5:8d:a5:e3:f9:96:06:67:c4:4e:
85:a5:6e:45:3b:4e:ae:81:0c:37:e9:ce:0a:4e:05:
89:ed:ca:ab:84:68:68:3f:8c:97:72:e7:5f:a6:51:
2c:3c:34:b6:65:a6:9e:90:a1:95:60:59:3a:c0:8e:
77:66:3a:8d:68:c0:91:e9:4f:44:af:6a:ba:0d:b7:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:23:0B:11:F2:53:D5:7D:6B:89:BB:5C:7A:FC:EA:55:70:57:A0:21
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:23:da:08:83:e4:98:a0:1c:c9:79:1c:3c:21:87:96:64:
65:2d:ad:3a:6e:5c:ef:96:47:00:64:63:f1:68:1a:f5:b8:55:
26:77:c4:cc:cf:01:f3:be:ea:2d:69:f4:79:2c:91:4b:72:2a:
8e:39:e1:2d:c6:ce:b8:cd:f2:7d:93:ff:88:cd:4b:ae:fa:19:
cc:10:c5:72:48:f4:80:d9:69:4a:31:8e:93:3d:29:24:95:26:
f6:f6:ee:a4:3e:5c:f6:38:bc:69:1a:4f:25:19:10:7c:95:a6:
88:8d:d7:bd:f8:c9:63:ef:00:f3:69:49:66:69:e2:22:e5:b1:
92:03:b1:4c:47:6e:53:0b:1d:62:ec:d9:71:e1:fb:c9:b3:2b:
99:5f:cc:d9:36:9b:e9:9e:e1:56:de:2c:76:cf:cd:f9:33:81:
da:6a:14:72:9a:12:50:4b:65:a9:40:37:a4:5f:7e:41:ca:2f:
2a:d9:59:e9:56:e0:dd:b2:54:4c:7d:31:c9:fd:67:db:fc:35:
db:07:f9:36:9f:7b:05:3a:cc:11:75:9a:dc:0c:4d:90:bb:d6:
c3:92:f7:54:c8:65:a8:5f:37:f0:71:0e:0c:eb:ed:4d:c0:1f:
4d:98:a4:67:33:a7:ae:5e:e0:3b:ea:b3:31:6e:08:a0:3a:4c:
18:3b:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:02 2025 by rpki-client