Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
File: FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json)
Hash identifier: SDcUWz4ltID8AY6yYrk5LT95ZlIdgYOSPR7gK0+Z9Es=
Subject key identifier: 96:94:0C:1A:3A:44:04:F1:24:97:7E:65:25:30:8E:06:86:14:4A:BE
Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Certificate serial: 019A7226047BE06C91C1CCA263BCD61EFF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
Manifest number: 0B17
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: C5kS-eXFEoRGhSGKrj1aky_A-YU.roa (hash: 0Cexvh0L+qwpqym6REc7bvetIUnS6MiKORaDRSgSxQo=)
2: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: mQ8XTw5WhiZHT4EypTygx4WEN/qb9k/5/KnH87Q2bG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:04:7b:e0:6c:91:c1:cc:a2:63:bc:d6:1e:ff:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=96940c1a3a4404f124977e6525308e0686144abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:1b:95:9a:c4:4f:64:19:ae:28:78:6c:9f:
9b:35:b3:5f:8b:a3:2d:76:e6:b1:fd:de:a8:76:53:
b2:5a:47:11:53:a1:23:c7:ac:12:07:70:96:30:11:
35:cb:5a:28:45:67:d3:fe:44:00:16:5f:c0:01:a6:
21:1b:43:2d:24:ac:fa:25:b5:65:4c:b6:fc:21:42:
7a:13:87:b0:12:25:9c:ea:08:85:e1:32:f5:54:55:
40:17:56:98:2e:f9:aa:d4:d3:71:bf:bf:ec:2c:5a:
f2:be:1c:e5:4c:89:67:26:a7:ea:48:ec:4b:5e:fd:
57:6c:73:3a:12:37:55:2b:2a:a9:08:4a:8b:ea:72:
d1:21:00:92:db:9c:26:61:2a:f8:93:58:93:55:ae:
8b:e9:32:39:ce:ef:91:0a:e3:3f:ea:b5:ba:cd:ab:
c6:b8:05:46:7a:6f:eb:47:2c:15:da:fb:1a:cc:bd:
d4:94:d6:28:f7:10:80:0e:d0:08:7b:bc:5d:b6:5b:
62:d6:e4:ee:24:90:6e:40:18:bb:04:ec:5e:fa:16:
ed:52:8f:17:b5:87:54:af:01:80:64:c1:e4:27:0c:
4b:22:da:21:16:fc:fe:7c:b6:0a:5a:73:10:a8:b2:
54:ac:f6:a9:22:a2:b1:ee:62:04:f8:4e:0d:a1:1d:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:94:0C:1A:3A:44:04:F1:24:97:7E:65:25:30:8E:06:86:14:4A:BE
X509v3 Authority Key Identifier:
keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:19:57:a0:b7:e8:fb:54:fe:64:96:0f:af:5b:34:93:bc:ec:
bc:2f:c9:30:d0:24:44:47:b1:14:48:5e:49:81:a7:60:ce:14:
cb:c6:12:e7:fd:4a:19:eb:be:79:81:e2:6a:fc:df:43:91:f3:
9f:a5:9f:1f:9d:05:81:21:84:67:95:9e:62:a0:5b:fc:72:43:
89:c8:c6:ee:f5:ed:f3:5a:f0:e1:d9:d1:5f:bd:e0:cc:84:86:
55:fa:77:d8:15:49:a6:6a:53:a7:25:61:3e:19:d2:15:92:95:
be:b3:0b:db:a1:f0:df:ff:a2:9c:af:0d:92:8f:b3:15:3a:7f:
ae:c6:ba:e9:0d:39:85:25:c5:26:2f:90:b1:9b:81:c2:b5:d8:
98:e6:ec:8f:50:5f:e2:c8:3b:c6:d9:3d:6e:1e:d3:76:de:20:
dc:23:e1:4c:1d:f5:98:66:7b:01:8f:fc:6b:09:8b:9d:9e:7f:
e8:59:81:53:5f:41:79:27:36:31:10:dc:d8:96:e4:89:84:e5:
b8:79:3c:b8:00:65:6f:f9:d0:f3:38:f0:ca:e7:86:aa:f7:7e:
09:96:c8:fc:1f:77:88:06:2c:4b:5c:13:e2:54:37:f6:fc:8e:
1a:01:54:b1:14:e9:35:f1:54:23:ec:09:a5:2c:f9:92:94:11:
e3:01:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:42 2025 by rpki-client