Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
File: FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft (raw, json)
Hash identifier: XA6c1SSkU9rqXncJmUQncieJ9b472JIlv1zeL//buE8=
Subject key identifier: 53:00:B3:33:C9:93:28:3C:A8:FE:30:09:08:55:68:33:53:C7:3B:A7
Authority key identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
Certificate issuer: /CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Certificate serial: 019A718082AB5062792182AB1E4A8D2F4953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
Manifest number: D1
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: Dex_n_k-87_gKk-kcEbrOiGhsDE.roa (hash: I+5HrvSZROiMeA2q8oaiOPlDXynPqoc3wBpebl+G13s=)
2: FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl (hash: rm+3+KgDlY/FvUYccn4p7E1GWA6Gzpss+Sp4zBfWCyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:82:ab:50:62:79:21:82:ab:1e:4a:8d:2f:49:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=5300b333c993283ca8fe30090855683353c73ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:f4:c9:65:4f:77:4e:a9:54:53:b0:73:48:
24:a0:85:f5:e3:e8:dd:0b:4a:bc:af:94:4b:7d:16:
a7:dc:a6:db:ce:c8:90:9e:77:f3:5c:42:53:c0:6c:
e4:9a:0f:2c:a1:61:a6:c5:aa:98:2b:26:e8:38:36:
cb:4f:c9:b0:b7:a6:79:18:e7:9a:36:ae:bf:fc:0d:
ab:c7:bf:91:81:de:60:d5:e2:ea:40:33:51:68:aa:
47:4a:53:4f:72:41:ae:d6:ca:f0:0b:8b:e5:fc:a0:
55:ae:d1:63:28:f8:93:2a:86:36:10:73:90:29:f2:
62:21:d3:36:f5:b1:a9:8e:15:b2:18:38:ed:b4:df:
61:54:c6:46:d3:af:89:a8:69:10:77:00:28:c7:5f:
fb:0d:76:bb:00:9a:10:f1:7f:c9:98:b4:8d:c6:62:
5d:37:57:83:a4:91:fa:61:40:72:91:fd:32:67:79:
78:a0:fc:03:50:d4:77:0c:a6:7f:a1:7f:73:79:71:
81:e3:bb:a3:60:49:f5:24:ce:d0:bd:d0:67:d6:c1:
b4:bb:e5:66:24:14:3b:fa:a2:64:20:02:58:8c:6a:
04:b5:df:f7:bb:20:a2:90:6d:04:92:6f:07:9d:e9:
25:9e:3c:91:19:0e:8a:64:ed:6a:f8:6c:70:52:11:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:00:B3:33:C9:93:28:3C:A8:FE:30:09:08:55:68:33:53:C7:3B:A7
X509v3 Authority Key Identifier:
keyid:14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:34:82:4f:2a:cf:01:d3:07:62:fe:29:db:44:99:9a:17:60:
35:20:ea:12:ef:a2:5b:12:8d:c5:62:df:89:88:ef:7a:b7:17:
6c:6b:1f:76:82:61:8a:c9:42:53:78:5e:31:8d:43:9b:1f:44:
50:51:35:fa:5a:f4:2e:35:14:53:53:d2:c8:1e:4b:af:a5:fb:
56:15:29:5b:ce:f0:32:e0:8e:76:ed:36:5f:40:78:b6:62:93:
de:c5:2d:7d:d3:e3:58:52:ad:73:eb:06:95:d1:a4:df:6b:77:
c8:c1:d3:42:9d:9e:02:8b:e7:e5:36:8a:a5:9a:2c:f2:b4:c5:
9f:41:2f:3f:32:63:30:35:74:5c:f1:13:05:8a:48:37:6c:07:
69:41:92:54:ca:91:2f:af:8a:76:c1:31:80:ea:50:7d:d8:e4:
19:0f:a5:3d:22:d5:c9:c3:f1:99:54:77:38:be:51:ab:5e:e5:
bf:58:27:9a:a4:b6:76:63:6e:74:2d:c2:82:4f:7c:ad:ce:d8:
3e:43:dd:b1:52:79:73:1f:67:6e:49:4b:c9:80:c8:3f:0b:bf:
33:b2:6a:5a:1a:79:51:6f:91:09:47:42:cf:dc:6b:7c:d2:12:
d8:40:76:06:c1:11:2f:21:ee:77:3f:da:64:bb:f7:9b:f0:72:
23:d4:7f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:38 2025 by rpki-client