Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
File: FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft (raw, json)
Hash identifier: ttXMTaCj3BYUI6pkK99CFJ23YPxi3CGaOzlj2IBRjGo=
Subject key identifier: FA:74:48:FF:74:D0:61:DA:F9:6B:4C:50:C3:EA:BC:66:A7:26:BD:10
Authority key identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
Certificate issuer: /CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Certificate serial: 01992367D0E0DBB22A6485D0CA1DA02E5F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
Manifest number: 24
Signing time: Sun 07 Sep 2025 09:00:30 +0000
Manifest this update: Sun 07 Sep 2025 09:00:30 +0000
Manifest next update: Mon 08 Sep 2025 09:00:30 +0000
Files and hashes: 1: Dex_n_k-87_gKk-kcEbrOiGhsDE.roa (hash: I+5HrvSZROiMeA2q8oaiOPlDXynPqoc3wBpebl+G13s=)
2: FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl (hash: tLYDZaGynvbJQXkczkX4eWS+SZgFWoM/Y6BLqwar+Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:d0:e0:db:b2:2a:64:85:d0:ca:1d:a0:2e:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Validity
Not Before: Sep 7 09:00:30 2025 GMT
Not After : Sep 8 09:00:30 2025 GMT
Subject: CN=fa7448ff74d061daf96b4c50c3eabc66a726bd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:fd:3e:5d:66:03:43:a6:21:6b:21:ee:0f:
28:67:55:ec:5c:3b:8b:8c:fc:96:94:1e:e7:25:7d:
82:93:2d:b1:2f:9f:f1:ea:b4:b9:1a:34:d4:51:35:
9e:31:60:45:b5:af:2f:ad:f1:b2:0e:fd:09:57:56:
81:f2:9d:61:15:95:49:93:77:9f:bb:6c:57:8b:25:
49:9f:58:2c:05:e3:88:c0:a7:a6:59:3c:1c:2a:e0:
ae:44:4d:1a:02:71:a0:f9:20:ca:51:51:d9:47:34:
4a:42:ee:35:ce:bc:41:7f:cd:08:de:bd:5c:09:f4:
11:55:18:28:40:4d:bb:8d:c3:d8:eb:e3:1b:7e:ce:
df:02:7e:eb:a3:3f:f7:e1:ed:7a:4a:f0:0e:ca:d3:
97:2e:0d:7a:c3:6f:c0:67:88:9c:b8:05:d0:d2:6f:
ba:29:d1:01:46:5e:be:f8:63:35:4d:06:0d:e8:1e:
a1:54:5f:8e:e8:cd:e6:34:74:b3:6c:f5:bd:ca:f8:
13:21:d9:5e:5e:f1:7c:49:6d:8b:8a:01:2f:8e:bf:
75:31:bb:82:dc:49:ee:97:cf:a7:7c:23:83:e9:81:
62:af:c5:93:1c:93:89:cb:36:2d:4d:9a:05:9d:7b:
08:38:95:4a:45:ad:38:2d:2c:f4:b9:c8:96:14:84:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:74:48:FF:74:D0:61:DA:F9:6B:4C:50:C3:EA:BC:66:A7:26:BD:10
X509v3 Authority Key Identifier:
keyid:14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:90:9f:90:6a:ea:9f:c5:2e:a2:66:bc:3f:7a:ef:c5:78:2d:
a3:4a:7b:29:b1:6f:49:dd:3c:6c:85:fe:49:14:d1:f4:0f:9a:
2e:04:7a:f5:2c:07:c9:39:5c:bf:d0:a1:ac:1e:45:41:14:d8:
f8:e8:34:46:6c:cc:bb:79:46:68:e3:67:1d:9f:ef:2b:ba:bf:
89:57:69:3f:6b:70:72:23:70:28:f7:9e:34:c0:f6:2d:86:dc:
4e:bb:cf:67:d8:71:73:03:ac:16:47:76:11:e0:43:37:36:cc:
78:7b:b8:0a:12:8f:ba:99:b5:c7:3e:82:71:02:18:f8:64:64:
32:18:ad:f2:29:7e:87:3d:0b:4e:cb:85:17:2c:79:8c:91:7d:
af:32:e1:28:92:7e:21:ba:8c:b6:8a:8d:08:63:6d:10:82:f7:
8d:f5:89:e7:d9:a9:fb:27:bc:d5:ac:72:f2:c6:78:02:21:83:
d5:00:56:be:23:be:10:db:1d:b1:10:c8:ca:24:88:9e:35:2d:
f3:02:4f:ab:22:38:99:7b:6a:30:39:dc:34:95:18:81:44:c5:
1a:83:6f:81:de:a7:07:41:6a:5d:78:4f:d6:54:aa:41:fe:19:
a3:e6:e0:a9:80:a2:14:00:20:69:6e:46:95:7d:b6:a7:af:b7:
63:4e:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:37 2025 by rpki-client