Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier: xM4ByCy/YTvNhLi/Aq4slF0H3yVGHHTPtwFCbEBmD7Q=
Subject key identifier: 11:B2:15:F0:23:75:95:B5:41:B2:34:22:54:48:4F:72:51:35:1A:21
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 019A232E423C4F31B5A51991D1138F893BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 01:00:25 +0000
Manifest this update: Mon 27 Oct 2025 01:00:25 +0000
Manifest next update: Tue 28 Oct 2025 01:00:25 +0000
Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: Hv9i0DuOc+dk8V6893jgfndGnnGtw4J/jnEWlgW2eWM=)
2: wFxMftMrQqOgNqLanUvVrEPuk0E.roa (hash: Kt7E8p9gxrWDn7h3MqNJ+mao+upazAnAmbSkQF2stto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:42:3c:4f:31:b5:a5:19:91:d1:13:8f:89:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Oct 27 01:00:25 2025 GMT
Not After : Oct 28 01:00:25 2025 GMT
Subject: CN=11b215f0237595b541b2342254484f7251351a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:2c:a7:f8:a1:41:43:86:75:6a:a5:d4:b7:
60:50:be:0c:24:1c:ac:0a:d6:22:3e:cd:1f:d3:14:
24:76:df:a4:2e:f8:66:1b:32:89:57:27:d9:6f:fd:
33:2d:90:78:ca:c5:1c:86:ea:89:04:23:49:28:ff:
b1:34:f7:fe:24:9b:ed:3a:18:f2:bd:58:90:b8:bf:
e2:7b:4a:09:9d:b9:d6:d7:30:e9:dd:72:09:96:c5:
37:c1:ce:c5:94:e6:72:60:0f:39:35:ec:25:08:d8:
58:37:b7:fd:63:09:e2:3f:50:c7:7a:9e:16:08:1c:
36:8c:83:d8:f4:44:d4:f6:60:55:2d:0c:ce:ea:ad:
95:5d:65:f8:e8:4f:bb:63:c1:0a:dd:84:7d:13:ae:
83:37:8c:d9:53:b6:d8:0a:8d:08:c3:4e:3a:02:99:
1f:d8:33:c5:df:25:19:7c:7b:7f:b7:d4:3b:3e:e0:
6d:d4:11:ff:07:35:8e:e4:cc:1d:5b:db:fb:f4:87:
6d:03:ed:c8:e3:7a:51:a6:dc:af:16:ea:e7:6e:ff:
8b:f9:42:2a:d8:a1:b2:8c:6d:3a:b0:e1:f7:b9:4a:
5c:e0:24:01:4f:df:b6:79:eb:a4:09:20:bf:9e:14:
c3:13:62:26:37:5c:f0:17:ad:57:bc:98:de:96:49:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B2:15:F0:23:75:95:B5:41:B2:34:22:54:48:4F:72:51:35:1A:21
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3e:de:fa:b7:23:f2:1d:d0:96:ab:f3:f4:25:81:d8:f3:a1:
3f:94:dd:a7:9a:71:10:3f:2c:9d:21:c7:37:21:c2:3c:8c:4f:
a1:f8:5a:36:e8:c7:07:c0:6b:67:b8:da:10:76:51:01:1a:c5:
de:16:f6:d3:5f:43:04:6a:a1:2b:ba:2e:d7:9b:6f:2f:dc:d6:
67:40:2a:d5:98:a9:aa:76:2c:b7:ed:07:43:af:90:99:fb:a1:
01:22:c3:f0:a9:a3:09:99:94:14:73:fa:58:c8:b6:4c:6e:c7:
e7:f2:9c:42:a4:d6:38:cd:f6:44:76:31:4b:95:c7:40:52:42:
4a:c5:25:72:b8:66:4f:8d:f6:41:ae:86:b8:82:a9:a4:40:32:
c7:59:65:6c:70:b5:84:5d:b6:d6:3a:b5:a7:b4:f4:97:54:5a:
25:46:ec:9d:c5:0f:52:47:eb:f8:44:3c:19:93:e2:96:92:e5:
0f:cc:4d:80:fb:bf:15:8c:41:12:9f:3e:13:cd:a0:32:51:69:
ff:11:77:0f:03:88:45:79:31:dc:77:fb:dd:62:54:6a:fd:e9:
80:35:22:64:6b:0e:5a:3c:2a:88:42:6d:01:13:f0:92:d7:0b:
34:00:d1:9a:30:99:88:0e:f8:ee:7f:44:e3:f8:12:d3:20:53:
a3:52:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:22:56 2025 by rpki-client