Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
File: FCKHkIfdKSaAJjvDlOMch1lyLZA.mft (raw, json)
Hash identifier: pq6MnrtI6XM6zA6nnMEX2GOthUN6teCwua72L76u3V8=
Subject key identifier: EF:86:AE:7A:B5:67:E2:A3:8B:31:1B:79:84:EC:B6:00:AD:86:BB:86
Authority key identifier: 14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
Certificate issuer: /CN=1422879087dd292680263bc394e31c8759722d90
Certificate serial: 0199FF2267EC9EC942115E0BB09EE9B14080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
Manifest number: A8
Signing time: Mon 20 Oct 2025 01:01:08 +0000
Manifest this update: Mon 20 Oct 2025 01:01:08 +0000
Manifest next update: Tue 21 Oct 2025 01:01:08 +0000
Files and hashes: 1: FCKHkIfdKSaAJjvDlOMch1lyLZA.crl (hash: Xka11AIciEC4e0CwoukAq5t1C5WlxcgLmq7yKwkGEYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:67:ec:9e:c9:42:11:5e:0b:b0:9e:e9:b1:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1422879087dd292680263bc394e31c8759722d90
Validity
Not Before: Oct 20 01:01:08 2025 GMT
Not After : Oct 21 01:01:08 2025 GMT
Subject: CN=ef86ae7ab567e2a38b311b7984ecb600ad86bb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:c6:1c:e3:5f:b3:3c:d5:7b:02:4c:51:36:
98:93:12:c5:01:54:17:e5:69:63:1b:2a:b1:fc:5e:
83:f9:a2:b4:01:f7:cd:76:ac:89:40:53:88:34:28:
1b:39:06:af:59:b6:17:70:2d:2e:09:87:71:b6:7e:
6e:f9:cc:f1:db:47:d4:5e:ef:1e:3f:a7:e1:ea:4e:
67:8d:4a:9c:56:86:fe:36:52:5e:70:0f:ee:d2:19:
79:e3:a1:22:06:fb:03:d6:65:54:a0:26:36:cd:67:
32:b2:51:56:97:cf:2f:04:85:67:b7:15:d3:56:33:
04:98:cf:52:0e:fc:c8:49:42:68:1a:93:d7:07:68:
ce:3e:cf:b2:a6:08:56:4a:37:92:b5:c0:69:ed:00:
7a:a5:6b:96:a6:34:87:1f:bc:28:61:25:9a:f8:79:
75:9a:08:d4:bb:e6:a3:e1:33:72:11:34:1f:ed:ff:
c0:ee:85:ed:f5:ea:cc:76:d4:e8:43:b8:8e:a7:42:
76:85:a1:0a:79:f8:55:30:fe:ef:00:96:d3:65:84:
77:de:dd:b8:fb:cf:c0:6d:26:e2:c2:42:c3:6c:98:
24:35:a5:f0:c2:78:54:28:0e:0a:c3:f9:7e:ea:3b:
32:29:9d:cf:46:a9:fd:63:45:c9:89:1c:8c:f0:a3:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:86:AE:7A:B5:67:E2:A3:8B:31:1B:79:84:EC:B6:00:AD:86:BB:86
X509v3 Authority Key Identifier:
keyid:14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e6:9b:0c:ee:49:46:7d:c9:b9:97:b5:51:ad:ae:84:1d:f1:
1b:ba:36:b0:5b:a9:6e:a2:c7:a5:9d:99:45:31:b7:1e:f1:b0:
df:cc:14:34:45:d9:b0:14:0f:f6:0b:16:9b:62:b0:3e:74:f6:
55:7a:c0:c7:2e:ff:5a:f2:74:76:1f:c4:13:ad:b2:0d:4b:3b:
f9:40:b4:9c:d9:83:fc:b5:79:1a:96:d3:20:c1:9e:aa:be:29:
c4:08:0c:82:fb:93:84:93:fc:4a:60:92:ee:da:4d:91:d4:d4:
1b:1f:fb:13:c3:2e:2c:1f:2a:6d:0e:7f:ab:b2:07:13:7e:71:
53:c0:79:a8:39:e5:1d:79:ce:47:9b:a8:bc:8c:26:54:e3:d1:
d2:7e:34:41:2c:4c:15:b0:46:28:53:de:48:81:fd:c6:16:85:
c8:61:a1:96:f9:5c:33:9f:6f:15:70:bf:3a:9e:da:2f:17:14:
67:aa:02:54:84:70:a6:88:e8:a6:df:65:51:1c:4a:10:cd:84:
24:79:61:71:cf:54:4c:dd:15:66:5c:87:b9:7a:99:a6:60:3a:
28:0c:09:48:42:3d:1d:2b:d6:c7:0a:95:79:df:91:34:fb:40:
4c:13:29:0b:8d:72:d8:a3:56:f7:90:ab:11:df:df:03:f7:21:
bb:42:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:45 2025 by rpki-client