Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
File: Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft (raw, json)
Hash identifier: S7W6LSgqiD0pprxVCydMGC982keTXH1z1wg0PSa2P5M=
Subject key identifier: 46:FC:F2:C4:C3:49:B0:FF:22:79:44:21:5E:A3:7C:37:07:1E:CA:59
Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
Certificate issuer: /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Certificate serial: 0199FBEBE1BA147AF3657CD85606F09DE635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
Manifest number: 03AD
Signing time: Sun 19 Oct 2025 10:02:43 +0000
Manifest this update: Sun 19 Oct 2025 10:02:43 +0000
Manifest next update: Mon 20 Oct 2025 10:02:43 +0000
Files and hashes: 1: Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl (hash: SKimX4eJuiRg+d9gZwPpWFTWM65e18g3WIiDcMR7MJ0=)
2: slKuYhirMr_9AdtUijDzLipBRL0.roa (hash: /qHjp8kupLORl1OCxD3SUcgezP/zyet0u8Wb2x+yJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e1:ba:14:7a:f3:65:7c:d8:56:06:f0:9d:e6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Validity
Not Before: Oct 19 10:02:43 2025 GMT
Not After : Oct 20 10:02:43 2025 GMT
Subject: CN=46fcf2c4c349b0ff227944215ea37c37071eca59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:05:5c:c9:70:16:6a:be:b4:86:a2:b5:6f:
86:6d:1d:94:ea:af:7f:cc:d9:08:fd:a8:c1:85:6f:
98:5c:f5:3f:1e:6a:41:d8:cd:95:c3:f1:9f:2f:b8:
b2:82:e9:94:f2:9a:23:b1:19:c2:0d:8c:36:b3:b6:
39:b5:18:0c:8f:68:1b:21:05:6d:18:2b:75:8e:78:
78:9a:bb:4a:0b:53:2f:f1:16:b9:98:a9:8a:30:b5:
05:eb:21:af:c2:67:62:cb:dd:61:f3:26:51:9e:5a:
48:1b:c1:a7:67:7e:54:9e:cc:f7:cb:e2:8b:4d:93:
b8:12:7a:00:c8:85:94:3f:52:e6:fe:2e:69:d5:0f:
67:79:c4:43:08:20:12:59:ce:09:7a:bb:e7:40:57:
21:5b:11:6f:d4:b5:0d:79:89:f4:83:12:d9:ee:bd:
b5:c9:2e:46:cb:36:e9:b5:8b:1d:a4:e1:d6:d7:17:
b5:83:70:d6:76:0b:83:23:4f:29:18:c6:fc:01:98:
f7:19:24:79:68:0a:3a:15:23:82:17:d8:f5:9b:6e:
d3:d1:40:41:b3:f1:2f:07:cd:73:29:13:f2:eb:cd:
ec:90:7b:be:53:9c:63:82:37:25:fc:0c:a9:84:ad:
37:de:78:af:01:08:c8:fd:36:ec:6a:47:cd:d2:4f:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FC:F2:C4:C3:49:B0:FF:22:79:44:21:5E:A3:7C:37:07:1E:CA:59
X509v3 Authority Key Identifier:
keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:1a:d9:0c:23:9b:b5:57:d2:27:f4:c3:85:83:dd:47:34:
c6:20:e3:2d:d4:a4:13:14:03:00:9a:a7:d0:39:d1:34:99:01:
08:a0:dc:4b:98:71:6b:78:1f:58:f2:86:ef:24:5d:b9:27:4a:
e7:9e:44:96:b3:fe:46:35:a5:5e:9b:16:d4:3d:1f:38:47:58:
1e:67:fe:3e:8b:d6:74:92:3e:d0:f8:b0:a5:96:25:be:4f:19:
82:f5:ee:eb:d1:c2:c0:c3:80:c9:ca:5b:5d:c8:77:18:4e:7d:
6b:b2:00:b9:ed:4d:2d:ac:96:b1:96:ca:07:b8:62:1d:43:90:
9c:fc:92:5b:e7:d5:20:d8:c9:9a:fa:b0:75:d6:28:ef:21:40:
08:55:f3:a2:76:27:8c:7c:34:60:d2:81:b6:e2:b2:00:61:a4:
2a:d0:39:7b:83:82:63:10:15:54:13:71:31:64:93:73:b1:3c:
f7:a5:12:c6:4d:e8:ae:c0:0e:b7:b8:8e:d3:23:8a:5c:e6:17:
5a:36:f8:c7:e5:1f:b2:2f:64:18:cb:b6:1a:e9:ef:21:64:72:
5b:26:dd:02:24:ff:1e:a5:a7:16:80:04:7a:b2:3b:42:2e:95:
ee:1f:f7:f1:2d:1b:5a:2b:c1:79:f0:76:9f:2d:0e:24:19:a2:
db:b1:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:15 2025 by rpki-client