Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: 8o3UtKnW8NUfvZzRyPnuI/qYkMrSCL/rbdvUFEsnboQ=
Subject key identifier: C2:75:80:4A:D4:9D:D5:21:89:36:C2:11:34:CC:57:93:65:03:97:FA
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 0199FFC7AF367EF60B689003CD390935C381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 04:01:40 +0000
Manifest this update: Mon 20 Oct 2025 04:01:40 +0000
Manifest next update: Tue 21 Oct 2025 04:01:40 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: fZcAeEIfzerzFzHFYkQCIRwC4hoXLq18OTUcpXbIWCM=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:af:36:7e:f6:0b:68:90:03:cd:39:09:35:c3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Oct 20 04:01:40 2025 GMT
Not After : Oct 21 04:01:40 2025 GMT
Subject: CN=c275804ad49dd5218936c21134cc5793650397fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:b4:3d:95:00:67:10:9c:97:9c:c6:f0:bd:
a6:6c:d2:aa:ce:a2:53:aa:b8:a4:3b:8c:cb:04:ad:
59:d3:4c:28:a8:14:26:ba:a1:96:14:ec:eb:90:49:
7a:c7:b9:f3:7d:f1:31:3e:ec:3c:ea:41:09:13:20:
2c:5b:cb:1d:7b:4e:cc:15:f5:9a:c2:f8:49:1e:c8:
e9:e1:46:23:2a:91:f5:16:4b:d6:3e:ff:a8:c8:f6:
14:69:85:6b:9a:de:17:4d:37:6b:b2:47:60:f0:9d:
49:b0:66:16:02:3f:ae:a2:96:89:75:7a:d7:1a:12:
9f:9f:4a:a8:4e:0b:bb:71:ec:99:23:11:cf:0d:a2:
40:59:c1:df:bd:35:24:27:41:e0:a7:5f:1c:39:3f:
11:c6:c1:8c:28:e6:69:12:58:0a:73:8a:99:4a:d0:
48:ac:50:f4:b2:0e:17:ee:95:7a:93:06:5f:70:db:
fc:12:d5:38:17:a6:8c:6c:58:90:7b:e7:eb:62:32:
e4:6d:a1:e3:95:86:02:b5:d4:90:1f:9c:13:c1:c8:
ba:6f:0b:b7:b0:57:63:d3:63:01:db:96:27:00:15:
8d:33:83:37:49:a1:a4:0c:91:9a:02:3c:8c:2a:40:
6e:5c:ee:54:5d:ea:b6:37:bd:30:6d:11:fc:32:99:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:80:4A:D4:9D:D5:21:89:36:C2:11:34:CC:57:93:65:03:97:FA
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f4:f4:e3:ac:f4:18:c8:b5:8e:22:6c:f4:05:f8:ac:53:42:
ee:fc:6a:53:0d:90:2f:f7:47:7a:c1:1b:ff:cd:7b:3a:a4:1b:
f9:ca:29:f1:0b:c7:c7:07:39:62:0e:19:0d:05:45:c9:77:94:
4e:dc:30:aa:24:f3:87:36:75:b4:9d:58:53:1e:06:e4:75:fe:
44:09:d2:e3:b8:d5:a2:5e:7e:9c:fa:93:f4:ef:26:7a:0b:dc:
c1:53:c8:a3:c7:06:f7:3c:75:6d:4c:ba:03:ef:39:19:b0:48:
42:75:9f:48:13:a5:3d:a4:92:30:27:44:e7:8c:14:e5:ed:84:
5c:7c:12:21:72:0c:ff:a7:8e:0c:af:40:28:3b:98:6c:df:f1:
df:7e:46:26:b8:40:41:62:a3:30:51:1a:7f:e7:7a:f9:8f:da:
20:81:3b:85:3c:be:b0:55:ca:b1:b5:b6:83:a3:87:68:8f:62:
bb:48:59:cf:6c:c3:41:79:78:f5:17:1d:87:64:c2:75:0e:24:
35:0a:69:2d:03:1e:82:c0:0b:96:49:d3:12:4b:05:1f:76:eb:
c5:cf:74:6e:bb:56:c1:ec:e4:67:01:fd:1b:5d:c5:76:4e:59:
49:98:28:6d:79:c5:66:a6:83:d0:77:6f:ae:da:2a:11:c7:4b:
62:92:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:49:46 2025 by rpki-client