
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: +eXAAMHmHRpe9+KHavrL0rf5K9E1Joa9BjlhCLiphRo=
Subject key identifier: D0:F9:CF:57:88:C4:FA:61:8E:02:D3:B4:A2:F4:AF:6A:78:BC:32:FA
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 0199FAD802DC007AEB04EDD9269705D23D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 05:01:24 +0000
Manifest this update: Sun 19 Oct 2025 05:01:24 +0000
Manifest next update: Mon 20 Oct 2025 05:01:24 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: YuQhM8RwLdnBaCoqXIXMHNR4cUnOUPlPtCuhuGVCOKI=)
2: oc8JdJXemfH1vBBwa9gjuC7ZzP8.roa (hash: uxtVzPlkNCLudyDBzCoWRWmDXs6tfGV7X2Z5QJKK/Eg=)
3: r4X2HvAwh5ygol1cL2nGNDVz3U4.roa (hash: 7aCXdpb3SzbFP3HJ9KQNb5y78LcqzI5vEIV6FBttc2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:02:dc:00:7a:eb:04:ed:d9:26:97:05:d2:3d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Oct 19 05:01:24 2025 GMT
Not After : Oct 20 05:01:24 2025 GMT
Subject: CN=d0f9cf5788c4fa618e02d3b4a2f4af6a78bc32fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:9e:74:b3:1c:f2:c7:35:3f:c5:7f:78:24:
9c:85:27:08:da:97:3c:00:26:92:9e:1b:8b:05:70:
72:74:80:40:a8:36:8a:b7:db:34:0e:19:6a:60:72:
17:14:30:cd:5d:b5:f6:66:c1:a2:56:08:75:11:11:
65:c6:ba:6d:c8:69:d8:d3:1c:ae:6f:48:31:33:f8:
10:d9:01:8e:3a:0f:12:20:f4:2a:4d:1a:d1:06:96:
6d:16:cc:b6:24:11:38:9a:c5:7a:59:4d:26:c7:ff:
24:c9:00:39:ff:39:e5:0e:73:d5:09:77:0a:40:ab:
03:fd:16:04:85:4f:58:e8:d5:11:88:2d:fe:5b:49:
6f:92:83:be:ac:af:a7:4b:48:b6:57:ca:e2:15:e0:
19:88:44:d8:36:dd:b3:d0:9c:c9:91:90:d8:c0:06:
1b:cb:e2:7c:41:c9:e0:9e:2c:fe:e2:7d:f6:2f:a8:
c9:8f:1d:f0:b5:c1:12:7a:88:10:cc:78:a4:d0:cf:
87:26:d5:df:a3:67:c9:4c:65:9e:e0:79:01:3b:c5:
89:6c:6a:a2:82:63:ec:b9:96:96:57:41:79:0e:bb:
2b:f4:f0:96:60:d3:0e:6b:ca:bc:68:3c:07:04:e5:
63:b4:e0:03:68:6d:a7:df:dc:7c:27:0a:7b:41:c7:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:CF:57:88:C4:FA:61:8E:02:D3:B4:A2:F4:AF:6A:78:BC:32:FA
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1d:30:bb:3e:bb:01:8e:bf:47:9d:e8:b6:73:58:21:44:6d:
91:81:9c:57:76:ba:9e:50:d8:04:04:66:18:fd:a2:7b:71:1c:
fe:e6:f6:47:8a:00:f6:c4:48:1b:3d:d8:b6:6a:a4:0a:7d:d5:
b1:62:c6:47:07:5c:6f:e5:76:65:21:c6:99:b2:43:e3:4e:2c:
fb:c1:f6:ea:14:61:9c:50:57:37:d7:2f:aa:c5:cd:60:1b:74:
57:12:f0:db:69:ba:a7:a7:30:8a:96:0e:1a:0d:0c:c0:d4:c2:
6e:af:e8:7b:ed:49:8e:7a:f2:19:24:2f:e7:41:03:24:08:29:
e1:78:5c:1e:f6:a0:94:15:a5:b0:73:aa:24:e3:5e:85:df:da:
85:3f:0a:23:52:32:0d:b3:36:b4:62:c1:69:b4:8a:97:20:0a:
4b:a8:90:1b:7e:00:dd:21:a9:af:38:28:81:d1:06:3d:b7:57:
50:ad:bb:e4:42:c2:ab:bd:ca:f5:ca:a1:38:22:cf:e2:aa:32:
29:b4:65:5c:8a:03:b9:44:d2:b9:70:aa:ae:ee:97:bd:7d:92:
22:e1:40:e0:db:08:08:1b:73:ec:c9:67:19:65:ef:fe:5b:e9:
a6:5a:6f:b8:99:6a:19:66:84:ec:af:bf:44:f0:1f:12:7d:9c:
86:0e:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:20 2025 by rpki-client