Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
File: FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft (raw, json)
Hash identifier: idN6V5o8uNGl36zUFm0m6Mkf40PJzGtyT2HtrXtpAxY=
Subject key identifier: BE:A0:92:3C:54:F7:9C:FD:61:16:28:2A:6B:5A:80:EA:72:EC:2B:5C
Authority key identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
Certificate issuer: /CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Certificate serial: 0199FDD8C1DDB175E8F4C236D09D6BD62072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
Manifest number: 0B85
Signing time: Sun 19 Oct 2025 19:01:04 +0000
Manifest this update: Sun 19 Oct 2025 19:01:04 +0000
Manifest next update: Mon 20 Oct 2025 19:01:04 +0000
Files and hashes: 1: FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl (hash: pB+8Ip5Ccw4I4w/PPOCponIhT+DxX9tausAusfQKCk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c1:dd:b1:75:e8:f4:c2:36:d0:9d:6b:d6:20:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Validity
Not Before: Oct 19 19:01:04 2025 GMT
Not After : Oct 20 19:01:04 2025 GMT
Subject: CN=bea0923c54f79cfd6116282a6b5a80ea72ec2b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:35:be:08:1d:2b:a2:dd:44:63:7b:09:70:
fa:cb:0b:40:07:8b:17:e1:ff:66:c6:a8:5a:dc:99:
90:95:e3:2b:a8:a0:a9:2d:62:56:46:eb:87:74:de:
08:83:50:a7:a4:8a:f9:c9:1b:df:22:25:ca:ab:83:
bf:b8:ce:d9:75:7b:56:5f:95:d6:b4:36:85:75:be:
9d:4d:6c:5c:b2:22:c8:d8:13:d9:2a:c3:96:f3:76:
67:7e:57:2e:5c:b5:3d:39:36:3c:70:08:ec:1e:a1:
c5:90:94:ff:e6:b5:45:e7:2e:e5:bc:75:f2:92:ae:
87:c1:57:ac:91:86:f7:83:56:42:db:fd:be:e2:ad:
dd:ed:04:60:2c:d0:a7:d0:e4:b9:17:28:cf:05:3d:
47:84:8b:9d:6a:db:f7:2a:f4:51:0f:f2:7c:bc:e2:
c5:3f:24:8e:d7:2a:f8:ae:f8:3d:d6:c2:45:0d:7b:
d7:44:53:16:2e:ba:30:ef:f7:73:49:2d:b0:7c:74:
aa:d5:e2:0e:4d:8a:73:72:3c:0a:81:e6:e6:b5:a4:
88:2b:fd:9b:4d:0d:a2:f1:c3:46:ff:89:24:92:b6:
1a:e4:c5:64:64:92:8a:a0:f6:00:ea:37:8e:e6:4c:
a6:8c:01:e7:f2:d0:10:c4:90:da:64:ce:35:43:7a:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:92:3C:54:F7:9C:FD:61:16:28:2A:6B:5A:80:EA:72:EC:2B:5C
X509v3 Authority Key Identifier:
keyid:14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:db:a8:61:48:8d:10:fe:8c:27:2d:6d:70:2e:8a:fb:14:51:
50:85:3f:55:ed:93:39:4d:8c:7d:26:fe:f4:cd:7d:e4:1b:59:
4a:da:1c:6d:54:71:1f:1d:72:1f:e1:c0:00:8d:af:5b:77:a5:
58:d3:23:48:d3:11:a2:8f:1c:01:2d:87:ff:3c:ee:4e:12:2a:
dd:c0:22:38:cd:26:8d:0b:e8:2f:cc:2e:27:06:24:e3:e9:e4:
58:8d:65:e2:b8:30:56:eb:6b:97:95:2b:c1:65:3a:26:0d:41:
eb:da:9e:c3:f8:f5:14:f7:d7:89:c5:ba:eb:2c:9e:53:cc:fb:
53:0d:06:be:18:b3:84:ae:19:0f:e7:ef:26:03:ce:79:84:51:
43:dd:29:0e:e3:70:27:e9:b0:1c:ce:39:aa:e8:b2:7a:25:5b:
d6:5b:51:31:cb:1b:90:91:85:cb:00:74:a3:37:81:d3:86:68:
45:cb:35:4d:6e:4d:99:70:00:6f:f4:b2:2e:a7:d8:c9:7b:af:
18:f6:41:58:fc:24:e1:b1:2d:fc:93:e1:b9:f5:8c:d7:10:95:
e8:9c:3d:5d:b0:9b:24:65:70:d4:d4:1f:2f:bf:70:0c:64:b0:
65:96:84:1a:ca:1f:92:b6:2a:b4:72:2c:0e:f9:93:07:f1:9c:
02:19:d2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:04 2025 by rpki-client