Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: ao2laD14fsO2IgHUPfLenm5RDTrhqKWBlG+qJNY7ECE=
Subject key identifier: 43:87:C4:9A:EB:BB:9B:6C:FD:C5:D3:F4:04:FF:3A:A0:D1:CD:CE:76
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 0199FD6B215AEB1B77504A8E7B5781124D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 1627
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 17:01:20 +0000
Manifest next update: Mon 20 Oct 2025 17:01:20 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: B18DFqYSeW1qTNl/KbOr7VB67ta8/vt0RB2X7hTQWGA=)
2: Jan-36Lo7cls_qlYXAYwCHL-IM0.roa (hash: 9QKHqIJMi/8WyyfdqnXT2xQCCgDbraKMeYqVzfnxL6A=)
3: rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa (hash: 4ZmwtT19+5Iz0mku0LqIMr+TT72kqcPqLFHR2qlNxGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:21:5a:eb:1b:77:50:4a:8e:7b:57:81:12:4d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Oct 19 17:01:20 2025 GMT
Not After : Oct 20 17:01:20 2025 GMT
Subject: CN=4387c49aebbb9b6cfdc5d3f404ff3aa0d1cdce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:53:71:61:14:07:8a:12:18:36:aa:88:22:
d4:30:ba:03:e5:b5:bc:fd:6b:ab:64:b1:7a:e9:c9:
cd:34:e7:eb:49:5d:e5:e8:0d:c1:40:5b:e0:f9:f9:
00:45:20:2d:dc:0f:fc:01:99:9f:85:14:63:7b:74:
83:ff:b4:42:fe:1a:63:cb:c8:1f:47:19:60:2d:9d:
9e:7a:2c:e8:ee:12:b1:4c:6e:2e:33:60:d8:d3:74:
b9:7b:45:52:5e:5c:02:6e:6b:c4:83:91:11:02:0c:
1c:27:70:94:7f:81:59:ef:3d:5f:69:83:0e:e6:de:
96:54:98:45:5a:77:24:c0:f9:d5:f4:88:05:5f:8f:
75:48:e9:bd:54:42:0e:bb:0f:1e:29:d1:c7:8d:fc:
30:7c:0d:9b:36:1c:70:ee:f2:e7:85:0a:3f:03:d5:
97:f9:d5:b9:7e:e1:9a:de:3c:78:34:31:91:14:f1:
f6:b3:83:4a:6a:96:fb:cd:4d:03:eb:b4:8c:2d:07:
f2:85:29:67:fd:f0:25:00:28:77:b3:3f:b4:47:d2:
ff:0b:5b:be:fd:1a:33:1c:19:78:37:e8:28:7a:67:
3b:4d:2e:34:d2:e5:2e:9b:47:fb:4a:2d:e1:4e:16:
dd:20:b5:7f:3c:37:05:79:f1:c6:de:a2:c4:b3:84:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:87:C4:9A:EB:BB:9B:6C:FD:C5:D3:F4:04:FF:3A:A0:D1:CD:CE:76
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2a:32:55:e8:6c:57:c0:2d:95:63:ac:77:a3:80:fb:db:4b:
ad:57:bc:99:ba:10:67:41:15:a9:6f:38:bc:ed:30:fa:70:08:
c7:d4:1c:34:1f:1c:54:31:86:2a:ad:35:69:8b:66:5a:a1:1e:
97:f1:77:8d:4a:5c:6b:9a:3e:59:c2:a5:0a:fe:d7:1d:0f:97:
b7:87:dd:68:43:e5:79:e8:fb:d6:e7:79:ec:9f:fc:15:b9:b4:
a5:bb:9f:21:4e:9a:59:23:86:8a:de:42:18:9c:77:4b:e5:09:
6b:be:20:42:de:e9:e1:25:99:3c:c7:81:31:df:fc:05:35:00:
1e:5c:e9:12:af:84:82:51:e9:b7:e3:27:ed:0d:bc:4b:7a:3a:
12:bb:a7:35:02:17:29:9b:57:35:34:97:b8:36:0e:3c:32:3e:
a8:60:bf:e9:ea:0d:a2:67:c7:6b:78:ce:8b:40:8b:5d:a4:43:
59:fe:09:eb:e8:0c:77:dd:64:f4:a0:ba:31:b6:9c:d5:6b:c2:
17:c1:1d:f9:d6:14:e5:75:64:5d:c1:27:d9:31:da:c8:f8:14:
ec:40:0c:0e:ed:44:d9:9e:98:c8:00:c5:13:05:66:8b:ad:e4:
46:65:3a:24:83:38:9b:b2:ee:ee:2a:9e:64:f5:bb:a6:ce:34:
a7:60:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:38 2025 by rpki-client