Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: 1M8Fne89pOxfPEuJpTaamip6OINo0wx73KaRtxpPyi8=
Subject key identifier: CB:E1:28:FD:52:E1:1D:58:0F:87:90:21:B3:17:65:D3:66:35:07:47
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 0199FBEAC1242083E4173554D094DEED262D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: CX/kiKrE8Oepc2K/EyRMhffEJBm8thYjBc1+BNlyvi0=)
2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c1:24:20:83:e4:17:35:54:d0:94:de:ed:26:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=cbe128fd52e11d580f879021b31765d366350747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:a4:6c:9b:05:86:0b:a6:b2:9b:0d:cc:78:
b1:48:d2:fd:81:6f:66:ac:a4:dc:28:f1:5b:fb:90:
76:b3:9c:61:ed:52:b7:b9:43:a4:63:9f:5f:f3:7e:
83:7a:dc:3a:02:27:18:f1:4b:da:2c:e9:da:cb:83:
f2:59:c3:bb:8c:aa:dd:80:c5:ec:e0:4c:af:9f:9f:
58:4a:a9:64:9d:71:5d:e2:1e:75:24:cb:46:02:10:
bb:3a:64:ed:62:25:2e:b2:ee:0d:fe:b8:b1:ca:dd:
e4:5b:19:d3:e9:1b:8e:d6:f3:f5:da:c5:18:46:9b:
dd:75:9e:5d:f0:80:03:49:77:72:7d:7a:30:98:a3:
09:ed:73:dc:e2:51:f2:0a:e0:da:25:40:07:54:e5:
dd:11:60:27:9e:a3:fe:0d:c9:08:0b:e4:50:bf:35:
62:ba:fc:f0:93:48:0d:71:48:25:45:d0:cc:07:67:
c7:cc:b2:83:f8:ec:14:1c:90:06:bd:b4:86:41:e4:
aa:38:2f:d0:c3:be:fc:85:b6:6b:d3:1b:4e:98:26:
d1:86:22:b1:d4:a4:74:46:57:10:ab:f7:d4:9b:70:
a1:2e:cf:df:e5:90:5a:e3:6e:8e:5d:72:2b:3d:b2:
29:a8:97:1c:b2:44:63:13:4a:0e:51:ee:57:97:54:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:28:FD:52:E1:1D:58:0F:87:90:21:B3:17:65:D3:66:35:07:47
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c4:82:2d:10:ae:a4:78:57:a6:ef:2d:41:4e:2b:cd:d5:e9:
03:6e:06:cf:3d:0a:7a:30:a8:14:9c:69:7c:9e:a4:b8:b3:b3:
e3:71:c2:4d:bd:44:fa:9d:e5:84:d0:17:b6:e7:28:0c:75:d0:
34:a4:8c:33:0e:9d:69:08:ba:7d:d5:bc:94:0c:7c:bc:49:58:
a2:fe:ea:66:07:d6:f2:e2:46:93:99:11:a0:61:11:a9:23:e6:
f8:2e:6f:ee:d1:d3:4c:50:df:03:2a:a5:ff:68:dd:db:4a:64:
64:f8:1d:d6:ee:8e:56:65:ac:3d:bf:1a:8e:bb:09:98:48:cc:
3f:51:eb:7e:e7:00:2d:da:39:cf:d9:1c:bb:90:a4:d1:8b:87:
85:00:55:98:ed:4b:78:7f:cb:32:1f:e5:d2:61:80:a1:83:4c:
c7:d4:52:b0:12:8a:2b:4d:db:82:ea:0d:14:2d:2d:bd:8d:6e:
e3:7a:55:c0:58:7f:5c:47:df:88:73:70:61:ce:8f:b8:d5:4d:
53:dc:bb:73:99:04:09:dc:f9:da:4a:93:dd:a5:f1:7b:03:c2:
47:b3:33:4b:50:72:bd:f6:02:9c:48:ab:f8:e8:e3:2c:42:bd:
6c:ed:e6:ae:7e:00:7d:a2:3f:a0:67:f5:eb:53:ad:cd:4b:5e:
08:e4:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:42 2025 by rpki-client