Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: PKEt017UpXUIzldfMfeakejxRTAmDA0qdVTfQGepPc4=
Subject key identifier: B3:BC:2F:B7:8C:96:D7:94:9F:F6:3A:3E:0B:BE:16:C7:CB:68:87:AA
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 0199FC59099B632D2D50A8D5B5CB36C016BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 11E8
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: 9aGCrnsy7n8et9R3hZRcLlgYYK94C2+iyczCyjR46bA=)
2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:09:9b:63:2d:2d:50:a8:d5:b5:cb:36:c0:16:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=b3bc2fb78c96d7949ff63a3e0bbe16c7cb6887aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:20:84:c8:ec:02:46:09:29:03:41:2b:19:
19:46:05:20:0e:62:3f:39:08:64:99:f5:f2:10:20:
2f:9f:bf:96:80:ac:98:d2:cf:70:84:17:29:6d:79:
72:d2:39:98:e4:ee:d5:3c:2b:61:3d:db:6c:9e:b4:
b9:46:ec:2b:84:f3:cb:d8:fd:ad:b0:21:0d:e7:a3:
15:64:35:d8:4d:4a:6e:54:67:0b:17:99:e2:c6:84:
19:31:c6:f4:c3:6b:f4:bb:be:db:ee:f4:69:72:9d:
ec:0f:87:e7:2c:c8:f8:07:b6:03:db:80:e4:03:c2:
46:b1:eb:d6:4f:5d:a9:73:93:9a:2e:24:fa:cc:f8:
a8:af:68:e1:e8:3e:82:df:e8:6e:22:9c:32:c5:b7:
2a:ce:b7:f2:ab:55:68:73:82:76:fb:ea:bd:b3:3d:
97:e7:d6:54:81:05:4b:6c:dd:7a:a9:7a:54:d9:65:
6a:aa:54:17:d8:1c:2f:01:99:f6:94:b9:07:ba:22:
a5:3f:91:23:a2:7f:e4:4e:f4:8f:3c:a8:97:9b:98:
ce:cd:2a:7f:b9:17:c1:e2:d3:5b:55:0f:5c:7e:f2:
8b:52:87:11:06:9c:c2:dc:e6:3f:24:29:51:9e:c5:
7d:0a:29:fe:92:d8:56:36:76:64:59:86:7a:8f:7b:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:2F:B7:8C:96:D7:94:9F:F6:3A:3E:0B:BE:16:C7:CB:68:87:AA
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:1d:07:c4:d9:d0:db:3c:2a:12:e3:fb:40:f8:d8:99:54:
d2:01:e5:ae:30:55:b4:7a:23:b8:08:b6:cf:56:d9:1a:33:b5:
d2:27:f3:27:b2:55:8a:2a:5c:24:23:32:75:95:44:02:84:33:
e0:aa:6f:b7:9f:e3:87:60:97:09:33:12:aa:0b:7a:1f:d2:ba:
e5:89:45:74:4c:6d:b7:0f:bb:6a:ec:78:42:a2:ea:75:e9:9f:
4f:e5:84:26:d9:77:40:42:f0:2f:9f:31:9a:e3:c3:23:38:84:
bd:1b:ac:37:93:d3:19:48:c7:4e:47:40:cd:34:e9:7a:ab:7b:
18:0b:8f:3d:4e:d5:65:62:e1:af:37:79:80:07:a3:d8:01:15:
17:7c:e3:e2:2c:00:5a:59:42:ba:5b:f2:bc:a1:61:65:bd:8b:
46:9b:c7:54:ef:a9:97:45:56:14:cb:3d:01:17:57:b4:18:05:
b4:d5:a7:32:69:f2:6e:de:72:96:7a:2a:6d:b8:cd:2e:87:e5:
e9:17:ea:d6:ed:38:c2:33:be:f3:5d:e9:19:3a:98:f5:ba:bb:
58:12:20:96:de:fa:31:ec:6d:2f:7f:fc:ba:51:09:b2:bd:a6:
2f:b5:57:6a:52:2a:48:ea:2b:a1:fc:0a:c3:93:1d:7f:a1:06:
dc:17:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:21 2025 by rpki-client