Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: Zu69e3b+e4v91p8i6Q3o+n4MdCRU+R9lvdjUhz9SVzM=
Subject key identifier: 6E:45:2F:5C:24:9B:D8:C7:13:09:73:11:F2:5A:47:C5:D8:A2:3A:57
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 0199FCC65470DD77BBA0F72C2A1692D2F5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 1690
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: 5rDJgL4QEHZrfFqJHLvw5awsfAmt/onpjCvzXPowY0Y=)
2: XWiker2v7GIlhkuZZtR48lVm108.roa (hash: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=)
3: zJ5MYEMzWfucEDGxLfmRzsaSeEg.roa (hash: 13et8HkfUmrO0+ptVe41OzMBwG62Ru5G13R9afNJkP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:54:70:dd:77:bb:a0:f7:2c:2a:16:92:d2:f5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=6e452f5c249bd8c713097311f25a47c5d8a23a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:a7:f3:76:30:e5:d8:49:19:e9:c4:fd:f7:
54:03:d5:4a:9d:5e:61:18:22:06:94:6b:a4:31:65:
3c:5c:3c:87:fe:16:35:4e:ad:e0:42:f1:2f:8d:c6:
75:16:f7:7d:94:3f:c6:c4:b9:a3:ec:cb:f2:9f:5e:
0c:26:6a:ba:00:82:5d:1a:84:1c:2b:48:78:8b:ba:
e1:d0:75:b3:ef:84:0e:56:69:6c:d6:7e:aa:51:56:
85:65:1d:38:bb:1e:26:75:01:dd:0e:03:bb:c8:1a:
61:8c:b4:fc:49:bf:84:2f:3e:60:aa:86:a6:63:50:
e7:ff:a8:d0:b3:c2:fc:ce:05:29:73:1e:4c:33:a3:
d3:41:ea:96:c3:0b:ba:92:99:ce:b6:86:0b:eb:56:
2c:66:9d:27:2c:ad:58:24:83:96:59:75:ce:93:dd:
e9:d4:57:37:c9:41:13:1d:29:a0:b4:7c:34:4f:1a:
55:87:8d:28:2a:58:91:46:e4:96:bc:f1:87:7e:0e:
1b:6d:38:ac:63:4f:0d:8a:2f:f2:76:03:76:c8:19:
20:9c:42:da:3d:1f:32:4a:8c:10:50:0a:c7:b2:42:
e6:29:6f:a0:a4:65:a4:ca:0e:48:bb:67:29:79:15:
f7:79:e5:79:f4:03:ec:4b:37:00:b3:3d:19:a1:98:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:45:2F:5C:24:9B:D8:C7:13:09:73:11:F2:5A:47:C5:D8:A2:3A:57
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0a:1b:a4:96:90:cf:f1:ca:50:45:fc:2a:b9:48:ba:84:47:
b3:35:0f:e8:c1:fb:ad:6f:f4:6f:b0:8c:34:9e:f5:d2:21:be:
46:88:5a:4f:7c:4d:23:54:75:ac:f1:62:c4:f4:37:43:7e:51:
73:48:88:79:d6:7a:f1:67:5f:b8:d5:07:02:9c:04:14:d6:cf:
20:d2:a1:81:bf:b7:ca:ed:f3:f1:03:90:df:57:d4:a9:1b:63:
da:bf:f7:fb:18:b7:c4:98:0d:d5:20:9f:d4:f2:d9:ae:80:6a:
11:12:1c:54:4c:11:72:e1:79:8d:0b:54:c7:28:a8:4b:73:15:
bc:89:35:ed:97:87:3d:2a:b3:5c:0e:05:aa:23:3c:cc:f4:d4:
5b:8f:fe:f1:8d:b0:53:14:bb:13:d0:45:c1:dd:7e:f1:4c:2e:
1e:c6:18:a9:02:93:92:d9:fa:5b:b6:55:fd:89:18:39:cc:31:
f0:0e:87:3b:61:38:d7:cb:d0:9b:4f:fb:ca:7e:7d:d5:9f:5d:
32:99:58:a4:dd:85:5e:2b:54:91:ac:a0:8e:08:39:d7:0d:d4:
7c:db:8c:a6:d0:30:5a:62:41:3f:36:48:46:66:22:83:49:b7:
ea:aa:9c:2f:93:ee:3e:df:0e:08:66:a6:9d:d2:a2:94:43:b5:
33:39:5f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:48 2025 by rpki-client