Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: WsYHF2u4aEnYh8JMeog50rUrlZUumIN2E1UXccB/Wds=
Subject key identifier: 85:64:C4:84:8D:67:95:C1:9A:7C:D6:08:57:81:C7:8D:BC:51:99:68
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 0199FEB4A3BA4FE2021D1DB8A1D7C1B62D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 0572
Signing time: Sun 19 Oct 2025 23:01:15 +0000
Manifest this update: Sun 19 Oct 2025 23:01:15 +0000
Manifest next update: Mon 20 Oct 2025 23:01:15 +0000
Files and hashes: 1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: LUpQ/YdStkJ+j41kJIMcsl6RHzbe06qhVbmRTKOee00=)
3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a3:ba:4f:e2:02:1d:1d:b8:a1:d7:c1:b6:2d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Oct 19 23:01:15 2025 GMT
Not After : Oct 20 23:01:15 2025 GMT
Subject: CN=8564c4848d6795c19a7cd6085781c78dbc519968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:42:be:8f:11:31:30:24:28:a4:65:4c:61:
59:2b:7d:ec:2d:92:20:b6:26:d4:28:e2:03:30:89:
b2:53:67:af:a1:f1:8a:5b:c4:55:c2:70:91:c5:40:
ff:88:3d:5c:cf:91:ad:58:0b:e9:e4:fd:a6:9d:ad:
dc:e7:35:69:a4:2f:5d:e0:85:4c:d4:e0:fd:c5:7b:
ed:97:65:07:c6:37:f4:1b:5c:bb:50:b6:f2:3a:10:
ec:7b:2e:90:fd:ff:13:7f:8f:e9:56:83:cf:b2:50:
79:63:11:47:94:5d:1a:80:b1:bc:45:8f:a4:a9:ae:
d0:b4:5b:b7:67:4a:d0:7c:85:46:ac:a8:86:74:dc:
61:bf:b2:db:10:ba:19:dd:b1:a4:77:f3:da:7d:71:
31:18:8f:57:e2:84:2c:cc:29:17:4f:b2:d2:44:33:
f7:f1:3f:ed:b2:25:5a:0f:00:54:00:ec:ce:fe:11:
65:30:0e:6f:78:1b:2a:e5:8a:26:d4:7e:96:10:a7:
56:2b:ab:91:c2:03:04:af:77:66:6a:a1:29:e3:cf:
9e:85:67:19:ab:c5:a0:74:ed:93:76:21:d6:cf:0b:
4d:d8:bf:d7:dc:94:e1:45:b8:a8:48:ed:94:21:b5:
7f:9f:d9:a6:7f:e7:66:59:54:8e:49:3e:e7:c9:02:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:C4:84:8D:67:95:C1:9A:7C:D6:08:57:81:C7:8D:BC:51:99:68
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:3e:26:59:8c:7f:e4:52:c9:b1:be:9b:43:fe:00:f1:b4:
e9:fb:ae:ef:40:c5:9d:18:87:0c:2f:39:d3:9c:e4:32:8e:75:
07:26:28:ab:05:95:48:47:d4:5d:cb:48:9a:4d:11:a4:3d:ca:
b4:dd:79:2e:10:1b:f7:67:1b:bd:0e:cd:b1:d4:b4:89:b2:00:
cb:79:6b:36:82:e4:cb:14:7d:d8:ce:8b:b9:76:37:12:46:e0:
6f:12:be:24:b9:52:73:cb:8b:5e:b3:f3:b4:49:c5:2f:0e:d3:
19:0a:c3:92:39:2e:93:1b:7c:4a:35:88:58:94:09:eb:d0:77:
57:60:05:55:d4:4e:5d:57:05:5a:69:9f:9b:5a:d7:7c:ac:d5:
ad:25:30:d3:42:c1:45:b0:e7:18:27:e3:68:5e:87:bc:2c:7e:
d8:19:ac:50:57:55:33:ce:99:7e:fb:31:df:75:3b:0e:e2:4a:
b8:e3:eb:65:13:ce:1d:60:1c:c2:f5:81:b3:ee:b0:90:40:47:
a3:fd:e3:65:2c:b1:55:6a:f6:90:d4:09:db:79:4f:5d:6a:61:
9c:0b:81:bd:4d:31:28:f1:0f:5a:43:aa:d3:d2:2b:f2:68:2a:
55:70:40:36:c9:ae:c9:df:cd:32:21:74:5d:56:8f:7a:57:db:
64:0c:a7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:13 2025 by rpki-client