Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: Vi2PrAXUW2/CHfzvHwE9PMaamyRWWYb+RtsIANlivYg=
Subject key identifier: BB:07:6A:A0:1E:A7:48:B7:0F:D1:B0:B5:BE:88:BA:08:70:A2:A6:BB
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 0199FD3488BA778734705BAA7ED77E0E3BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: 7CXbAzGskCKbgBXeLqp4G2z2WwRyp0R78OgbcSxtTDc=)
2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:88:ba:77:87:34:70:5b:aa:7e:d7:7e:0e:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=bb076aa01ea748b70fd1b0b5be88ba0870a2a6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:89:2b:2d:45:a7:5b:c2:36:1e:f5:98:52:
b3:bf:7c:45:f7:b4:6f:cf:ca:fe:f1:13:0a:58:fc:
b3:e6:63:9f:02:ca:17:b0:ce:db:69:68:e1:50:75:
e0:13:6c:f0:67:4c:4f:01:17:7f:15:56:d4:bd:d8:
e7:18:b1:d5:30:d6:a7:15:74:ec:1f:08:00:b2:98:
75:df:98:45:54:37:4f:1a:4d:b0:dc:97:f4:cd:b8:
12:3e:5a:92:20:47:99:6f:b6:86:d9:b8:46:f6:6d:
06:ff:5c:23:4d:b2:5b:e4:02:4a:ac:c0:43:0f:5b:
15:88:df:b2:d1:55:62:15:47:d7:82:51:a1:49:29:
e8:3a:b2:12:5b:d0:95:45:e6:04:f2:d3:63:b2:ca:
e5:79:22:79:f9:47:50:e6:8e:14:4e:3b:be:3e:9a:
37:d8:97:e6:8a:ca:b4:81:43:7a:fe:b3:d1:2c:3a:
ad:69:30:27:3c:7e:1a:c1:2c:25:0a:98:34:65:d4:
7f:11:f6:42:42:54:ec:32:0a:ee:e4:a2:11:90:1c:
61:7b:c7:fa:cd:e2:99:35:38:49:25:51:24:6c:30:
12:5e:d5:e6:57:d8:f7:c7:2f:71:1a:16:a2:44:c8:
b2:97:d7:b1:56:09:5e:6d:8f:7e:2f:b8:55:16:4b:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:07:6A:A0:1E:A7:48:B7:0F:D1:B0:B5:BE:88:BA:08:70:A2:A6:BB
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a8:ce:3a:a1:87:16:0a:72:fb:7a:c3:b6:e0:6e:d2:09:96:
70:4b:3c:15:e8:50:8b:dc:cd:42:4f:7e:91:dc:8f:89:18:f0:
28:5c:f7:91:a0:70:48:8b:a2:9d:ce:89:6e:e3:27:5d:36:fa:
1e:92:c3:3d:58:37:7b:3c:a4:49:f7:ed:70:d0:26:e5:1c:24:
bf:b8:ac:23:b1:46:ec:65:46:6b:22:1c:df:59:45:6a:63:57:
a6:1b:ee:aa:de:08:d4:f0:e8:87:e1:99:a6:55:97:38:4b:68:
f6:b8:7e:17:2a:8b:ea:02:3c:92:07:c1:ca:ec:a2:c2:9d:3e:
2b:0a:fc:5c:7e:51:c9:1c:ab:aa:8f:51:27:e3:97:9b:ec:c1:
a9:3b:6f:bb:f4:55:53:df:9a:27:9a:be:5c:bb:32:89:46:33:
ee:50:eb:25:2d:de:c5:8d:ac:c3:aa:fd:bf:7e:f5:2d:fd:96:
c5:0e:ed:21:04:2d:2d:35:60:f8:48:64:58:4b:92:62:a2:ae:
a1:7a:9f:d9:df:8e:2e:ad:17:29:5d:17:71:f9:0c:cb:33:54:
ef:d6:e5:5a:b0:4d:61:63:a2:29:6b:43:74:cf:f4:56:e7:03:
10:ac:58:54:10:ee:51:1b:0e:48:81:fe:a9:10:b6:61:38:5b:
43:fc:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:27 2025 by rpki-client