Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: pU868ALvlytS3iutFXpXkPAdjXvZDezYS5LLAAEcQgk=
Subject key identifier: 47:A2:2D:4C:E7:CE:A2:2E:C6:EE:50:65:E6:B7:CF:F9:6C:E0:EE:7A
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 0199FB7CD188A275BF5462503AD5423EA846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0CE8
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: aKBeB9XUfu6XZRn93aDvDkoW+E3o5nHv2LjrmyFrUKg=)
2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d1:88:a2:75:bf:54:62:50:3a:d5:42:3e:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=47a22d4ce7cea22ec6ee5065e6b7cff96ce0ee7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:6a:84:ac:43:18:0c:f3:fb:86:b4:06:ec:
91:b1:20:a1:fc:01:45:40:22:f2:93:35:6e:44:56:
a0:7a:07:1a:e2:81:3e:09:8f:0a:3c:a0:6a:40:5a:
33:77:85:40:9f:e9:81:98:7a:a8:6f:3d:72:28:cc:
9b:48:e5:76:e9:4f:dc:14:ba:24:d8:c7:5f:ef:e8:
c9:2f:b8:fe:8d:dd:c5:04:3e:96:26:75:f6:b2:bd:
f1:97:5c:1a:31:72:14:38:87:d0:8d:ef:79:8e:ca:
db:8a:51:5a:bb:a6:3b:70:56:d2:95:fe:41:e3:62:
b3:a4:58:38:84:fe:8c:7a:ae:ae:7e:41:9c:c0:b8:
2e:36:ee:2a:0b:3c:a4:41:e0:1d:7b:30:ab:8b:99:
ec:45:fb:85:2d:22:ab:d8:a3:38:14:bd:18:86:86:
2b:8f:1d:eb:90:b0:41:d4:fe:ad:73:3f:2e:3c:65:
6a:30:1d:e1:cf:47:a2:9f:db:75:bc:03:fa:8a:4e:
bf:7f:0d:a5:64:bf:fc:9e:63:d6:de:f4:d5:ee:a0:
f3:ce:64:8e:57:4c:72:63:6b:7d:ff:0f:15:b9:0c:
8c:58:72:dd:7c:99:f0:75:97:f1:7e:53:c1:4d:40:
34:76:e3:29:86:1c:69:36:dd:4e:ea:59:cb:3f:21:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:2D:4C:E7:CE:A2:2E:C6:EE:50:65:E6:B7:CF:F9:6C:E0:EE:7A
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:38:d3:4d:e3:e7:83:db:0f:55:64:5c:7f:83:d1:83:49:
0e:cc:e5:b0:ff:87:6d:7e:bb:3c:ef:63:bf:3e:89:8b:5c:11:
56:68:61:a3:f8:2b:19:3b:f2:a6:dc:dc:9e:f7:ae:85:57:3f:
9f:63:fc:db:c0:b2:84:40:60:f7:2e:cd:9b:b3:d9:e3:80:1b:
49:f0:aa:ff:6a:2a:33:90:5e:94:59:65:1b:97:d8:60:dd:2c:
5f:c8:b6:fc:f1:ba:b6:f0:0b:17:f3:47:57:28:b0:94:44:07:
68:5e:44:74:c5:11:1e:60:cc:df:03:2a:5a:a2:3e:dd:75:b4:
30:8f:e7:43:24:1b:a3:1d:46:c5:34:82:1b:c8:66:57:91:83:
62:10:c8:ce:7f:0a:aa:a5:ca:4a:48:c0:b1:90:26:48:c9:49:
a8:67:38:11:b0:e2:d8:26:5c:68:dd:fb:f4:36:36:9a:af:5f:
86:6b:df:b6:8d:82:39:13:9f:8d:8d:bd:47:3a:e5:5c:c2:5c:
0c:bf:37:03:e9:56:66:6d:aa:9b:bf:8c:36:b3:18:69:df:36:
11:96:79:fd:3b:41:22:08:66:af:bf:e3:a7:36:b2:f3:ef:90:
26:d6:ba:15:15:58:be:d7:ca:6b:04:f3:24:fa:d6:bc:09:57:
8e:95:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:12 2025 by rpki-client