Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
File: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft (raw, json)
Hash identifier: JZHjz3ZS7BgR5jbsYrNdKqLKCOfusNFvMD6ti0WH7eU=
Subject key identifier: 7B:71:A0:25:A3:67:30:D0:A4:35:A4:D2:2A:7E:29:89:24:70:88:A0
Authority key identifier: 14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
Certificate issuer: /CN=14a9d3c7406e276005488871d5218c05a07166d1
Certificate serial: 0199FB7CDD539DAFBF985F3BBAC8FE11D9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
Manifest number: 0C96
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl (hash: uruWlU/RoUNkyW2JArVo8Vg0metN+jREqPQ7HMz6dow=)
2: foAFIag6bLElaUey2ZaxoI-rq9U.roa (hash: 9IbR/5Hj38Nx2RBHaHIpWS+CIYm87fW1bNphG8TyovY=)
3: o_RVkUo12yIsWwd92ReBZuoWw6Q.roa (hash: SRUesdEiY2Y5wOgnJsCRLKIjGy9NIgo1L8w/6rAHzkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:dd:53:9d:af:bf:98:5f:3b:ba:c8:fe:11:d9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a9d3c7406e276005488871d5218c05a07166d1
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=7b71a025a36730d0a435a4d22a7e2989247088a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:ff:af:df:58:d7:cb:0f:8b:02:1d:8a:63:
54:78:4a:c6:51:ae:8a:93:ab:67:37:68:f7:2b:f2:
e6:7e:56:0d:2e:a8:0b:20:2c:9d:92:cb:28:a6:7a:
5d:b1:09:e7:84:e6:6a:78:8c:1c:d9:4e:70:d8:1d:
d7:f3:e7:96:22:b9:76:fd:5c:07:22:f5:5f:0f:11:
ae:34:8d:6d:7b:9e:ac:ae:e9:01:29:20:84:36:32:
c7:c1:c9:c5:4f:75:f1:dd:54:40:89:a6:61:2a:77:
7b:a3:6c:44:af:fc:af:87:09:49:8f:49:5b:68:7b:
02:b4:5c:3c:93:d5:ce:28:65:79:56:90:24:ab:2c:
b8:0b:37:28:e2:a2:9f:00:a8:ec:44:7c:5b:67:6c:
29:f7:5c:dd:c4:d7:ec:40:de:e9:9c:1a:9e:7a:25:
26:cf:f5:c3:21:e5:2a:80:c1:a2:2a:d6:e8:fc:a4:
86:e3:c8:d4:b4:14:e7:70:91:fe:04:49:a0:40:b1:
54:f3:81:f8:6f:86:9a:7e:c2:60:64:b7:61:3c:ba:
b9:11:a9:c3:19:df:e1:ef:e2:d9:0f:d2:e1:7f:f8:
8b:76:16:74:3a:de:21:6a:fe:a6:73:39:42:7b:85:
62:32:49:36:fc:eb:da:ca:20:87:04:89:77:04:8e:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:A0:25:A3:67:30:D0:A4:35:A4:D2:2A:7E:29:89:24:70:88:A0
X509v3 Authority Key Identifier:
keyid:14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b7:36:c0:d7:e3:b6:b2:09:32:40:79:cf:e1:d6:21:53:73:
e5:87:99:c8:2e:27:66:e3:5d:be:c7:57:de:f0:ac:a3:cc:d5:
06:94:0a:cf:27:67:12:9c:e9:ef:9a:f6:5e:40:dc:65:f2:ec:
57:06:d7:ad:56:15:f3:64:27:8a:c3:70:f6:09:97:8a:a7:8b:
12:05:27:8f:94:a2:06:63:35:61:81:ec:2e:ad:f9:90:74:3c:
76:33:08:23:4a:51:9a:df:11:74:be:8e:6b:79:34:73:f8:95:
0d:14:4e:43:3a:2a:91:a0:47:86:bc:26:91:53:8c:c0:66:10:
6b:2c:bc:44:c6:9f:c4:83:8a:a7:51:43:34:6e:bf:7f:e8:d1:
c2:63:18:6a:f8:3b:27:38:17:26:d0:71:93:e0:dc:b3:88:03:
e0:8d:78:d0:8d:00:41:ec:5d:d2:2f:44:6d:e5:1f:8c:49:af:
a9:17:c4:42:c3:95:2e:df:5a:31:39:2f:c4:3b:f5:72:fe:bf:
44:7d:8f:36:32:6c:bc:f6:4b:de:3d:05:5d:dc:c4:dd:89:fe:
75:fd:36:7c:52:b4:9a:61:da:3f:8e:fb:06:fb:fd:29:9b:6c:
42:51:86:7a:64:a0:cd:9c:a3:26:04:c0:14:ae:f5:78:1e:5a:
c3:1a:45:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:21 2025 by rpki-client