Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: UYIeGQOrMEzDUM0y4Wq4W5B25ZakZZyRat/c6mdxnP0=
Subject key identifier: E2:38:07:F4:11:33:F4:2A:2F:44:8D:F6:48:46:0D:31:A6:2B:C1:B4
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 0199FFC8C26897EDA11986E79F8E32D2B2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 1059
Signing time: Mon 20 Oct 2025 04:02:50 +0000
Manifest this update: Mon 20 Oct 2025 04:02:50 +0000
Manifest next update: Tue 21 Oct 2025 04:02:50 +0000
Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=)
2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: SkGL+3jf1qjrR+7zaL3gX7ixLKYZlja4Ft27kzY12Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c2:68:97:ed:a1:19:86:e7:9f:8e:32:d2:b2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Oct 20 04:02:50 2025 GMT
Not After : Oct 21 04:02:50 2025 GMT
Subject: CN=e23807f41133f42a2f448df648460d31a62bc1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:af:84:42:8e:51:3f:6e:f4:b4:62:34:26:09:
b2:c3:8a:2a:93:e8:7a:49:9c:f7:37:34:bc:75:73:
33:6c:76:61:d5:0c:5e:96:10:76:b1:da:37:49:19:
78:06:36:a3:9c:54:43:b2:54:3d:b7:31:de:22:a4:
92:07:19:95:ea:ab:33:f9:ec:90:c8:fd:65:5e:b8:
db:00:c0:f3:2a:e6:a9:bb:93:c5:2b:ff:5e:a1:dd:
ce:e1:87:cc:9a:41:a4:a0:e9:ed:b4:6e:09:e0:9c:
ee:45:82:df:99:83:56:03:a3:bb:7b:bb:ce:43:22:
c7:90:db:38:ee:d7:b7:aa:49:47:cc:7c:73:34:fc:
84:1e:6d:88:f8:44:4b:f2:4d:9c:3e:b7:b9:92:5f:
a4:3c:66:3a:cc:51:30:0a:b2:08:f2:44:e6:17:e5:
5a:d8:b1:3e:1d:ae:1a:02:7d:c1:73:9b:11:ee:6c:
fd:ed:f1:f4:2d:c6:49:1d:8d:53:e8:b9:66:2c:b3:
f7:7c:d0:e7:d4:d0:a1:e6:94:06:52:6c:03:7a:b3:
7f:87:ad:23:c5:13:7e:a0:c3:42:68:f8:a5:4d:f7:
04:7d:19:0f:d6:f7:8a:75:cf:ac:cd:b5:1f:97:70:
fe:d9:7c:8d:6e:73:2d:db:55:8a:26:ad:54:9d:f3:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:38:07:F4:11:33:F4:2A:2F:44:8D:F6:48:46:0D:31:A6:2B:C1:B4
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2e:97:a3:37:ea:42:d5:36:52:a0:07:26:fb:b2:df:cb:de:
90:81:8d:1f:96:e2:fb:64:f2:da:76:e6:53:a3:78:e1:19:99:
0c:3d:47:05:a7:c0:ef:70:3b:2d:b7:02:e0:c4:6e:d5:96:57:
2a:2b:9c:3f:c7:7f:a4:24:27:7d:ce:40:5e:24:c0:de:c0:e5:
ee:5e:ee:cd:56:d3:c2:29:21:84:15:a5:e8:5d:ee:b0:b2:7e:
9e:c7:66:aa:9d:e7:9b:cc:f5:3f:35:ba:54:a3:6a:71:2f:75:
e8:28:ca:95:27:9b:f3:20:33:6c:64:ce:38:7d:1b:21:11:c7:
49:4a:50:ad:84:66:d6:c6:9f:87:b4:1a:09:1b:ad:af:04:8a:
8e:3c:56:0b:2d:05:a6:fd:b9:8a:84:45:1d:39:74:b8:68:2d:
9a:5a:53:22:a4:49:c6:1f:ca:c1:c1:e1:b7:2d:6e:45:d2:e9:
c3:2d:86:a8:f8:8c:da:2b:48:56:60:f9:a4:18:f7:80:0c:98:
2a:d2:ea:79:a9:18:2d:09:ea:ad:cf:66:63:78:61:8b:5d:08:
07:3c:b5:c6:93:32:b4:5a:d2:c6:f2:19:e3:9d:a9:79:66:2c:
80:a4:0a:ee:e8:de:84:d7:c8:d0:28:de:5f:03:bc:c8:4c:22:
bb:7b:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:39 2025 by rpki-client