Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: YJ5j4Izqwv6O5Dcn6o3C2dxzwUDzqRAnY/yVzFIbcd8=
Subject key identifier: 2C:B0:A4:D5:0B:A3:ED:B9:39:FE:4A:20:2C:9A:85:62:EE:BC:40:BF
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 0199FD348E6E0072DF414CF93990BAF6EDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: YfqIOyV0ElSJfJiR7hphpdLi70DlzBCXvaOSCgaSVtQ=)
2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8e:6e:00:72:df:41:4c:f9:39:90:ba:f6:ed:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=2cb0a4d50ba3edb939fe4a202c9a8562eebc40bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ca:7f:28:d5:d9:ff:19:2e:3c:5c:43:54:59:
5b:5b:e2:63:f6:50:51:66:00:40:00:63:ac:45:51:
2a:25:ce:af:af:0b:13:4f:a0:76:a7:b9:70:4a:a5:
78:17:40:1d:0c:12:1f:91:5d:23:8b:95:5c:5c:a2:
5d:5b:d7:85:4f:f2:10:9a:6a:c9:7a:45:0d:46:ed:
76:ba:87:c7:bf:22:04:81:d8:cb:02:1d:45:88:d6:
53:54:bd:da:c4:96:e3:84:1a:30:da:c1:7c:5b:d3:
b6:42:50:b9:b6:03:74:69:b8:41:d7:30:17:8f:e8:
b3:09:83:88:5b:79:a4:31:30:40:8e:30:21:96:f2:
69:0e:52:b5:6d:43:18:94:af:d3:5f:81:82:28:de:
bb:6b:9c:b2:96:fb:74:48:e6:e0:ca:33:ac:85:f9:
86:8c:26:62:1c:48:11:a4:b1:e1:83:7f:1b:f6:fb:
4f:1a:60:8e:a3:44:c3:33:7a:b6:b0:47:05:75:48:
86:e1:d7:f6:72:cb:da:d0:97:b4:3a:e3:34:25:28:
06:b0:0b:07:4e:6b:1c:fd:d6:53:9c:ed:84:49:c3:
5d:a9:b3:0a:93:9e:fd:59:d9:09:53:f6:e5:90:9f:
ba:da:94:7e:c2:eb:43:86:ec:02:0b:46:bc:bc:50:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:A4:D5:0B:A3:ED:B9:39:FE:4A:20:2C:9A:85:62:EE:BC:40:BF
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:11:4f:da:b7:64:7f:68:25:40:14:a6:9a:d6:a9:34:df:c0:
18:46:17:12:5d:0a:e5:83:04:f2:8a:1e:51:4b:53:c0:d3:0c:
ae:33:43:d2:1e:fd:f4:5b:a7:26:4c:89:b5:bd:03:cd:fc:68:
74:aa:32:de:98:1e:d4:04:d1:6d:52:d4:c5:b3:eb:d5:26:94:
80:d6:5b:61:e3:46:9a:c2:82:93:af:d8:77:d3:b5:2c:2a:39:
6a:50:a7:af:cb:01:bd:8c:45:cd:a3:9b:dd:c2:7a:c9:7e:e0:
cd:a7:5f:b6:18:ce:0c:e5:8d:d7:ee:85:f6:7e:a8:1c:21:3c:
0a:07:f2:9e:ed:40:48:26:4c:6b:bc:fc:73:de:2e:98:3d:b8:
d3:17:9c:b2:22:53:ca:41:ca:65:74:e7:a7:cd:1c:91:4f:77:
5e:6d:c6:0b:05:9a:33:29:fd:a2:e3:7b:f7:dd:26:d1:a1:40:
8d:36:30:01:d9:e5:7d:67:46:b0:a6:f1:f8:af:a9:10:63:77:
65:68:4a:24:dc:54:4d:db:c9:d3:fe:53:1e:c8:a5:28:84:2b:
7a:b6:b7:5b:e8:fd:c5:fc:b8:34:c0:2d:6b:73:33:83:fd:8d:
21:cb:93:35:79:6d:dd:1f:7e:6d:3d:1b:ee:c3:74:c4:9b:c7:
45:82:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:11 2025 by rpki-client