
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
File: FMEnKYgtb8xADSTHoWGR6_ea064.mft (raw, json)
Hash identifier: QwnKwXPT7DFIVI7ieVSW1J76iJof32LwFiQbnI/NoaU=
Subject key identifier: 32:5D:EB:11:A9:3E:CC:B4:93:2B:B8:AF:46:BB:2D:53:50:85:00:65
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Certificate issuer: /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial: 0199FB0EC52C8C3270C8935AFB7A96A83193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
Manifest number: 167C
Signing time: Sun 19 Oct 2025 06:01:13 +0000
Manifest this update: Sun 19 Oct 2025 06:01:13 +0000
Manifest next update: Mon 20 Oct 2025 06:01:13 +0000
Files and hashes: 1: FMEnKYgtb8xADSTHoWGR6_ea064.crl (hash: 28HgeQKZyhXVcUyG0cseRZt305BStkkVbBw1XmAy/Ac=)
2: gTXc09MBtqnmw3GOQ02qrwpMS84.roa (hash: c/faZAzER1FA8lwrLMG8MZsQ5SgoZv9mWu1aAorpMcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c5:2c:8c:32:70:c8:93:5a:fb:7a:96:a8:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Validity
Not Before: Oct 19 06:01:13 2025 GMT
Not After : Oct 20 06:01:13 2025 GMT
Subject: CN=325deb11a93eccb4932bb8af46bb2d5350850065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:f4:14:64:60:d7:9f:82:cd:8e:ae:c1:77:
2e:2f:36:ca:8e:68:ae:72:28:47:0f:1d:85:10:d2:
7c:d7:5c:44:7b:a5:b7:ec:61:f6:bb:b0:54:b3:b1:
a1:46:2b:15:1d:49:a3:99:7b:ac:25:fd:88:67:8e:
21:83:72:53:db:56:29:53:98:c3:b9:52:f8:df:91:
47:9b:65:fa:42:77:ec:0b:59:32:42:af:cb:6c:a2:
77:26:a6:61:f5:45:c3:17:bb:38:5d:2a:b9:25:98:
9f:7e:af:e8:1d:00:dd:5b:f4:e2:0f:c4:e7:65:dd:
16:5c:ea:f4:33:49:c5:da:2c:1c:83:05:dc:ad:a7:
71:4f:fd:c8:01:1a:52:c0:0a:3e:44:8c:02:6b:ce:
09:eb:f9:12:01:41:c8:98:e0:45:d4:f4:cd:34:78:
d5:c7:1f:0c:0f:e9:d3:c2:11:34:f4:7a:b9:24:c1:
84:6b:c4:6d:31:c5:c5:71:90:6a:5f:d7:9d:72:8c:
2d:14:8c:3a:7c:20:9c:d1:44:28:86:10:3e:a5:fd:
35:21:18:29:b8:bd:be:cd:da:7b:cf:28:3d:16:cf:
de:15:6f:68:39:5d:05:b4:42:b6:7d:8c:87:45:60:
05:c5:eb:a5:b4:74:b7:ba:a7:b5:b0:52:53:a1:89:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:EB:11:A9:3E:CC:B4:93:2B:B8:AF:46:BB:2D:53:50:85:00:65
X509v3 Authority Key Identifier:
keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3d:d6:ec:6e:04:62:06:b8:3b:60:0e:7c:60:88:12:69:6a:
20:44:e3:87:c1:6c:77:96:88:78:73:de:81:fd:be:a9:c5:f8:
e2:bc:30:a8:d9:ac:4c:59:11:82:9c:37:15:31:4e:d7:d5:78:
ac:b1:40:30:b8:b0:ce:a4:32:31:95:f7:72:42:dc:df:a9:5d:
19:7e:55:95:05:39:cd:f7:7b:17:c7:67:07:40:04:07:38:1d:
18:b9:b3:38:dd:d4:98:b8:c7:d6:f9:4c:f1:f3:04:7d:0b:61:
e8:9b:0e:e1:14:3d:58:03:4c:49:36:49:c8:60:f1:b8:7d:13:
76:47:ca:a5:a9:77:ed:51:4c:7e:d2:c6:13:d9:32:7b:4f:73:
ee:2e:72:5f:9b:82:71:08:0b:52:66:f8:cf:da:a5:07:40:ba:
b3:24:ed:0b:fc:36:45:75:9a:c6:a9:96:c7:35:03:28:5d:cd:
fe:71:8a:0c:69:e0:65:e7:43:cd:db:42:db:98:0e:9b:61:79:
91:fc:c5:e8:93:cf:f4:01:3d:ca:0f:2d:17:76:5b:96:f3:fb:
0b:02:c4:48:97:12:83:12:23:93:c6:b1:c7:08:2b:58:d7:ad:
bc:34:2a:f1:63:0d:a2:61:11:4b:25:0f:6f:96:de:df:6a:76:
57:44:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:06 2025 by rpki-client