Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: xbZGGArbS7veRBGrJA05XA7CnAwgQQomD1zf98j528o=
Subject key identifier: E1:28:92:46:48:FF:80:1D:62:77:64:BC:3C:2A:27:E0:62:44:2D:D9
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 0199FFC7B343E4C04737641F02501763519C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0F23
Signing time: Mon 20 Oct 2025 04:01:41 +0000
Manifest this update: Mon 20 Oct 2025 04:01:41 +0000
Manifest next update: Tue 21 Oct 2025 04:01:41 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: Ifn33aIR4+NXsbNLpnL7s30OzRI5SjVZX9YXpJOKM2k=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:b3:43:e4:c0:47:37:64:1f:02:50:17:63:51:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Oct 20 04:01:41 2025 GMT
Not After : Oct 21 04:01:41 2025 GMT
Subject: CN=e128924648ff801d627764bc3c2a27e062442dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:cd:50:f2:4d:92:b1:bb:7c:62:85:03:03:
16:8e:20:95:41:5d:b0:09:e7:29:e6:65:35:19:ac:
5a:ea:88:e2:c9:59:63:02:3d:b1:a0:58:ff:1e:de:
5d:0e:85:9f:ae:89:93:07:e9:66:7c:30:16:1f:f9:
43:d6:45:ea:60:ce:c9:3d:60:7c:71:e9:e8:18:b6:
a3:a3:ea:3a:8a:32:2a:00:d4:97:11:f1:b2:46:1a:
0a:84:55:a2:4d:96:da:da:47:e1:ca:79:70:22:99:
2b:01:35:c6:95:72:83:1b:60:88:2d:26:31:3c:e6:
77:69:1d:3e:71:a6:d7:3a:cb:60:18:a2:86:a4:77:
77:ea:e8:98:db:01:f3:f4:97:ae:6a:2a:7b:04:58:
40:83:a5:7e:76:55:54:21:60:4c:c9:fb:c4:ec:64:
34:6e:60:9a:c3:43:43:28:59:bb:89:bf:7e:0a:38:
55:33:49:76:36:94:6e:1d:6c:72:23:2e:cc:a5:44:
27:e9:94:bf:f6:77:cf:73:1b:0f:90:41:74:5d:9b:
5b:41:f6:d3:e4:95:29:38:7c:33:07:61:78:2e:f3:
4b:97:48:65:d7:ee:0b:8a:9b:23:27:b5:b8:db:78:
35:a0:a2:f9:36:e4:48:b4:2d:87:e3:30:ca:b1:b2:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:92:46:48:FF:80:1D:62:77:64:BC:3C:2A:27:E0:62:44:2D:D9
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0c:55:06:d4:9d:d8:b2:3e:6d:35:81:5d:ab:49:35:35:a7:
43:c6:1b:26:cd:a9:e5:b5:e9:26:49:4c:3c:83:01:fd:de:9b:
a8:81:b9:e9:30:0c:50:4e:3f:e6:0b:e7:85:01:65:a0:2f:a3:
24:69:3d:11:2d:71:66:5a:63:bc:7b:5d:d5:bf:06:33:d3:9c:
6e:fd:74:4c:ce:07:df:d8:19:68:29:ce:81:db:43:38:c8:0c:
2a:cb:cf:0c:bd:56:31:a9:b4:9c:99:3c:61:18:e5:22:11:d2:
a4:6b:d0:8b:3b:ba:c1:23:c8:ab:a7:28:65:bf:d6:79:4e:b9:
6d:de:8d:1d:12:90:61:6f:5a:d8:1b:d0:f1:87:ea:72:32:b0:
1d:e8:6a:10:1c:b8:b9:ea:26:c7:a6:0e:90:fb:bd:5d:f8:4b:
ba:07:a8:1a:4f:fc:fe:21:e5:d0:4e:15:0e:50:34:cc:35:0e:
ca:65:94:f9:b3:ec:22:47:62:fb:2a:ff:6e:e0:59:b4:3b:fe:
4f:a1:ad:7d:09:1d:a4:16:d1:94:a0:f9:be:28:0f:a5:12:dd:
e0:68:ea:96:8d:b7:c3:3e:19:91:0c:b9:33:9b:dc:a0:25:3b:
59:0f:a8:34:7c:0c:81:a4:43:a8:ae:ae:d1:f5:90:97:65:d0:
db:94:1f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:26 2025 by rpki-client