Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File: FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier: WwMkYQsc8ffO5MWGjTsfYfl0SsX/F86KvN9/OMqknB0=
Subject key identifier: A0:0A:94:D5:07:02:48:88:51:5F:62:40:72:CF:01:F0:C1:85:14:2E
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial: 0199FB7C7A79A38C457176D3626EDC3A7131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:02 +0000
Manifest this update: Sun 19 Oct 2025 08:01:02 +0000
Manifest next update: Mon 20 Oct 2025 08:01:02 +0000
Files and hashes: 1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: Qfauaoa5l+J0cF3+/UvzUiA58F4AQeg7/mg27hYV+Nw=)
2: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7a:79:a3:8c:45:71:76:d3:62:6e:dc:3a:71:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Validity
Not Before: Oct 19 08:01:02 2025 GMT
Not After : Oct 20 08:01:02 2025 GMT
Subject: CN=a00a94d507024888515f624072cf01f0c185142e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:58:fc:36:08:c6:bc:2c:2d:30:6d:cc:c6:
40:f4:c9:ca:f9:0e:0f:67:0e:ba:6e:2f:5b:30:5c:
d9:c8:c4:3b:46:a0:6f:18:ba:b5:d8:a4:e4:ab:a6:
96:a2:0c:de:56:78:8a:f7:5c:a9:50:1e:7d:3f:19:
52:02:01:34:d5:51:6a:7d:5a:90:11:8f:12:8f:f4:
69:2f:c0:5b:cf:59:8d:46:82:93:11:41:35:8c:f6:
e8:1f:80:42:90:eb:45:e4:ed:5d:5a:65:d2:de:5d:
68:2c:b7:47:af:9f:d1:aa:14:2a:5f:f9:2d:70:3c:
bb:be:5c:b3:71:86:54:f9:35:23:97:e4:e6:77:f5:
a6:18:58:c8:b1:36:79:80:1e:57:34:3f:4a:55:fb:
e5:85:7c:95:52:cf:2f:89:0c:8e:1f:4b:46:ff:6b:
31:a0:11:d0:69:7e:5d:69:4f:8e:f4:b5:fd:4a:eb:
9c:01:b5:01:b3:60:5e:06:0f:39:39:73:3b:38:9e:
ba:a1:99:e6:53:fc:2e:68:ee:b2:d3:57:aa:c2:bf:
e0:ee:81:ed:de:29:cf:f8:68:5b:8a:e4:56:45:61:
11:65:b8:91:1e:d1:c9:d0:e1:3b:98:27:ba:94:ba:
5a:83:a8:0a:2e:00:4a:17:09:10:05:c6:35:5e:ea:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:94:D5:07:02:48:88:51:5F:62:40:72:CF:01:F0:C1:85:14:2E
X509v3 Authority Key Identifier:
keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:58:f9:cf:25:65:73:18:fe:ec:9f:68:db:83:0e:0a:67:5b:
6f:d2:33:09:2c:f5:3b:8c:f4:af:7b:98:53:84:85:60:e0:ef:
0e:3e:6a:fd:53:b4:c0:62:3a:ad:de:0d:10:b1:5e:6d:ad:6c:
ec:88:ae:6b:60:24:89:93:89:ef:96:e1:b3:61:ae:a3:7a:e7:
a1:bc:17:48:a0:58:24:dd:a7:69:fa:96:ae:f3:7a:3a:e2:36:
23:b6:a8:28:35:b0:0f:32:93:01:4f:53:2a:f1:b4:81:f5:c7:
9f:03:a8:36:77:16:23:69:57:ca:96:16:65:9f:d1:32:4c:a0:
e7:4b:bc:97:24:74:c2:6d:13:f7:f0:c7:f9:0c:14:09:f4:5b:
c5:42:3c:3c:92:d3:58:4d:b3:6b:97:7a:1e:dc:4a:c6:cb:09:
63:d8:db:ac:a7:ed:9d:dd:ae:b1:0a:29:b2:41:30:74:1f:59:
5a:18:a0:60:2f:19:db:d9:4a:8c:b7:c2:13:2d:ac:a3:92:2f:
3a:ae:d4:3e:ef:b1:bc:8f:1e:35:b1:60:9a:da:c0:f7:0e:36:
f6:fa:d6:aa:f6:55:fd:57:ba:9f:73:2c:09:50:f7:63:5b:23:
0f:fd:15:33:f9:97:d6:66:46:16:90:06:02:cc:e7:94:a2:07:
8e:22:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:15 2025 by rpki-client