Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: 81TSnHrpMgPfSYzXbmxPPVVO1xV0IxZhDbgxRV6PVsg=
Subject key identifier: EF:28:56:CF:86:3A:10:4A:E0:F9:A9:E6:0B:46:2B:36:76:6B:31:03
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 0199FFFE4C5CF698330AC7E926B99678DC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 0B92
Signing time: Mon 20 Oct 2025 05:01:19 +0000
Manifest this update: Mon 20 Oct 2025 05:01:19 +0000
Manifest next update: Tue 21 Oct 2025 05:01:19 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: w6sYKzim1mJfXrjPkB3VgBuSmY9KyrJ4CnDFJuEiy/Q=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:4c:5c:f6:98:33:0a:c7:e9:26:b9:96:78:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Oct 20 05:01:19 2025 GMT
Not After : Oct 21 05:01:19 2025 GMT
Subject: CN=ef2856cf863a104ae0f9a9e60b462b36766b3103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:5e:3f:1b:ce:fc:81:35:75:36:2f:78:10:59:
71:95:a9:73:20:62:6b:dc:4a:41:bc:06:35:95:95:
50:7a:ca:e0:de:90:34:7e:73:b9:40:09:1f:b0:84:
2c:d9:55:6f:0c:35:ce:4d:fb:94:28:04:df:59:a4:
92:d6:c0:f3:a5:19:60:c0:bf:0a:2a:bb:3b:00:97:
50:91:16:10:52:cd:cb:38:b6:2e:33:21:18:1a:1f:
a3:a6:f5:57:62:0b:78:f2:e5:7b:82:6e:c1:7d:1c:
46:5d:d0:5a:38:c0:a4:9f:b9:c7:d2:3a:de:04:6a:
b3:14:32:24:dd:96:58:e9:6d:44:50:26:e6:d9:40:
b8:ef:8d:a9:3a:86:82:20:e8:0e:67:cc:ec:fe:91:
e9:32:96:2f:b8:11:32:ba:56:1d:dd:8d:4b:fd:d5:
d7:8f:1d:15:9e:9b:80:b6:af:21:39:57:24:47:b2:
2a:17:46:85:9d:67:f7:82:0c:b1:21:07:db:44:ef:
c4:95:5b:4c:3a:5f:67:8d:40:39:26:32:04:53:d9:
e7:69:e5:19:ae:48:7a:52:37:b9:41:67:7c:49:25:
a9:29:2e:1e:1f:e5:1b:6e:46:7e:61:15:c5:34:14:
48:b0:61:f3:f3:f2:d3:97:ea:4e:da:c5:41:90:22:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:56:CF:86:3A:10:4A:E0:F9:A9:E6:0B:46:2B:36:76:6B:31:03
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:0b:69:61:d9:01:a3:bc:d1:6f:14:11:e5:4b:c9:40:49:
80:84:9d:d9:c4:25:c4:34:a8:e7:6a:d7:68:b4:40:c5:58:2e:
36:62:e8:4b:50:b6:dc:e8:e8:b6:8b:24:81:c2:db:bc:0c:8c:
fc:61:33:4a:37:e5:ed:0a:fa:36:37:3e:10:28:9c:3d:37:3c:
19:34:78:66:8c:2e:c2:bc:30:2c:68:77:ca:e6:03:b6:92:61:
5e:fa:7d:4b:d2:91:73:9f:a4:fd:8d:45:ed:d1:eb:5c:d7:1b:
1a:15:ff:10:92:c5:17:c7:e1:b0:dd:4b:84:55:fa:b2:20:fd:
b3:bf:22:ea:de:af:c8:b1:f1:72:ef:d3:48:fe:09:dc:36:1b:
50:4f:6c:1a:6e:92:53:ac:c1:f0:52:99:b8:ac:68:d6:1d:b8:
eb:4c:50:cd:26:14:5f:9f:7b:ec:86:a0:92:c8:61:ce:1b:a1:
5c:98:a9:2f:ed:e8:b9:a0:8b:78:92:d9:75:b5:24:3b:7b:3d:
b8:5f:04:1e:fe:f6:a7:1d:95:fc:70:a8:87:c9:ef:94:fa:34:
8e:0e:41:0f:19:13:63:37:85:8d:71:85:a9:e2:52:33:4b:36:
4c:71:7e:dc:9b:08:c1:07:6f:57:37:e0:b5:72:2f:68:45:82:
e3:ec:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:37 2025 by rpki-client