Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: /0Rxy66Lu2m+EB/Go17EvpY6tcTKSPKwN27rZNlS3HE=
Subject key identifier: 2A:A5:0F:A0:31:B6:9C:60:53:6D:EC:F4:1F:09:28:C4:24:E2:B8:FD
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 0199FE102EFC285ECC8887379F693E6F6ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 20:01:37 +0000
Manifest this update: Sun 19 Oct 2025 20:01:37 +0000
Manifest next update: Mon 20 Oct 2025 20:01:37 +0000
Files and hashes: 1: 7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa (hash: 9bGwX0kwTRRgIdjNNDlgMuEQgvhNB3ZWI22IbqLrXvk=)
2: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: 3Xt7s9BAilC/zoy3LigQn2YQqVB8FaeFx2N+bPa5Dbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2e:fc:28:5e:cc:88:87:37:9f:69:3e:6f:6e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Oct 19 20:01:37 2025 GMT
Not After : Oct 20 20:01:37 2025 GMT
Subject: CN=2aa50fa031b69c60536decf41f0928c424e2b8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:3d:04:b8:c3:77:95:b3:a9:0a:71:fd:19:
6d:4a:0e:1b:41:7b:3a:d1:44:db:ed:32:7b:f7:d1:
5d:93:45:ff:3a:30:47:71:4d:dc:e3:72:75:41:1b:
89:1b:3d:e9:37:a6:27:2d:33:e5:21:2b:75:ee:16:
02:59:df:60:0e:65:66:8b:e9:7c:a2:af:99:36:f9:
9f:2b:c9:60:6c:be:80:6c:48:2a:82:e9:2a:f3:2a:
42:59:9b:06:c7:97:00:dd:4e:45:5f:80:30:07:9c:
98:19:f7:70:53:8f:d4:c6:c8:26:78:7e:74:a6:aa:
34:a0:19:1a:a2:3a:0e:d2:65:f9:bc:a7:45:12:a7:
f9:f4:2b:88:3c:7a:0d:a2:ca:88:49:11:18:00:12:
46:d1:16:cd:e0:cf:27:1f:59:3f:ee:45:f0:64:c2:
88:b2:fb:e2:48:55:45:4c:68:75:8c:ee:32:23:dd:
cd:cc:8e:9b:79:29:a3:ff:3f:3b:1c:96:9a:dd:63:
a9:8d:bd:ca:6a:f8:97:ec:88:6e:06:a8:98:37:40:
2e:dc:5b:8c:13:b6:78:ad:23:90:57:10:18:bb:2a:
ae:7d:a1:cf:9f:47:c9:1d:cb:f3:cc:f1:0d:b5:24:
99:d4:43:0e:92:b9:af:f8:41:c8:2d:c9:03:da:27:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A5:0F:A0:31:B6:9C:60:53:6D:EC:F4:1F:09:28:C4:24:E2:B8:FD
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0e:49:76:85:a0:69:ff:7b:19:9b:ee:c5:09:2d:b8:00:0f:
52:6b:eb:f0:dd:89:dc:01:7d:d2:ad:fc:3e:2f:79:47:31:98:
63:6f:e8:80:1f:1e:fe:5f:5b:c2:a3:70:55:66:f9:17:2d:3d:
64:26:d2:1c:98:0b:59:c5:28:d1:65:4c:c0:0e:20:ed:03:26:
47:57:3f:94:74:4a:d2:09:19:86:e7:30:90:d5:1c:3d:c7:04:
85:20:c5:fc:1f:9e:f7:91:80:f2:2f:60:e6:61:a3:fa:50:11:
57:c6:95:8e:9c:56:4d:22:e2:71:80:73:ff:5f:2d:d0:56:03:
ee:92:98:59:08:62:47:33:84:21:81:5b:62:27:3d:a7:67:2d:
0a:79:5c:49:1f:69:fa:81:a1:e2:2c:ed:76:c4:71:6b:29:4d:
30:06:41:0a:52:69:22:23:88:d9:2f:4e:40:ad:ac:1e:f8:2b:
fd:d1:69:43:e7:34:eb:69:57:c6:fb:fa:96:2c:5b:35:22:47:
2d:3e:bc:59:03:f6:a0:00:93:63:7b:23:db:5d:31:63:c1:99:
5f:f1:4a:48:ae:ff:0a:3a:4e:1b:36:6d:70:8c:6f:53:45:c3:
26:ba:8b:3b:62:ee:56:67:db:f0:d0:ae:d7:ec:12:11:eb:62:
3e:80:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:03 2025 by rpki-client