Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: QAmhYDTkAwZubwH16kqqmh+fUxHpF3Sg47DORbv6GYI=
Subject key identifier: 6F:C9:1E:E7:A9:48:3C:06:DE:63:58:A6:A6:84:6E:8C:25:86:B6:DA
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 0199FF22C7C97D169F968B084B865192E142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 1674
Signing time: Mon 20 Oct 2025 01:01:33 +0000
Manifest this update: Mon 20 Oct 2025 01:01:33 +0000
Manifest next update: Tue 21 Oct 2025 01:01:33 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: J4w6Ig8SPnnw5ePste9hJMyRcs6bprLwp/9jsv9xOSU=)
2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c7:c9:7d:16:9f:96:8b:08:4b:86:51:92:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Oct 20 01:01:33 2025 GMT
Not After : Oct 21 01:01:33 2025 GMT
Subject: CN=6fc91ee7a9483c06de6358a6a6846e8c2586b6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:71:92:a5:7d:e0:a0:21:36:4f:c6:25:0f:
4c:bb:e8:c6:83:77:ab:af:2d:64:bd:cf:38:98:78:
42:f3:0c:cb:ca:d6:15:04:a0:fe:60:d1:51:75:cd:
82:68:a7:0f:e9:62:76:51:b7:a5:4a:7e:5a:a3:2e:
43:fa:b1:08:dd:f4:b1:ef:72:2e:9d:fb:c3:c2:f5:
94:1f:4f:7c:8e:7a:40:c1:a2:ec:99:8e:64:87:98:
f8:b6:8e:78:09:0f:0a:1b:7b:70:0b:30:91:1f:fb:
48:ef:35:6e:8e:2e:d7:d5:46:10:ab:28:01:3b:8e:
17:f5:32:6c:ab:fd:ba:50:7a:20:74:6d:5e:05:26:
2a:93:c0:12:f1:d4:02:72:bb:08:43:90:54:fb:85:
49:55:64:4b:95:93:a4:20:1d:5e:7d:a3:d1:82:5f:
d2:d1:1e:8d:96:46:f7:66:7e:ed:9b:e6:c7:fb:ce:
8a:00:66:8e:04:3f:cc:0b:30:0d:ee:d9:c5:db:49:
ac:96:82:b1:3a:07:74:06:ee:5e:ac:ad:c6:9a:88:
c1:31:f1:75:8a:64:79:85:9f:30:21:e0:72:c0:c4:
c6:17:6d:5a:78:49:f7:66:e5:bf:58:70:80:1f:7b:
36:06:cf:59:bf:e8:c5:7e:68:eb:9f:d3:64:99:af:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C9:1E:E7:A9:48:3C:06:DE:63:58:A6:A6:84:6E:8C:25:86:B6:DA
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:21:76:a3:75:2e:37:b8:64:c2:7d:0b:47:ef:83:22:ab:61:
14:4c:23:40:94:74:2f:c8:ba:6c:52:94:0e:04:dc:8d:03:d3:
40:d8:c7:d2:b3:90:1b:cd:33:61:0d:67:5a:8f:cc:ed:bc:10:
20:57:5b:96:39:42:5c:31:80:28:71:64:de:28:09:5f:99:67:
05:3a:d4:75:d3:13:62:8f:0b:d9:0d:c0:71:3c:9f:7e:33:df:
97:11:12:74:be:c7:b6:5d:a8:6a:81:17:a2:61:06:c7:20:c3:
6d:06:68:2f:c9:c1:6b:ad:f1:48:73:d3:29:bd:8b:88:d6:e8:
3b:96:0a:a5:75:98:fb:6f:d2:63:22:ca:fa:db:08:f2:12:a0:
83:31:a1:89:d7:a2:f9:67:31:08:43:22:c0:c7:8e:dc:e9:56:
29:28:35:0d:ba:a6:21:75:1c:16:0e:75:6c:20:6e:9d:73:14:
e3:16:d7:9d:e2:8d:a0:25:c0:6b:f2:f2:96:be:a8:b5:77:59:
30:2f:ea:35:53:4d:0a:c8:c9:ee:ee:43:c9:ce:22:57:72:77:
f9:de:57:ce:10:56:1f:ab:91:d8:33:67:40:dc:c4:58:d0:e6:
46:e6:01:3f:40:22:ff:2f:6b:f2:52:5d:2e:b3:95:7f:96:c4:
7d:de:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:52 2025 by rpki-client