Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: KfT21cfd8MvRq3pXc9xmCk/+VpjxZVP3jXYEVzmt0eA=
Subject key identifier: 6A:01:29:95:76:BC:30:D3:D4:26:3D:19:98:05:93:5A:3A:BF:71:58
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 019A01B61FDE0FF8175F1CD8B07AB555B5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 13:01:44 +0000
Manifest this update: Mon 20 Oct 2025 13:01:44 +0000
Manifest next update: Tue 21 Oct 2025 13:01:44 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: z2a5NzQZZ/+oPsoU2fWKqaD0Q0IGkH7Q2AYoy79MCw0=)
2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:1f:de:0f:f8:17:5f:1c:d8:b0:7a:b5:55:b5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: Oct 20 13:01:44 2025 GMT
Not After : Oct 21 13:01:44 2025 GMT
Subject: CN=6a01299576bc30d3d4263d199805935a3abf7158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:6f:c6:c7:5a:e9:ab:e2:cb:71:f3:78:4f:
0b:8d:39:bb:df:dd:65:38:1d:c1:41:69:34:ce:40:
62:7c:b6:ce:79:9e:24:5d:ca:e9:62:06:8b:19:63:
73:74:28:bc:59:81:09:53:ef:79:93:d0:4f:4e:6a:
19:6f:f4:83:0d:4a:a1:12:c6:dd:cb:a5:df:9c:14:
06:68:a5:02:32:a0:94:95:99:5c:6d:c4:86:52:3c:
7f:58:2e:eb:ef:02:81:bf:cd:13:48:a4:2f:01:aa:
a0:7d:fd:45:ad:07:7e:e8:e7:48:f4:7e:a3:b9:20:
43:3f:fb:e8:fe:a2:a6:d4:a0:e0:06:42:7a:ec:38:
c8:c5:bd:94:be:e5:38:7c:c8:c2:be:7b:62:cb:ca:
f8:0c:e2:26:e6:53:91:60:e0:a4:b5:e3:79:fe:c5:
92:94:06:d7:69:f9:d2:ce:00:ba:fe:06:dc:c1:12:
8b:cf:36:e0:af:03:48:16:78:e6:ef:ca:39:86:00:
a6:95:61:33:e5:9b:ee:0c:38:52:39:44:81:dc:2a:
1c:ef:19:39:40:40:27:14:b7:10:25:12:f9:41:f4:
4a:0c:56:7f:ad:6c:e4:f4:ce:5b:18:ba:cc:2c:2d:
46:a3:c4:7f:57:0e:ee:1c:10:dc:df:78:e6:91:4c:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:29:95:76:BC:30:D3:D4:26:3D:19:98:05:93:5A:3A:BF:71:58
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:16:b3:09:e6:08:17:df:f5:ff:a6:06:24:4b:22:3e:f8:
39:76:2d:89:cc:e4:0c:dd:a6:58:aa:a8:27:ec:e0:f7:d5:61:
e6:b5:f5:55:f0:40:ea:07:6a:85:03:68:9b:75:f1:e3:9c:18:
4a:30:53:50:bb:af:d5:6b:2e:b4:c4:25:8a:a0:04:88:6c:d7:
3e:6f:34:ad:4f:b8:bc:2e:87:3a:de:b9:55:04:18:b0:d3:78:
59:11:df:da:e5:56:aa:7a:9e:72:86:e6:b9:37:b6:1d:f7:77:
d7:34:de:2c:b0:5d:b4:5f:5c:45:6b:2c:c8:db:5a:b7:cb:82:
fc:b5:c2:6f:49:53:9d:cf:67:1a:bb:ac:30:71:97:30:a5:88:
27:f7:74:9d:06:cb:96:98:b1:8e:a1:ea:2e:d2:82:2a:b6:39:
93:bb:21:88:dc:3d:97:ea:ba:2f:32:5a:77:27:62:9a:19:34:
7a:26:85:1c:b1:24:fe:87:28:f9:b4:c9:21:93:bd:91:6a:92:
72:9d:cd:f4:b9:1e:eb:da:51:3c:f3:d1:f3:96:74:02:50:fd:
54:c2:8f:41:b0:aa:67:0e:50:18:f6:db:68:f7:02:bc:57:e6:
32:bd:d5:b0:46:f5:70:27:72:de:9c:c6:05:66:9f:32:8e:99:
88:ee:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:47 2025 by rpki-client