Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: v4swM6JijKz1xz+sOn+4x1R74UETASIFKlwdad7gHdo=
Subject key identifier: AB:8B:F2:0E:DE:EA:1D:FE:76:91:57:75:43:1D:80:82:9E:0A:36:43
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 0199FB7CC3E307023F0684738CEDF8C3DE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 1481
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: uQhwZFa4Zjtswv3w9s8mdN9vPLu3vKT2KqCPmDFPMTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c3:e3:07:02:3f:06:84:73:8c:ed:f8:c3:de:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=ab8bf20edeea1dfe76915775431d80829e0a3643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:8d:9d:34:74:b1:70:01:5f:3c:58:df:c3:
6e:37:d6:23:60:27:57:29:46:12:1b:66:ff:a8:bc:
58:a2:eb:3e:e9:5d:7f:29:f7:bf:65:85:fb:2f:40:
de:3b:57:05:a9:b5:00:bb:12:84:23:73:75:42:51:
75:61:a2:2e:ff:73:0d:55:62:79:ae:a0:64:97:66:
49:87:0a:c9:75:d0:e4:43:4d:36:16:95:6f:6f:b7:
ad:b4:f3:23:a4:09:66:11:9c:59:b5:08:a8:4a:3d:
36:f1:80:0a:05:a3:b0:a3:38:91:ae:09:89:a4:99:
81:e8:f1:e3:03:83:c7:70:12:4e:7a:18:c8:0f:d1:
68:7b:3b:12:db:14:b2:12:d9:80:03:0d:ed:d7:ba:
85:8b:6a:10:1e:87:31:ab:db:c0:f1:a9:68:54:3e:
e4:d2:6b:93:73:8a:18:7f:10:36:ee:c7:a2:40:cc:
04:b5:85:97:9c:55:fe:13:cb:f2:e6:79:98:ca:96:
08:9a:b2:97:0d:91:1b:ab:f8:ad:3b:60:e1:1c:49:
ee:87:11:e5:29:0e:03:4b:6b:bd:82:26:09:2e:20:
15:a1:cc:d4:65:8b:06:07:ba:5c:22:63:ce:36:80:
eb:48:66:e0:b7:ac:42:b3:57:b4:fd:de:37:d9:31:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8B:F2:0E:DE:EA:1D:FE:76:91:57:75:43:1D:80:82:9E:0A:36:43
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9c:85:a0:6f:3b:42:ff:0f:48:49:a2:2e:cd:25:c2:9b:52:
0e:f1:8c:b2:1a:c3:69:91:75:5e:1b:15:2d:26:ef:8d:a1:72:
2d:99:8e:05:de:c0:1e:bd:7c:d8:4a:83:e2:d2:ae:de:a6:55:
f7:38:70:a3:30:d0:d3:35:0a:8e:5d:7c:ba:2b:28:56:f4:8e:
fb:cf:c3:9c:19:fc:dc:a3:69:fb:d8:80:2f:4a:2a:78:c9:90:
ef:bf:16:ee:5d:4c:2b:a2:89:ad:f4:29:fb:1e:48:39:65:62:
8a:03:cd:27:81:d9:4c:19:ff:80:97:3a:98:a8:58:8f:eb:5b:
a4:6b:da:f9:61:8b:09:c8:0e:46:4d:0e:f9:b0:2b:31:77:82:
3a:93:f5:06:fe:77:d1:06:50:9c:63:7b:59:f7:a3:3d:cb:f3:
da:88:a2:b8:00:b6:d8:0c:ad:4d:d3:3f:92:1d:69:97:05:66:
c6:8f:98:2a:17:d0:4f:f3:ac:03:43:8a:5b:7f:3b:61:00:93:
9f:f7:22:7b:16:eb:d6:f3:b0:45:d3:aa:b1:3e:66:f8:7b:30:
e0:0f:f7:96:38:42:b3:0c:9a:a3:61:eb:70:1a:ce:54:bc:81:
3a:b4:b1:fe:87:7c:68:40:f6:5e:81:ac:42:7c:44:cb:63:96:
c9:77:91:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:02 2025 by rpki-client