Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier: CvwJZw8QyXtc3JGNNXEiSTBppHMJR7hkNM/SseIkLyw=
Subject key identifier: 97:13:5D:CA:CF:29:1A:BF:83:35:DF:28:72:C3:39:5E:FA:A8:62:42
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial: 0199FF59B37D7CDF70C3FD1A736C81B4C660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number: 0867
Signing time: Mon 20 Oct 2025 02:01:32 +0000
Manifest this update: Mon 20 Oct 2025 02:01:32 +0000
Manifest next update: Tue 21 Oct 2025 02:01:32 +0000
Files and hashes: 1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=)
2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: pWHd+9JnpTl//QVfmMLX7OeRD9HyurGkMFZSvnhW6H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b3:7d:7c:df:70:c3:fd:1a:73:6c:81:b4:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Validity
Not Before: Oct 20 02:01:32 2025 GMT
Not After : Oct 21 02:01:32 2025 GMT
Subject: CN=97135dcacf291abf8335df2872c3395efaa86242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:51:3f:21:3e:ad:f1:3d:c8:15:c7:71:2c:
45:73:91:76:cc:c9:e9:8f:b3:10:9a:ab:13:4e:59:
72:ae:26:b5:40:ca:2d:73:be:f0:ca:df:8c:bf:94:
df:1d:77:89:7c:cb:27:92:a2:1f:e1:55:79:3a:81:
f0:56:e9:1b:c8:6c:40:3d:30:c5:e4:5f:d5:b8:c6:
4b:94:8f:30:91:b2:41:a9:61:f8:04:82:f7:6f:d0:
b1:b3:5b:2a:3b:0c:f4:e6:26:ef:9a:5b:6b:16:f5:
f2:da:42:bf:4a:01:d2:42:40:01:3d:54:21:dd:e9:
09:b8:0c:0e:d8:f5:84:e7:da:95:44:e9:c6:c9:39:
c7:1a:ab:92:37:f6:34:00:aa:ce:aa:27:71:5f:e9:
68:6d:ed:d5:87:c3:aa:1c:68:be:81:7b:7d:c6:31:
ee:14:d2:4b:d7:b1:19:da:ae:35:64:8d:e9:81:21:
7d:c6:ad:41:10:99:48:15:97:03:26:5d:bd:1f:a3:
0e:7f:7c:95:9e:32:5b:10:7d:56:a4:df:10:cb:73:
20:a1:8d:43:46:60:f7:6a:2b:90:17:aa:8b:7c:8d:
58:70:28:9e:6b:4d:f8:a0:ce:7e:35:e7:e3:89:f5:
ab:38:d9:10:42:61:91:1f:7b:30:23:b2:29:37:d3:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:13:5D:CA:CF:29:1A:BF:83:35:DF:28:72:C3:39:5E:FA:A8:62:42
X509v3 Authority Key Identifier:
keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ea:e3:dc:f5:b6:43:52:a7:1c:c2:8f:11:1f:c7:a6:3c:a6:
44:21:d4:d1:b0:99:24:17:a9:49:91:24:a7:55:14:49:e5:78:
d6:d1:57:4b:01:77:7f:7e:a6:60:03:b0:0c:7b:29:39:0f:b4:
68:a7:b7:8a:64:60:b6:13:23:3b:31:69:08:69:0b:e4:75:f3:
b1:2f:da:8d:94:c8:3c:ff:f2:6d:da:82:56:9b:9b:e0:fa:62:
3a:72:c4:0d:9a:0a:d0:9d:dd:c5:49:44:78:60:7a:a2:f0:e1:
ee:0f:19:8c:e0:b5:8b:5e:27:ac:b7:da:53:a8:2d:af:11:8c:
d1:01:ae:64:23:c3:b2:44:c8:c1:03:3a:c8:ab:16:90:45:80:
31:7b:52:c8:ab:4a:db:bc:02:00:18:48:37:d0:33:4e:05:f7:
02:b2:c3:48:cd:71:8a:5a:bb:30:58:74:ce:26:05:b6:3a:a5:
08:71:8b:99:e2:b6:62:91:05:58:e9:1b:e8:82:3c:04:56:e0:
79:f2:b4:bf:51:64:09:a9:aa:30:3d:ce:e5:8c:ed:25:74:98:
5d:a1:67:bb:93:9c:72:f5:e8:e9:df:fd:75:d0:83:d8:3f:2d:
4e:29:b4:83:94:dc:24:d7:b8:17:dd:77:24:66:bf:5a:e6:a9:
b9:78:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:59 2025 by rpki-client