Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: PpeeHMDblLKVw3rzyiYJgM10OL/0KaBH8ok9is6yVDc=
Subject key identifier: 09:89:4A:8D:1D:8C:1B:57:B0:06:00:16:8D:1F:82:E7:A7:C9:85:3D
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 0199FB45EDAB933544D66D0C49A0060B1C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: pE8oPInBFJop70VR0vG0xVrFS2xx2cw8uyvcFk3/gms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ed:ab:93:35:44:d6:6d:0c:49:a0:06:0b:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=09894a8d1d8c1b57b00600168d1f82e7a7c9853d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:f9:3b:1e:6c:d7:1e:d9:df:a5:20:59:d4:
a9:3f:02:34:3c:68:7e:9c:62:31:0f:98:8f:d8:8a:
b8:ca:77:a2:8b:01:4c:61:4f:c6:4a:2b:5c:9e:4a:
e8:4d:90:2d:55:ca:2c:48:af:f6:61:49:63:74:07:
2a:8d:00:b1:31:e1:40:98:34:f7:83:de:fd:57:ac:
de:00:5c:e2:34:8c:49:46:f6:f9:97:1f:d1:d2:89:
c2:fc:c3:59:37:f7:60:c1:14:eb:76:aa:da:f7:39:
94:75:f7:e6:39:84:52:f4:01:eb:27:21:44:2b:74:
cd:1a:e9:e2:56:8f:db:b8:b6:d4:69:de:26:15:74:
06:87:26:6c:96:90:82:76:fb:6c:88:5a:d2:ac:2e:
ae:0e:41:ab:b5:63:8b:19:86:d0:e7:66:c7:b5:df:
c7:2d:44:7c:76:02:10:36:43:f9:99:e8:af:64:37:
b7:dd:c3:27:18:aa:b6:d2:c8:53:e7:90:9d:8f:be:
47:78:66:90:e3:29:c3:59:8f:7b:12:6b:c7:3e:86:
a4:fa:55:12:98:db:aa:e7:fb:99:d5:f0:ab:df:a4:
88:87:7a:c5:d8:e4:5b:0b:c3:d5:53:67:d1:ea:a0:
41:98:af:d2:37:14:37:bb:54:8d:a4:f6:38:02:f5:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:89:4A:8D:1D:8C:1B:57:B0:06:00:16:8D:1F:82:E7:A7:C9:85:3D
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7c:0f:64:86:c6:c9:cb:5b:67:fc:f2:e4:f4:fb:43:38:1c:
1e:d1:81:df:8c:ff:9b:67:fa:b7:7d:5a:67:1c:9a:23:5d:da:
36:46:1c:af:06:06:3a:0a:fb:87:90:6b:6e:7b:af:48:40:77:
20:98:b2:d6:88:8f:be:46:89:5b:06:d7:c8:70:10:3f:5d:4e:
2b:ac:30:f4:1a:9d:86:31:69:2b:f4:78:2d:bd:9c:13:00:19:
37:41:db:19:de:51:86:b3:3e:31:77:16:14:c0:f2:c2:47:40:
7b:74:a2:49:21:fb:15:a7:70:5d:1f:13:53:8b:f6:16:74:41:
45:ac:24:e1:dc:d1:c2:00:5a:d5:4e:ad:9d:92:86:07:1c:97:
c0:d7:a9:07:84:99:da:b2:3d:ba:31:9a:0c:89:80:9b:e4:4d:
0f:b6:c1:d9:66:fa:e9:7b:7e:a4:e1:c2:7b:41:94:f4:10:bd:
5a:20:6a:49:8d:a0:ee:c7:9e:86:94:14:06:e6:d9:8d:b2:28:
d0:2f:fe:e4:8e:f8:98:a2:39:5f:56:5c:d1:74:c2:d1:4e:33:
f9:36:9e:a9:31:b2:81:74:6d:a0:fb:5f:d2:21:7d:77:9d:3f:
cf:35:14:9b:6f:2b:b6:72:d7:98:2e:d5:cd:b1:12:34:fe:3d:
0c:0e:6a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:14 2025 by rpki-client