Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: iQlW0nteEmlnm+2a9AWle35KuzGwaaT4turkRBaVWuM=
Subject key identifier: A4:1F:DD:14:88:93:1B:57:40:10:6C:EA:12:13:BA:40:DE:2E:E9:4D
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 0199FAA1113F79A93387AD90961FBADF21B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 13E0
Signing time: Sun 19 Oct 2025 04:01:23 +0000
Manifest this update: Sun 19 Oct 2025 04:01:23 +0000
Manifest next update: Mon 20 Oct 2025 04:01:23 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: qwXQ3G5eac4ipJC5v1XMmv/hFBSeJn7FMz7U0BG0J+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:11:3f:79:a9:33:87:ad:90:96:1f:ba:df:21:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Oct 19 04:01:23 2025 GMT
Not After : Oct 20 04:01:23 2025 GMT
Subject: CN=a41fdd1488931b5740106cea1213ba40de2ee94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:74:2d:98:f1:a1:bf:11:19:d3:9f:1a:bc:
3c:72:4a:be:d7:6c:05:5c:ad:11:31:b9:41:3a:ff:
c1:12:d6:89:1f:79:fd:30:b1:e9:2d:8d:ce:a4:c9:
45:ca:73:fc:08:85:35:19:8e:67:1c:c8:28:46:db:
69:a0:fa:95:a5:96:66:31:d1:f8:17:33:fa:fe:e7:
b6:cf:b9:61:56:58:a5:08:62:1e:98:45:fa:89:e4:
39:5a:aa:fc:75:ac:92:14:84:28:83:7e:61:20:1c:
5e:b7:85:5d:d5:6e:52:bc:c3:17:e2:0d:32:80:22:
66:73:25:4f:bf:31:ec:72:b7:9d:c8:69:26:0a:b7:
47:e3:9a:9e:65:0d:9c:d5:37:7c:47:c6:d9:87:4b:
01:34:02:9c:35:06:55:5a:f6:cf:83:be:97:71:ad:
44:7e:3e:53:42:eb:6c:1a:19:74:65:1e:47:de:fb:
f8:55:8f:1b:15:c7:d7:02:27:c2:af:fc:9b:68:ee:
ad:f8:c8:17:b0:4b:e5:f5:39:e2:fc:98:0d:2f:05:
68:64:ca:43:2d:18:43:32:62:8d:aa:50:b4:68:26:
44:8f:04:d4:c4:b2:21:39:df:ca:be:df:4c:cb:2e:
f6:7a:96:f8:5b:68:18:eb:6d:3a:5b:8a:10:91:f1:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1F:DD:14:88:93:1B:57:40:10:6C:EA:12:13:BA:40:DE:2E:E9:4D
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:86:f6:64:5d:f8:62:12:b9:ce:4a:d0:bd:ee:98:df:46:77:
eb:c8:1e:e8:6b:dc:3a:34:a8:93:b1:d0:50:7b:3d:bd:8f:74:
72:e6:6b:ef:72:0f:14:56:9e:c1:43:70:f9:12:d4:a2:70:75:
51:58:a9:6c:0f:c2:b5:db:2d:bd:ae:83:50:da:0f:1d:58:8c:
b1:4c:00:cc:f0:d0:06:56:f5:76:d8:84:dc:60:52:ba:bc:0e:
1c:6d:4f:92:f0:0b:07:5d:07:65:d0:15:d2:3e:53:8e:8f:95:
38:62:cd:17:69:fa:57:aa:99:6a:9e:65:a4:ff:11:26:c1:c2:
b2:73:6f:96:97:33:b1:8a:31:e5:f0:78:f5:0b:8f:d1:b8:8c:
c8:77:ca:ab:20:2f:0f:13:17:5b:7c:a1:61:3f:05:27:ed:4e:
ca:18:9e:8f:a9:04:10:0a:97:b3:ba:67:70:8c:fa:44:87:87:
c7:7c:80:60:13:56:c8:a3:86:fb:90:1c:2b:3e:0c:2d:27:04:
a8:39:3c:4b:63:fa:97:5d:25:3f:40:68:42:02:fc:4b:88:49:
1b:51:27:0d:62:7d:37:4d:f7:da:45:20:c2:8c:05:6d:c2:20:
85:26:ed:28:c4:fd:23:fb:da:5e:8d:28:eb:43:99:4d:3a:c9:
b2:1a:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:55 2025 by rpki-client