Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier: 85vMXgjCtk+Y500LWUtouNDdzMwgJVwBKfMxAAxHR5w=
Subject key identifier: C2:02:11:0F:40:46:ED:76:CB:DF:08:8B:78:6B:5A:5D:2F:11:66:8A
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 0199FEB482240062D6F2AFB1A8D689DA0744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number: 09EE
Signing time: Sun 19 Oct 2025 23:01:06 +0000
Manifest this update: Sun 19 Oct 2025 23:01:06 +0000
Manifest next update: Mon 20 Oct 2025 23:01:06 +0000
Files and hashes: 1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: EOvQ48GW93Pn1wu3chbxsIEZMppwq7o3vIGQ28P1qRc=)
2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:82:24:00:62:d6:f2:af:b1:a8:d6:89:da:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Oct 19 23:01:06 2025 GMT
Not After : Oct 20 23:01:06 2025 GMT
Subject: CN=c202110f4046ed76cbdf088b786b5a5d2f11668a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:2f:2f:e3:5d:c3:22:56:43:cf:5e:64:68:
38:87:8e:e2:ec:9d:0f:62:b3:25:d4:6b:f6:9e:67:
e2:90:2d:66:d7:6c:eb:9a:0b:75:7c:18:21:6e:4f:
8f:fa:68:fa:2d:67:a5:09:c0:a3:15:95:a6:45:6b:
ed:71:a8:28:a4:9c:81:30:46:2b:db:23:d8:73:a0:
43:45:df:b5:6d:bd:ea:96:7a:08:68:57:4f:6e:a6:
dc:c1:e7:bc:c4:8c:d3:2d:d5:54:ea:39:c3:3e:ee:
56:9c:1c:17:28:47:b3:68:d8:72:15:9b:cc:ea:78:
bb:cb:63:aa:ef:f5:10:b8:74:5e:2b:b0:31:aa:f5:
ce:77:32:ad:ce:27:26:4e:a1:b5:44:b8:d8:76:72:
cf:63:d3:54:6d:fd:0f:25:a0:ee:51:70:c2:da:56:
d7:9c:4b:ca:9e:b0:99:cf:03:a8:8a:4b:af:d0:31:
2f:e6:84:a2:f4:35:62:0c:4f:c1:11:2f:f9:b4:e8:
57:87:34:e7:34:b5:c1:b0:95:2f:df:88:b5:76:22:
7d:3a:9e:0f:94:d9:68:8a:92:b7:9b:e2:b7:3e:59:
10:a2:60:bd:ae:4d:d3:54:85:52:ca:06:ff:42:37:
1b:3f:e8:99:b8:bf:9c:c3:02:18:91:42:ad:a4:ca:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:02:11:0F:40:46:ED:76:CB:DF:08:8B:78:6B:5A:5D:2F:11:66:8A
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:82:69:3a:46:95:9d:46:32:bf:c9:50:5c:f0:9e:b5:25:0f:
38:c1:36:74:98:aa:2c:a8:60:07:21:be:e3:e7:0d:92:a6:09:
9e:83:3b:45:f0:02:2e:13:d0:91:77:b1:ca:11:a2:55:0d:ad:
53:67:0b:b9:c6:cf:66:07:7b:44:e5:d4:2e:97:f9:0a:c6:0e:
6c:51:c9:4e:5e:4b:29:09:14:69:e1:b9:b6:ed:ee:58:ab:68:
dd:76:9c:b7:e3:43:ec:af:76:be:4e:29:c7:2f:e4:14:e6:d0:
86:b1:44:08:16:8c:ef:8a:7a:6e:34:fb:54:41:a0:cb:cd:bf:
1c:00:22:03:1c:d8:60:4b:9d:07:f3:30:a0:08:19:77:3a:05:
09:2b:f0:96:16:9e:bb:d2:09:c0:af:ef:ae:8c:54:87:ef:a0:
a2:5e:8c:cb:a9:79:42:bc:67:0c:a5:d9:9d:7d:24:b9:ff:54:
7c:b4:8e:08:7f:cd:6d:e8:9f:1d:4b:0d:d8:21:3f:cc:47:1e:
54:fe:d3:76:8d:67:ba:bd:ff:e2:2a:44:f3:89:78:f3:15:1b:
f9:dc:00:2a:d2:6d:ff:db:92:28:77:1d:9b:51:f4:ec:b1:23:
14:9d:cf:05:bf:78:61:71:69:13:c9:34:79:f6:ca:f7:da:85:
a0:c9:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:59 2025 by rpki-client