Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
File: FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json)
Hash identifier: /oIx9fhcFAaSfns9SaBxLRvmCiksSp9Es9rc+B3lEfg=
Subject key identifier: AF:08:8F:86:92:84:A3:93:C2:BE:30:94:C3:6B:E1:2E:09:84:1F:89
Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Certificate serial: 0199FC58FA4F76D615153133DA9553F39DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
Manifest number: 0ADA
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: C5kS-eXFEoRGhSGKrj1aky_A-YU.roa (hash: 0Cexvh0L+qwpqym6REc7bvetIUnS6MiKORaDRSgSxQo=)
2: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: pjQmuOy0j8w+C6qHS6jlHsPFVj1MksI4kOEYTCnnbnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fa:4f:76:d6:15:15:31:33:da:95:53:f3:9d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=af088f869284a393c2be3094c36be12e09841f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:79:e9:46:30:71:ed:57:e9:cb:5a:6b:dc:
0f:d4:27:18:25:86:7b:10:5b:3c:11:a0:92:df:7b:
7f:1c:70:43:ae:c7:c3:ea:34:85:e1:d8:01:93:54:
40:16:58:c9:6d:4a:82:9e:05:8b:c6:46:0a:de:73:
a7:42:39:9e:3f:09:96:28:3b:db:6b:10:b3:c8:d5:
90:5c:d6:e5:9b:ce:05:e1:44:47:61:5d:ff:79:fb:
c4:39:66:fc:28:f8:41:1b:6c:d3:77:98:06:b4:7b:
4e:9c:82:bb:cc:2e:db:34:60:e9:3c:ec:25:ef:9f:
7e:c6:e7:62:88:ce:2a:ab:23:ee:9a:34:dd:27:c8:
61:e0:5e:80:8c:38:5c:90:e3:6b:e8:95:fc:1d:8b:
83:30:3e:64:95:e4:9e:2b:50:d9:9e:a6:8c:e7:70:
2f:b1:fc:05:2f:34:bb:06:2d:03:19:de:63:56:7b:
df:b6:21:05:f9:93:cc:0a:ca:74:66:89:24:b7:01:
8c:10:1a:5e:59:84:36:4c:a7:c9:d7:a8:9d:ac:c4:
58:af:64:97:49:b0:24:bf:b3:55:bd:f9:83:a0:a4:
7f:c8:99:d0:4e:1c:47:98:d4:06:bc:1e:64:b6:7e:
50:92:84:49:1e:b1:27:3f:af:88:96:87:26:26:b3:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:8F:86:92:84:A3:93:C2:BE:30:94:C3:6B:E1:2E:09:84:1F:89
X509v3 Authority Key Identifier:
keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:96:fe:fa:19:2b:27:cb:20:dd:f7:f0:93:e4:71:52:58:f1:
f8:09:80:de:75:12:d6:74:54:e2:4f:5b:98:54:c9:d6:d4:05:
04:e9:f5:f6:a1:81:df:db:8c:90:53:06:80:5d:86:b8:37:ee:
04:76:99:7f:d8:a9:fc:f6:d4:46:f4:be:e7:9a:ed:3c:e6:50:
51:03:51:0f:52:0c:90:02:49:f2:37:4d:d1:21:0c:d3:e4:21:
17:b5:e6:ca:33:33:fc:63:2e:32:c9:ec:93:7c:3d:48:ed:de:
23:e6:6e:f0:b1:81:35:e5:7d:61:a2:97:a4:f0:3c:e8:25:13:
71:41:98:2e:62:3a:e6:3b:eb:b0:f6:e6:18:85:6a:f9:08:c0:
35:8f:00:6c:ee:ab:af:59:17:f9:21:ca:13:75:13:7e:6c:aa:
7b:77:45:43:e5:fe:32:2c:b2:b1:92:fd:3d:86:3b:93:12:e9:
6f:30:60:ff:a0:30:b6:06:3b:2a:52:e1:d7:47:1c:68:8f:63:
3d:e5:18:c9:94:ad:ea:25:39:e1:d9:a7:3a:19:91:f2:2f:88:
f0:7e:7f:c3:ac:94:e8:c7:02:88:b2:bd:05:f0:99:f4:de:e2:
02:ac:dd:48:15:18:ef:55:89:e5:0c:52:83:d6:de:8a:d5:2c:
4b:e2:7a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:10 2025 by rpki-client