Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier: ky1R69/9Oshl6rZr0bsaGETkyjjPeTrvaoeSqnXHeyU=
Subject key identifier: 10:77:D5:37:C9:0F:6B:81:04:DC:0F:30:7C:CB:C1:A7:9D:E7:AA:1E
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 019A50E40A6B4E83D70A8351759800D61DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:53 +0000
Manifest this update: Tue 04 Nov 2025 22:01:53 +0000
Manifest next update: Wed 05 Nov 2025 22:01:53 +0000
Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: UjakXPPlTB/GGhHShJAdIkw4++x0KE34VO5lrdjYT7E=)
2: rEnYgfgJaCjn_qIROc2RziotFd8.roa (hash: tyTMLNN1BSIUG9pwd6OlkaqCcb+yNG9RgWzpF+pWE60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:0a:6b:4e:83:d7:0a:83:51:75:98:00:d6:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Nov 4 22:01:53 2025 GMT
Not After : Nov 5 22:01:53 2025 GMT
Subject: CN=1077d537c90f6b8104dc0f307ccbc1a79de7aa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:57:31:c1:87:9d:68:79:60:b5:0f:f7:a9:
16:a5:74:3f:16:83:4c:4b:c7:60:01:03:5e:a5:7f:
1c:87:33:2f:a6:82:15:d7:b3:d6:2c:c2:d8:7f:5d:
79:08:2b:89:2a:5c:24:7a:e5:2a:60:d7:f2:6f:81:
6f:15:e6:da:65:f2:56:e8:71:c8:51:3b:f7:f8:96:
65:f9:b5:f6:68:86:b7:74:92:56:b0:0a:73:86:9f:
ea:d7:3c:b5:a2:63:43:ad:cf:c9:5a:79:f7:6c:60:
da:32:f4:9d:12:ba:9f:66:41:10:6d:60:35:ca:92:
4d:f0:c4:1d:85:4c:98:45:dd:28:d7:cf:3b:3b:c9:
95:48:6d:45:95:d5:12:8e:94:d2:c2:c9:03:14:39:
cf:40:70:db:8d:79:33:24:8f:df:3f:2e:c4:79:a5:
22:0a:57:e0:21:c4:06:36:3e:58:43:bd:54:a4:a5:
2f:76:ef:98:4a:55:fd:3b:f8:99:af:6c:00:24:25:
1f:4c:cf:50:5d:ef:1e:b5:8e:19:1b:f5:25:97:19:
9b:6e:e7:73:06:6f:5c:9b:b3:61:0b:7b:e4:13:ca:
81:a5:3a:91:88:da:7d:f8:01:8d:f2:57:af:53:9c:
87:10:d8:0a:dc:b0:98:de:27:f8:98:08:0a:42:b5:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:77:D5:37:C9:0F:6B:81:04:DC:0F:30:7C:CB:C1:A7:9D:E7:AA:1E
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:95:8a:72:eb:39:e5:99:e3:c6:3c:9f:41:95:2c:0e:79:46:
e7:bc:67:65:3d:cc:1b:5f:88:85:22:8f:7a:1b:cd:00:be:19:
f6:50:23:64:d3:89:69:87:d8:54:7f:66:c3:75:86:5f:3e:a9:
34:64:d4:23:f4:c9:e2:0d:e3:51:f8:ea:95:9f:66:51:01:67:
16:ba:6d:f1:87:06:62:c4:03:58:0e:d1:94:f4:96:8a:b8:8d:
54:70:20:c5:98:e5:2f:96:10:2b:d1:8a:13:46:52:13:24:47:
f4:b1:00:d4:a7:88:73:b9:5e:55:f0:42:a3:41:d8:db:7c:00:
b2:91:12:22:6c:0e:37:af:7d:de:de:7e:80:67:aa:f7:a6:ba:
98:ea:ed:2d:b3:63:e8:71:78:fd:c4:23:c8:92:7b:c7:5a:15:
a6:86:5b:d8:2f:52:87:f5:a6:0c:d6:fd:ae:89:50:ba:f3:0d:
e9:20:3d:2c:68:1c:a4:3b:6f:76:1b:20:ab:a5:06:e4:ee:a4:
8f:9f:c1:a1:88:cd:e6:47:be:81:7f:a0:8a:8e:a6:3c:71:83:
11:d7:63:fe:09:a0:86:d9:a5:5a:5c:43:a6:00:b7:34:5b:9d:
75:93:f0:4f:02:7e:96:0b:8a:52:39:a8:2a:45:a0:9f:8c:81:
b8:c3:56:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:45 2025 by rpki-client