Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: fy2PmzIcVHlqTn7mpuHJ7g/tl/R/hzFCWc/uy5+cDhU=
Subject key identifier: 1D:1F:B5:11:42:A8:DD:0A:3A:BD:A7:2A:39:C5:67:4D:C4:52:20:DE
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 019A50E35796CFCE0D7FBB7DBCDA68425C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 0E71
Signing time: Tue 04 Nov 2025 22:01:07 +0000
Manifest this update: Tue 04 Nov 2025 22:01:07 +0000
Manifest next update: Wed 05 Nov 2025 22:01:07 +0000
Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: tJ+OO6LrA55AJOwQOCPnQk0e/eY1PK2k6JmQbYt7tjo=)
2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=)
3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:57:96:cf:ce:0d:7f:bb:7d:bc:da:68:42:5c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Nov 4 22:01:07 2025 GMT
Not After : Nov 5 22:01:07 2025 GMT
Subject: CN=1d1fb51142a8dd0a3abda72a39c5674dc45220de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:4d:77:2f:03:5f:93:52:9b:03:0f:b6:16:
e7:da:12:af:2c:b9:3a:4c:3a:90:d5:e3:0e:c9:50:
22:62:5b:37:4a:1a:0b:b8:90:8e:bd:37:9d:29:3e:
9e:74:ef:4b:a3:07:3e:4f:26:51:f1:92:de:f0:33:
12:f3:18:e4:bc:98:9a:0a:c8:49:f5:65:a8:39:a2:
74:1e:e2:ac:4a:4f:25:28:17:96:ac:35:43:1f:12:
7a:ea:14:51:a0:0a:9d:73:50:cd:76:bc:9c:92:87:
17:eb:24:e0:20:82:c8:c7:d7:c3:76:ef:07:90:43:
cc:1a:40:48:4a:65:60:a2:85:8f:9a:d7:44:a3:4f:
d5:61:e4:d1:d3:37:b3:03:05:9a:16:0b:77:68:94:
a3:d7:3b:93:91:01:09:29:54:6a:a6:ad:b6:8d:a4:
b3:71:19:fd:b4:9c:3f:99:a4:46:ad:87:7c:af:50:
b3:18:57:a9:dd:ca:01:bd:0e:92:b1:bc:e4:c4:9b:
a3:55:95:9b:44:11:78:f8:5d:58:69:9c:a2:84:02:
56:5f:f2:a9:b4:6d:e9:d3:20:dd:73:d9:fe:3f:8a:
61:52:f9:c6:d6:74:8f:6a:4c:3b:ca:bd:88:b9:8f:
ee:a3:bf:64:ee:ba:ad:fd:5a:12:8d:2f:1e:81:b9:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:B5:11:42:A8:DD:0A:3A:BD:A7:2A:39:C5:67:4D:C4:52:20:DE
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:99:c8:51:f2:e1:69:0a:21:7f:80:f7:e3:81:3d:aa:81:bf:
ae:5a:bf:50:e1:2c:b7:79:72:95:0e:2e:cb:2f:9a:69:43:90:
5e:d0:b6:53:85:99:1e:95:51:2f:08:72:7b:b0:11:93:f9:0b:
76:c0:9e:75:b1:12:7b:d8:b6:54:96:5f:ca:66:eb:78:45:33:
05:6f:02:87:0c:f9:e8:80:61:5a:65:48:eb:f1:8a:5a:38:72:
d6:67:af:92:c9:41:e4:d1:07:06:42:18:cd:55:e2:e0:25:f6:
7b:60:ff:5c:92:1d:fe:e4:cb:a2:da:4f:71:d6:ce:27:06:8b:
07:ec:3b:4a:e2:4b:d5:be:31:04:2e:7f:a2:b7:b6:eb:75:5e:
d2:f3:08:81:0c:85:a8:0d:85:05:4a:08:d2:c9:83:a2:2c:27:
17:64:55:08:6e:a2:81:b9:5a:c3:35:ea:a5:19:59:d2:a3:55:
45:c9:c6:40:3e:6a:41:d6:99:cf:d5:4e:47:d9:9c:d6:61:d5:
e8:c5:2f:eb:84:89:e3:7f:68:39:eb:ed:ab:25:c5:a9:8a:51:
69:ad:76:fc:d7:88:5d:36:46:2f:0c:ac:31:ce:2e:0e:26:2a:
45:53:7a:05:4f:34:bd:0f:82:50:59:e4:9e:4d:b1:a5:c5:c0:
ae:8b:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:04:43 2025 by rpki-client