Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: OZn2beylWkfCQ/LvC4qO5JUQb+LxAUOVC4rBhNUEwxo=
Subject key identifier: 71:A4:C1:88:85:64:E0:C3:4B:20:CE:56:CC:CF:CB:BA:DB:BD:E4:D0
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 019A4D06F9746AEDC5D93623AEE045F20424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 1081
Signing time: Tue 04 Nov 2025 04:01:33 +0000
Manifest this update: Tue 04 Nov 2025 04:01:33 +0000
Manifest next update: Wed 05 Nov 2025 04:01:33 +0000
Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=)
2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: wh4adhOg0Y5cStbvY5lW2MwTNtlLz+bZShfZrjTdO34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:f9:74:6a:ed:c5:d9:36:23:ae:e0:45:f2:04:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Nov 4 04:01:33 2025 GMT
Not After : Nov 5 04:01:33 2025 GMT
Subject: CN=71a4c1888564e0c34b20ce56cccfcbbadbbde4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:1c:8a:b3:94:ab:50:8d:b3:d9:d8:d8:b7:
d4:1f:38:70:07:7e:c3:1c:aa:8b:39:6b:89:50:83:
dd:b4:a9:d7:bb:55:cb:54:c9:fc:5f:c8:01:34:9e:
3a:dc:9c:fe:83:5e:57:e2:c6:ef:2f:67:df:3c:5c:
34:21:29:9a:52:59:35:04:dc:93:d5:5a:71:5d:0f:
ea:05:d1:fb:a1:21:f5:9d:5d:f5:21:64:9b:c1:61:
a5:de:46:6f:a3:1f:e7:b3:04:02:8e:37:77:8d:09:
d2:51:61:0b:b8:81:42:89:70:74:e0:ce:88:48:41:
77:d6:d5:69:bc:1f:a3:c5:fa:4c:08:b5:4d:28:99:
fe:a1:ba:20:b9:6f:a0:6a:2f:f5:d6:9c:13:0f:0e:
eb:54:65:7d:0d:b8:76:3c:40:46:96:fc:59:90:fc:
99:0b:f0:58:74:43:05:eb:5e:1a:d2:92:11:6c:bd:
62:17:b7:00:9c:40:f4:67:7c:62:93:1d:80:a8:4d:
61:ef:0a:b0:ac:e2:c1:68:08:c2:36:bd:59:91:ce:
df:5c:27:cd:0f:39:6d:cc:01:cf:40:f6:7f:7b:7b:
83:9e:fd:cd:8c:5a:42:f0:40:97:b4:39:78:62:da:
27:27:5a:b1:0b:cb:e0:f8:5d:95:e1:0f:c1:ae:52:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A4:C1:88:85:64:E0:C3:4B:20:CE:56:CC:CF:CB:BA:DB:BD:E4:D0
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4d:c7:8f:01:b8:7d:ee:53:0b:a0:4c:fa:4a:c2:b9:39:83:
17:dc:be:6b:37:8c:87:fb:06:ba:25:46:0c:85:89:14:19:1c:
c6:f2:3a:ec:6b:bd:b9:ba:f7:6a:bb:e0:cc:97:54:16:94:49:
32:42:62:98:db:fa:a8:16:8d:67:03:af:db:ed:aa:e4:17:1f:
95:6c:5c:da:5c:40:45:59:46:72:c9:9f:ff:46:8a:50:47:c3:
b8:e2:95:b5:37:a2:19:9c:9b:51:fa:26:02:8d:f9:c9:98:9f:
d6:3c:62:2a:c5:8f:08:56:f3:fd:d0:0f:9d:c0:2f:aa:ef:14:
cf:f5:e9:c8:92:da:a3:8d:61:48:bf:55:71:40:09:c5:6c:ed:
fe:ff:9d:d9:34:62:c4:0c:24:20:cc:e3:7f:88:c7:d5:a3:76:
c1:54:6a:c5:07:8c:bf:28:17:70:2c:33:0a:00:8e:19:ed:6f:
66:00:97:ef:41:71:55:fd:33:df:5e:95:05:e0:fa:57:68:04:
3b:29:03:79:be:7e:3b:c3:90:39:b7:f4:6e:b8:51:92:c7:35:
45:cd:bd:09:b9:ef:ff:1e:88:eb:cc:61:71:46:11:01:76:37:
e2:f4:d8:40:69:87:3d:d5:65:9e:3e:08:80:55:d6:49:f7:58:
e1:c0:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:47 2025 by rpki-client