Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier: hW5nqCc/1wgKpyXus0gOLDd9zTWvCXWa1lI/zne4VjE=
Subject key identifier: 26:66:0C:51:77:A0:D8:46:CA:29:35:8B:2A:0B:39:7A:D6:EF:DA:CF
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 019A4E4F7BC6CDD239CB39735D22E755B4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: ON2h29CJKpUEZd+MqzYupGStsGi1S3rwIAo8+YXEOrw=)
2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7b:c6:cd:d2:39:cb:39:73:5d:22:e7:55:b4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=26660c5177a0d846ca29358b2a0b397ad6efdacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:7b:40:80:28:cb:42:31:35:c4:45:1a:ef:
e9:3f:2c:c5:ca:55:f8:08:27:95:fd:47:5d:23:4c:
5a:6e:39:e7:78:ca:06:f9:36:f2:5a:ab:b0:0e:3a:
4c:96:6b:cd:3c:49:68:67:ed:88:85:a0:4c:1c:43:
f9:18:23:f0:b9:44:45:d5:37:aa:ed:d8:9a:cd:26:
3c:5f:8a:60:b3:39:ba:1f:37:4d:7a:03:b1:fa:c2:
6b:46:7e:93:70:18:1d:91:ce:40:7a:6c:cd:c1:73:
35:3b:57:5f:dc:ef:e0:94:f1:ec:42:13:13:38:7b:
a1:99:9a:c8:d6:77:c3:29:80:e9:c6:d9:97:29:d8:
49:f5:d1:08:66:98:02:bb:59:32:e7:8a:a8:34:28:
63:71:27:ae:a7:fc:c9:b4:d8:e3:f7:22:9d:19:03:
87:34:5b:97:1e:d1:ef:8a:14:e2:9a:a7:62:5f:ed:
f8:f5:83:ff:b7:e8:63:aa:70:7a:37:c4:44:8a:b7:
32:72:eb:b5:cd:a2:89:3d:0b:85:03:35:ff:2f:c9:
be:4f:18:9d:b3:88:18:57:d3:e1:21:50:4a:50:86:
ab:74:93:2e:04:2a:09:0f:50:c4:d1:e1:7f:7a:a2:
5a:92:ac:87:8b:a2:fd:7e:1c:0f:a7:4f:43:f7:40:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:66:0C:51:77:A0:D8:46:CA:29:35:8B:2A:0B:39:7A:D6:EF:DA:CF
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:96:9f:0d:2f:64:b0:e9:9d:2c:13:30:e4:19:ff:94:46:
57:54:a2:56:8f:79:23:a3:dc:2e:93:cc:7e:b3:ac:e3:1b:0d:
00:56:3a:3f:ed:6a:f4:70:5d:c9:d8:4d:ce:3a:ab:c3:a1:b6:
e9:17:ea:de:85:e5:65:e0:80:35:33:b1:40:9d:a2:d4:cb:9a:
9d:8a:39:7a:79:c2:56:d6:70:d9:95:62:71:6a:e7:c4:aa:7d:
28:46:76:50:fe:6c:9a:8e:0d:8f:38:45:b5:36:5d:00:3a:e9:
13:29:d2:76:cf:1f:a3:86:ae:94:c1:82:be:04:d9:06:14:2c:
5f:4f:25:d0:76:94:51:d4:81:ab:64:fa:46:08:ee:70:31:2f:
4a:1b:41:cc:6f:bb:01:82:2f:7f:07:25:ce:b8:1d:50:d4:c1:
7c:fc:b3:00:f0:79:e1:d0:34:8a:2c:a9:33:59:df:f3:58:03:
b9:e3:8b:50:08:5a:53:1b:c2:64:0f:c0:ce:af:58:2e:46:ae:
80:ce:a6:35:32:cc:e7:7e:af:8f:48:d9:4d:61:fa:49:e4:85:
55:78:34:93:07:fe:cb:f0:4a:69:35:b5:37:d9:8f:5c:d2:de:
60:99:41:ee:9c:ac:27:35:56:3c:85:6e:ef:27:c6:bd:33:fd:
f4:02:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:10 2025 by rpki-client