
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier: 2o0QIwrRr0nSmiFxmoiRkuV3DKmjYE9ig2jbXwC8DiI=
Subject key identifier: 14:81:2E:69:D2:A5:89:43:4F:FE:25:FC:9D:19:7A:93:B8:F8:4D:B2
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 019A4E190E26347E5088D55367D0291CB4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number: 1459
Signing time: Tue 04 Nov 2025 09:00:56 +0000
Manifest this update: Tue 04 Nov 2025 09:00:56 +0000
Manifest next update: Wed 05 Nov 2025 09:00:56 +0000
Files and hashes: 1: 9LYwP72SZhTP9lZsq-7j8HuZdgM.roa (hash: G+yR0ErMQLPYRLmJwGI9EkRMjsbBolXBG62m79mi45g=)
2: FR9MfFqpLiVuFujJBtFbhJmONI4.roa (hash: E+6VeTvBdtosqoAM0l7HopHp27qrMu4a19ly9IU6g9U=)
3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: xC3482/HXH2/5/+kAo6T6OtHpkaRrEc1gsx9D3j1kHY=)
4: a5dgM43xwH6TzzG3OU4-DU-VReU.roa (hash: lvQLcSmhppO+nBAUrEWVk8HCNuzIbjnnhIRTEmwBZUw=)
5: dK_YVUmItcs6Jo6KBWMzLehOltU.roa (hash: cxdMWN6vf7XXfhS5ABEMBqXeAf173QdfF9qlyNjA1g8=)
6: fNVPBx-nJkzMb3EbI9eFden66xI.roa (hash: 4Ma//fNnrLCw4CmoykWoEiiC3wb4lPTvORAHCvUM+U4=)
7: rrKDVy-QxSmZ2HqqmDRKJ_O3zjE.roa (hash: qQt4LgJZUrwxxbQW9H3UI+h4NYxT7FciUlDfdQlIp3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0e:26:34:7e:50:88:d5:53:67:d0:29:1c:b4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Nov 4 09:00:56 2025 GMT
Not After : Nov 5 09:00:56 2025 GMT
Subject: CN=14812e69d2a589434ffe25fc9d197a93b8f84db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:4d:0a:9a:3c:aa:bc:26:23:59:74:1b:67:
eb:b3:7d:95:67:a4:64:62:78:47:f2:14:cf:37:e9:
ba:68:8f:ed:1d:76:f3:9a:96:49:ef:59:84:ea:39:
be:62:15:5c:0b:f8:26:fb:e7:fe:0b:ac:8c:71:3e:
00:00:b4:24:9b:9b:c4:3c:77:32:2e:a0:56:fa:13:
bc:a4:3e:11:9c:b2:6a:02:ee:7a:66:8a:88:7f:99:
21:7c:5c:8d:8b:67:36:73:7d:ff:8d:d4:fb:38:0f:
9c:23:27:a0:4c:3e:9c:39:74:1d:78:7d:d6:8b:1b:
13:d8:9a:ff:39:59:36:c1:78:67:72:dc:6f:23:82:
03:2e:46:0d:a9:bf:01:75:0d:5a:ce:80:8d:57:59:
82:3d:a8:6d:6a:75:c7:58:93:ad:3a:5b:9f:02:39:
f3:3a:52:d6:6c:18:95:06:82:11:72:da:78:07:6e:
82:8c:15:0a:b5:d0:76:7d:d7:20:a4:d9:a1:e7:cc:
eb:e9:89:42:33:62:48:57:c4:ae:9a:50:db:a6:3d:
e5:bb:7f:56:55:2c:7a:29:26:72:1a:df:ff:60:e3:
fe:49:c8:43:b4:9c:43:aa:20:d8:8f:93:e0:6e:94:
26:23:85:ba:8d:9a:da:3d:21:59:b0:c8:1e:3d:16:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:2E:69:D2:A5:89:43:4F:FE:25:FC:9D:19:7A:93:B8:F8:4D:B2
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e4:8c:5d:c2:80:8a:c8:a1:3a:db:aa:a1:86:9c:7d:53:10:
d1:57:36:c4:f5:f2:fc:36:c5:42:4c:b8:35:ff:b7:b7:ae:09:
01:5d:a8:f8:44:1d:b3:8c:12:a0:ad:2d:ec:3b:dc:3f:f4:e9:
fd:12:ed:7b:cf:7b:56:d2:99:68:fb:60:57:dc:23:8b:ec:cc:
78:fd:af:63:7a:50:0c:00:12:af:77:86:67:89:1d:93:8e:6a:
89:8b:52:32:5e:51:58:0c:b9:cf:2d:0c:7d:62:b0:e2:0d:b4:
38:02:87:67:d9:47:aa:2d:a4:f0:a3:7e:ce:dd:94:db:9b:f0:
b8:c6:7d:13:cf:d0:c6:8a:57:bd:c9:ff:b2:e4:3a:09:48:39:
ef:85:f5:52:e5:96:8d:c6:cf:f0:1c:59:7f:a2:47:88:34:0a:
64:6e:b0:07:a6:a1:6e:1c:47:01:e7:31:71:dd:11:76:87:3b:
d5:85:c0:93:f6:61:3f:eb:dd:8e:8f:59:69:a3:32:0c:d2:e9:
ce:c7:f3:3e:ea:fe:f2:82:66:d5:ba:a0:cd:bf:49:0d:a7:ab:
43:27:ec:98:57:12:d6:0c:d6:1b:86:87:15:49:f7:b5:d1:1e:
25:70:5a:dd:8a:28:aa:1d:17:4a:06:47:d1:be:2c:1b:5a:9a:
85:b5:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:50 2025 by rpki-client