Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: qce3k+ckyxy8XhGRbTg9Myc59fe5gTkoOvYBhB8OP4U=
Subject key identifier: 0F:7D:EB:CA:BE:13:24:42:43:4B:9B:A1:61:EB:DF:D2:AB:69:F0:F4
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 019A4C982FC40B2B4AC209F4D42CC814EC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 14AB
Signing time: Tue 04 Nov 2025 02:00:33 +0000
Manifest this update: Tue 04 Nov 2025 02:00:33 +0000
Manifest next update: Wed 05 Nov 2025 02:00:33 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: RVZn9cwnLtI6Uw2EDDD5KAX1i7LY4b1l57dHDOYFqtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:2f:c4:0b:2b:4a:c2:09:f4:d4:2c:c8:14:ec:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Nov 4 02:00:33 2025 GMT
Not After : Nov 5 02:00:33 2025 GMT
Subject: CN=0f7debcabe132442434b9ba161ebdfd2ab69f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:d7:2b:ba:8b:07:d7:97:86:54:18:92:61:
2b:4f:07:5d:dc:19:77:e4:f2:e0:af:8f:8f:fc:54:
72:ce:31:c0:55:62:49:cb:d9:d4:ae:cb:a7:5e:af:
59:ea:41:d6:ff:f2:42:1f:01:10:dc:73:1f:b7:e3:
f4:36:9c:18:f9:f5:6c:46:87:10:50:91:bb:f9:73:
49:40:c8:95:45:cf:5f:1e:57:65:0a:83:94:44:76:
db:2c:6a:7c:48:4e:0e:56:7e:17:0f:2d:4b:b5:35:
27:bf:e3:ea:f2:2e:52:ee:99:14:c0:3e:d6:6a:81:
3d:9b:6e:4e:a6:e5:32:c7:9f:9d:65:1c:ec:c9:f1:
e3:a4:36:21:1f:95:1c:fb:6a:af:0d:d9:b2:b2:0e:
0e:c7:9a:4a:bc:c8:e7:15:11:e5:c0:7f:c0:d6:e6:
b3:b4:28:8f:d8:37:99:eb:05:66:07:2b:b3:9a:3a:
ac:49:b0:d5:8b:14:b5:98:32:bf:c4:9c:6e:a6:4e:
27:6c:4f:59:bf:80:ee:9d:ca:8c:9d:7b:2d:2c:62:
f9:f7:a8:aa:bf:fe:4a:7b:ca:7b:3a:e8:ce:48:f8:
8e:8e:0a:64:b5:78:85:cd:4f:ad:56:79:19:59:76:
47:de:5e:57:ca:51:01:7d:29:92:a7:fe:c2:6f:81:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:EB:CA:BE:13:24:42:43:4B:9B:A1:61:EB:DF:D2:AB:69:F0:F4
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:27:20:76:d1:11:a0:71:22:40:dc:16:40:c1:b6:d5:9f:15:
f5:56:55:64:36:8c:6d:c6:0f:5a:b9:17:42:6e:b2:b0:1e:50:
29:6d:53:d2:9f:e6:85:d0:e3:59:8d:b7:63:42:84:ef:35:d8:
4a:b6:1b:f6:ea:45:d6:45:f2:1b:89:bd:b8:41:b2:82:13:3c:
22:5c:97:18:02:4e:8c:4c:7e:9d:d4:6d:d7:ae:be:87:03:ad:
8f:78:fa:50:48:71:04:9e:da:3c:d1:4a:8c:66:45:a3:16:ca:
eb:41:e5:3e:15:7e:79:69:ad:7d:66:96:c5:85:3f:2b:ef:58:
c8:2f:15:5b:2e:7c:09:b4:62:9b:6d:c7:54:52:f8:b9:8d:96:
20:dc:f0:ce:5c:8d:78:57:e5:50:39:51:53:29:01:4d:05:19:
83:4d:80:1c:f1:02:d1:b5:bd:fb:df:59:ad:8e:82:70:ea:47:
7f:9f:4f:99:91:0b:91:93:80:28:da:83:ab:d2:31:55:f1:4f:
94:f9:a7:1b:93:06:3f:7b:f8:47:22:98:7f:39:9a:bf:b3:3a:
a5:94:78:72:e0:9d:d9:4d:61:87:10:f0:e1:9d:9f:ce:55:0a:
51:49:d4:4b:45:f3:8b:96:e8:43:72:a3:67:73:41:b2:26:f5:
a7:9e:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:09 2025 by rpki-client