Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: 7oyzaw5ApzvbDreGZgpKfadb7/AF1E3/deUMuNcXqRA=
Subject key identifier: 85:0A:98:A8:49:FC:30:DA:27:0E:37:B6:F1:6F:0A:CC:1E:B1:76:CC
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 019A4EF56E6248692BF2AABD24964F894F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 148F
Signing time: Tue 04 Nov 2025 13:01:38 +0000
Manifest this update: Tue 04 Nov 2025 13:01:38 +0000
Manifest next update: Wed 05 Nov 2025 13:01:38 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: 6P7OCefCeHMVR4SJ64ERygcNppjAggDyON/+Q7Jt7AM=)
2: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (hash: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6e:62:48:69:2b:f2:aa:bd:24:96:4f:89:4f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Nov 4 13:01:38 2025 GMT
Not After : Nov 5 13:01:38 2025 GMT
Subject: CN=850a98a849fc30da270e37b6f16f0acc1eb176cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:5d:a0:4f:cd:1b:a2:81:7f:64:38:91:13:
cd:1c:ff:c4:fa:8f:33:5e:18:50:4d:0e:64:8f:c7:
7f:69:79:2b:90:f5:86:bc:bf:56:47:e7:de:9b:ca:
e2:b2:8c:5d:40:9e:50:1d:b0:3e:a4:f1:da:79:c4:
4a:69:45:6c:91:e8:75:c7:e2:04:76:6d:9c:19:08:
d0:4f:17:23:c2:f8:a0:3b:00:53:e1:0e:b9:1a:87:
db:00:80:1a:78:92:8c:a3:2b:57:40:1d:c2:72:a9:
94:0d:81:4d:d6:f1:9a:fb:d0:b9:8b:f5:67:26:43:
59:66:35:bf:5d:41:78:d3:6f:38:32:7a:34:90:17:
6a:a8:5d:af:03:ed:04:4f:eb:4e:84:16:73:58:4d:
06:4f:f8:2c:f9:ed:43:c4:02:8c:1c:ec:bf:e6:e8:
11:42:32:c6:7e:04:51:f8:31:08:43:92:17:3f:80:
fd:5b:9d:66:46:f1:58:70:35:2a:8f:57:51:b2:33:
3b:05:81:59:14:10:56:eb:f2:ce:2b:a0:03:e5:51:
d1:a0:dd:9d:df:07:20:17:97:60:a7:a8:e7:ad:46:
be:da:c5:4c:5e:ab:b9:20:05:77:19:29:6b:46:4a:
b4:7d:86:62:16:ba:d9:b8:97:46:25:21:e1:a5:2f:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:98:A8:49:FC:30:DA:27:0E:37:B6:F1:6F:0A:CC:1E:B1:76:CC
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:20:d7:7d:c9:0a:ea:07:e2:b6:16:1a:61:f1:b2:df:7f:87:
e2:8f:e6:6b:c8:86:8a:e1:a6:9e:e5:a2:30:5f:02:4b:ed:80:
8e:c3:94:a4:40:73:2a:19:f9:74:2c:d6:38:1d:03:cb:04:76:
92:a2:7d:92:1c:e2:ee:50:d9:97:f5:15:41:90:a6:45:65:7b:
81:f6:7f:b9:5d:7e:d1:66:5a:80:79:4f:77:d5:8c:0d:4b:6f:
f8:89:07:b8:ef:7b:ca:96:bc:09:3a:cd:ca:b1:7d:e9:6a:f7:
e3:7d:a0:1b:8d:8a:3e:a0:65:61:33:b4:fe:88:d4:82:a1:38:
7d:93:f4:06:8c:7e:52:40:11:2f:70:54:42:7a:8d:e3:ac:19:
4c:75:62:b7:11:64:e2:63:68:73:c1:91:ae:ad:77:67:cc:ac:
ce:a7:0f:90:a5:e5:19:7b:f2:3e:ec:f1:c0:89:b0:b0:a0:46:
60:43:98:c6:44:47:4b:91:76:16:fc:c7:1f:cd:ec:77:28:b0:
59:3f:89:e9:f2:da:63:08:cb:58:de:bf:3f:94:1d:d3:2a:a7:
49:9d:76:54:1c:48:7b:3a:3a:47:c4:b9:4b:a4:e9:60:75:b0:
a7:c5:dc:8a:10:a6:ea:64:a2:c4:05:81:24:57:4d:88:07:44:
01:53:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:59 2025 by rpki-client