Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File: FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier: G762oTiR0JIE7g7vLe+Wdc1dci98I6BDGSj6n2IJL3E=
Subject key identifier: 9F:48:50:35:43:67:2D:D4:EB:F4:83:4E:9E:3A:4B:19:7C:2F:EB:61
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial: 019A56AE528EACD4C733E313ED721315D20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number: 1714
Signing time: Thu 06 Nov 2025 01:00:56 +0000
Manifest this update: Thu 06 Nov 2025 01:00:56 +0000
Manifest next update: Fri 07 Nov 2025 01:00:56 +0000
Files and hashes: 1: 6fJjIO572rRtTzs1Q7jirr0rogU.roa (hash: lnfishpwQLE66hzcfQQ47M/+3n4mO6BxT9e3So84HXc=)
2: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=)
3: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=)
4: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: wU64TyI8ewSAOuM45+8PZdF67JBJgU7jZUg+v2uECsw=)
5: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=)
6: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=)
7: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:52:8e:ac:d4:c7:33:e3:13:ed:72:13:15:d2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Validity
Not Before: Nov 6 01:00:56 2025 GMT
Not After : Nov 7 01:00:56 2025 GMT
Subject: CN=9f48503543672dd4ebf4834e9e3a4b197c2feb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:d6:4f:3f:3b:a9:66:36:29:91:99:49:08:
0b:88:46:e4:a0:09:ab:b0:99:96:87:c1:1f:f9:20:
a0:af:3c:a0:75:5f:74:da:af:37:f2:da:5d:3a:67:
bb:4e:f6:06:45:45:5c:0b:e7:53:a4:a9:9c:5c:49:
24:d8:e6:4e:7b:2b:ef:36:5b:46:85:17:f0:25:b7:
d6:ca:a9:cd:c5:24:77:0f:c3:32:8c:b8:45:14:19:
67:4b:9e:cc:9d:27:32:4a:8e:ee:78:ae:b9:fb:d6:
15:fb:c6:6c:f2:9f:d7:f1:c9:4b:db:ac:2b:70:d1:
2a:39:65:78:62:ac:21:53:07:68:50:65:07:76:35:
51:46:24:ee:a0:e3:71:5b:c9:a9:9e:3e:5a:88:6b:
37:c5:a7:fc:a4:f6:4c:a5:a3:c5:ce:cc:ae:68:2e:
37:2f:f1:2a:e0:23:fe:17:5b:20:3d:c6:ae:4d:14:
72:ca:f2:66:30:22:67:f0:31:33:87:a0:56:ba:ea:
3a:7a:4a:8b:cd:a3:cd:4f:e4:51:b3:94:38:bc:c3:
25:7a:70:4c:fa:5d:2d:41:6c:ad:15:20:0b:1d:b7:
09:ba:3e:7d:70:80:5e:f8:fb:c1:20:a5:e2:fa:b3:
02:75:bb:a3:23:b0:85:b6:99:e1:91:d3:18:58:5a:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:50:35:43:67:2D:D4:EB:F4:83:4E:9E:3A:4B:19:7C:2F:EB:61
X509v3 Authority Key Identifier:
keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:63:e6:89:f1:88:ce:88:8a:a5:02:8a:ad:0e:e1:ea:24:4e:
b4:a1:9a:bb:82:66:96:bc:f8:ec:92:7d:3b:ea:a4:f5:82:fd:
be:2b:bd:cc:4d:ac:93:23:6b:05:b7:d1:94:fa:32:f6:ac:8a:
b8:e3:8a:3f:fc:56:94:9f:a0:32:45:8b:06:e5:e8:0c:37:cf:
02:d1:ee:21:2f:c6:2d:a5:27:1e:94:7c:e0:63:58:79:30:d0:
13:f0:17:95:eb:26:f7:86:46:e9:7f:76:70:1b:a6:dc:81:94:
a6:ef:1f:57:85:30:ba:d5:03:f9:14:3d:c0:06:08:f8:42:dd:
8d:1d:2d:c9:cd:40:d6:1a:11:fd:2a:41:ca:57:dc:be:02:38:
be:4c:1d:bb:2a:06:c6:c1:4a:54:d3:9d:71:73:f1:79:a3:18:
49:58:6d:b6:0c:4a:1b:3b:1d:f4:54:d4:42:58:b7:bf:98:a3:
cb:2e:b3:d9:2b:dc:dd:0a:96:bc:c3:4a:20:76:a0:ab:41:8b:
cb:11:33:a4:cb:ea:02:ae:d2:95:95:4a:4e:ce:72:af:55:39:
fd:41:fe:37:66:c4:54:98:e1:69:08:85:d6:45:b3:f7:e1:ca:
0a:11:9c:f5:d7:c1:19:9b:d0:0d:68:42:d3:e4:d5:1e:7c:f6:
19:74:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:11:26 2025 by rpki-client