Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File: FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier: p5X9xnL+9htoDmGm9L7TeRsHpUZEtxow+m89SgvTebE=
Subject key identifier: D9:CA:50:AF:1F:10:4A:16:38:19:F3:40:97:55:44:B3:07:A7:08:E9
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial: 019A4DE1ECD599433E37B5255B6C47F961D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number: 12A8
Signing time: Tue 04 Nov 2025 08:00:43 +0000
Manifest this update: Tue 04 Nov 2025 08:00:43 +0000
Manifest next update: Wed 05 Nov 2025 08:00:43 +0000
Files and hashes: 1: E3L5dg5X3rqNLqYU8O9X1WsszW4.roa (hash: OcbMuDrIfD/A7RNsLFSYw+FRN5f4hK+YArdJTnwQdlk=)
2: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: FTm1PTJfDj4zujlAvoTD6PuS/b3E8jFSGpY+Citvz0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ec:d5:99:43:3e:37:b5:25:5b:6c:47:f9:61:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Validity
Not Before: Nov 4 08:00:43 2025 GMT
Not After : Nov 5 08:00:43 2025 GMT
Subject: CN=d9ca50af1f104a163819f340975544b307a708e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:8a:d1:d1:89:32:be:84:c0:e5:57:d6:f3:
c8:9d:95:70:64:35:98:4f:88:ca:1d:08:5d:dd:95:
43:e3:22:26:54:14:f1:67:37:a3:9d:e5:bd:73:ef:
f5:2a:1b:4e:ce:bf:7e:c0:dd:22:35:8d:19:4d:c5:
98:23:ed:0f:a5:cd:78:af:1c:45:92:cd:e1:e5:0c:
c4:4a:a7:ad:f8:95:de:7d:4c:3a:19:ba:99:93:c5:
5e:f7:e2:d7:71:9f:7a:9f:c9:c8:63:3a:3f:72:04:
43:41:fa:e6:ab:75:49:d0:af:56:85:71:35:a1:5a:
06:47:8b:4b:83:03:64:d3:55:ed:eb:a6:78:89:02:
36:39:ab:b2:a5:02:47:70:f8:91:ab:ce:0a:31:8f:
ce:be:31:94:45:e8:50:10:be:eb:c0:35:ba:17:54:
82:29:61:a7:9d:a5:cf:77:43:9e:a1:40:23:f6:b9:
55:9d:60:ec:75:2d:57:56:16:34:31:c0:e4:50:34:
32:23:29:23:1e:45:19:13:19:34:40:02:81:63:1b:
8a:70:5c:2c:2c:b7:46:8e:b3:18:f1:f0:b9:fa:67:
a4:5a:96:08:97:a6:44:5e:25:7c:96:39:73:2a:13:
e3:3a:46:b8:d8:67:1c:f8:93:7e:98:f8:9d:13:1b:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CA:50:AF:1F:10:4A:16:38:19:F3:40:97:55:44:B3:07:A7:08:E9
X509v3 Authority Key Identifier:
keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b7:10:c0:50:bf:bf:cf:94:d8:8e:ad:36:a6:74:2c:56:87:
61:24:49:d5:e2:d6:98:f6:e2:77:57:20:5f:dc:28:20:be:31:
ee:f3:cf:17:ff:a7:14:d6:3c:7e:86:dd:2f:2f:97:4d:99:ce:
3b:51:aa:33:21:3b:d8:ad:7d:d6:64:61:15:97:0a:4b:ac:31:
6a:38:57:d8:42:4f:de:51:7c:b6:ef:b4:60:bb:9f:62:f6:e1:
94:cb:8b:66:c8:63:06:28:b5:05:f0:42:f7:bd:be:38:38:d1:
4d:45:55:fb:61:f8:90:c8:14:9f:6c:1a:64:91:89:15:b9:5a:
f8:2c:d0:bf:2e:31:9a:52:9a:51:6c:f9:2a:40:ef:17:c9:34:
f6:a0:6d:9b:5c:ea:1b:ba:3a:4d:b1:7a:9b:ec:c3:dd:71:6e:
7d:45:e7:1b:01:b0:85:c7:73:7d:d3:2c:10:7e:c0:9b:0d:08:
07:37:15:84:9a:6a:d0:69:2c:14:97:d6:81:20:78:14:f8:25:
d7:e6:f0:2d:5c:be:db:cc:48:9a:4b:c7:19:ef:dd:8c:70:d2:
66:dd:39:49:ca:11:51:45:62:14:48:b8:3e:20:07:55:87:74:
00:6d:f9:9a:2c:ed:e4:51:be:2b:9a:1a:12:f6:c5:f5:be:2b:
2f:25:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:39 2025 by rpki-client