Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: 0u6tHfr1OKlVj3Yvy9+UAKj07KUtxbcnzodb6LhsdH0=
Subject key identifier: B4:9D:B8:8E:78:9E:27:1F:5A:AC:81:CC:4B:B9:35:80:58:DF:FA:97
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019A503DE664DD9DB402C32CAB57E586FDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 25
Signing time: Tue 04 Nov 2025 19:00:25 +0000
Manifest this update: Tue 04 Nov 2025 19:00:25 +0000
Manifest next update: Wed 05 Nov 2025 19:00:25 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: clFACMu6XzPtjb72KDFTLWuOkqrFxEG/YItwa/SFbIE=)
2: YJnryPyjSM9m2GAkfptlcJ6VzAs.roa (hash: ycoIEs6bEZoIpBaIl7C3dtXJvolOHbKG/ZycQeSD1RA=)
3: _PTsrjA4Vx4ohcRmFglFLj69Gbk.roa (hash: qHBktGp3NlHLcFdGjmDdlgxPr6r0hRT3TQKlIEYQtgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e6:64:dd:9d:b4:02:c3:2c:ab:57:e5:86:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Nov 4 19:00:25 2025 GMT
Not After : Nov 5 19:00:25 2025 GMT
Subject: CN=b49db88e789e271f5aac81cc4bb9358058dffa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0d:f0:87:09:40:82:91:f5:cd:42:47:78:2c:
a2:4d:49:2e:95:a9:94:65:9e:70:0a:9f:48:e6:4c:
e8:94:c1:8c:86:fd:bf:27:0c:a4:4b:a3:d9:aa:4d:
9b:52:a0:52:3d:1f:26:c7:80:ef:f6:16:84:55:23:
a2:bb:02:85:ff:ac:73:6d:49:b3:7f:e1:dd:7d:e4:
1a:9b:e9:7c:4c:d3:9f:72:39:6f:55:14:08:c4:b1:
d6:40:64:29:0e:bc:cf:2c:33:12:a7:85:48:69:35:
49:6e:be:64:86:06:32:f1:5f:20:db:34:f1:24:97:
1b:09:f2:77:75:f8:eb:93:01:f4:7b:bc:2d:fa:b9:
99:48:82:80:8f:75:ad:aa:7a:46:12:35:14:07:a8:
e4:3b:db:ca:6f:9b:29:78:ab:00:b7:f3:83:91:55:
bc:f4:1e:35:04:45:42:f6:3c:30:16:5a:18:aa:23:
19:c4:92:03:e8:d4:c6:31:9a:3b:86:aa:d6:b9:8b:
55:ac:7f:6f:11:0b:d9:c3:ec:68:af:f9:63:31:67:
fd:09:83:af:a7:c4:a7:15:6e:37:da:41:58:25:01:
c3:cd:ea:a5:e8:5b:e3:42:7a:62:1d:13:5b:28:88:
9b:dd:6f:82:4b:5c:5b:e1:68:c8:96:43:a5:07:82:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9D:B8:8E:78:9E:27:1F:5A:AC:81:CC:4B:B9:35:80:58:DF:FA:97
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:08:2b:cf:bd:cf:7b:65:b5:ba:c1:f0:e1:e6:2d:4a:55:f7:
f8:ca:af:9a:8a:90:44:61:aa:12:47:49:8d:96:ba:d8:90:b5:
6d:8f:fd:1e:8a:c1:e5:f6:8e:e2:36:49:35:61:0f:54:a8:af:
68:1b:48:40:cc:86:91:a5:32:5d:34:8d:b5:e6:05:17:69:85:
e9:c9:13:16:43:6f:e1:f8:f4:70:aa:86:0b:e1:44:ea:db:86:
c5:4f:ba:18:ed:46:f1:ae:9e:cc:04:e6:c2:0b:5d:4a:48:5c:
e4:b9:98:19:c5:ae:2a:06:b8:96:68:3d:a9:fb:15:f6:28:a8:
f1:ea:64:32:9a:6e:65:0b:47:4c:cd:f2:72:bb:c6:a1:83:ce:
f3:0a:2d:f3:38:bc:4d:34:57:5a:26:56:b3:fd:0f:90:20:cb:
1a:a0:57:8d:d4:e8:62:75:05:c3:4e:9a:33:86:01:f8:f2:87:
e0:d7:1c:1b:91:86:a7:32:16:5a:c2:b2:24:60:3c:e9:b4:cc:
81:f4:a5:b4:fc:4b:a3:41:81:02:09:57:21:fe:2f:3d:17:64:
39:40:80:02:f0:11:f8:00:3e:1a:87:e8:6d:12:f6:05:f1:00:
76:77:e4:58:0f:37:bb:f0:eb:38:e1:4c:7a:60:c0:ec:ec:1c:
b7:85:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:35:22 2025 by rpki-client