Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: VL7fbjj4s2veuO5OEgQSfMTEU2kQh1B+m0hIm4wYV00=
Subject key identifier: A5:A1:21:C2:91:B2:B6:40:18:8B:D9:83:CA:AA:F6:6C:50:36:17:3F
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 0199CFB60E6FF103961EBF71D6EA77D19B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 0FE1
Signing time: Fri 10 Oct 2025 20:00:38 +0000
Manifest this update: Fri 10 Oct 2025 20:00:38 +0000
Manifest next update: Sat 11 Oct 2025 20:00:38 +0000
Files and hashes: 1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: iqHW7DbACR15WgvSUClOoh2DEMZNJCm1IsgRPDKk1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:b6:0e:6f:f1:03:96:1e:bf:71:d6:ea:77:d1:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Oct 10 20:00:38 2025 GMT
Not After : Oct 11 20:00:38 2025 GMT
Subject: CN=a5a121c291b2b640188bd983caaaf66c5036173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:68:5b:ac:47:cb:32:56:c3:25:45:75:51:
d0:d2:cd:cd:56:8c:0e:c4:db:82:b5:1c:a1:ea:0d:
91:55:52:58:d6:cc:1a:bb:93:51:e7:14:18:9a:bc:
54:d3:31:3d:c5:41:d3:9b:46:24:71:1c:7f:37:cb:
a5:13:1d:d3:d5:ce:04:55:69:b6:2c:2d:35:aa:9b:
f5:42:cc:23:53:f7:9b:d4:3b:06:e9:ed:9f:f3:32:
0b:e8:b4:2e:96:a0:9d:c9:95:5f:75:9f:f1:34:77:
49:b7:bb:6c:72:f0:ca:d5:42:b5:41:aa:38:99:3f:
95:6e:b2:13:4d:46:81:94:aa:8b:52:f8:ee:47:9f:
14:99:5a:ed:ef:a6:fd:44:43:6d:ec:3f:e6:25:3a:
bd:2a:0a:cd:ec:08:c2:e3:31:3f:1f:e5:9a:6e:6c:
aa:d8:a0:b2:c4:4f:62:03:59:7b:82:ee:57:12:7d:
38:76:31:e5:00:a3:1e:b3:11:e5:e4:8b:fa:a1:b2:
63:d0:dc:f9:5a:42:49:6b:1d:a9:0d:b6:97:76:7c:
48:72:9a:75:cf:06:f5:4c:c6:74:04:b4:ca:66:f3:
37:e4:a8:98:f4:b2:02:d0:e1:ab:64:f5:47:2a:48:
5e:c1:6c:14:f5:8f:72:d7:c2:b5:ab:6a:48:d7:91:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A1:21:C2:91:B2:B6:40:18:8B:D9:83:CA:AA:F6:6C:50:36:17:3F
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:99:86:c7:99:2e:30:25:0f:51:c9:6d:02:e5:a1:88:6a:
9f:a6:50:0b:37:78:c9:f8:50:d8:2d:9a:25:0b:4d:ee:04:c2:
fe:f8:1e:45:2d:d8:05:d6:cd:16:94:e5:ef:f0:43:7c:ec:fc:
70:97:99:35:95:b4:79:39:de:95:9c:dc:9d:cd:9d:1f:14:cd:
06:fb:6a:ec:54:01:af:62:c9:83:60:ea:01:c5:32:c7:af:a0:
9f:78:e3:4b:1c:c1:cd:9e:f3:43:38:c2:09:7e:41:9c:ba:1c:
34:11:bd:06:bb:35:31:2f:17:08:68:e2:5f:44:33:8d:b4:8d:
56:7e:42:4d:70:fd:5e:2a:52:59:e0:63:02:bb:b5:c1:85:7f:
49:1b:19:86:7a:03:f8:b1:1f:da:61:be:d8:60:25:a9:b8:e6:
ac:82:9b:b4:89:ca:a4:c3:ba:f7:b1:13:be:a4:5f:b2:94:08:
6d:e2:13:3f:07:27:96:fa:18:72:f8:c2:74:8e:1c:ab:a3:64:
fc:d4:bd:55:92:bf:7c:1c:7d:de:89:ac:bb:1c:61:44:d5:df:
aa:69:a9:4f:dd:56:ca:3e:f6:5f:a3:7f:c3:03:f1:be:b4:6d:
bc:77:79:d0:01:f9:1e:55:d0:df:11:5e:97:ff:a3:11:11:7e:
7d:1d:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:16:00 2025 by rpki-client