Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File: FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier: Ve/blIDFjHqNn3Nzcie+3QVEY4Lawom0FsAo9g1G+G4=
Subject key identifier: 7A:98:F7:20:CA:01:D8:F9:12:5D:EC:19:48:C3:63:F9:E8:42:D5:0A
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer: /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial: 019A70A4E63D7194AE6B291EBEFF45AA5F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 02:00:46 +0000
Manifest this update: Tue 11 Nov 2025 02:00:46 +0000
Manifest next update: Wed 12 Nov 2025 02:00:46 +0000
Files and hashes: 1: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: 6VHlBe8Kg3L5pAEfwP6OT/ObT217v8eQpj5v+YwhoEY=)
2: kG1kgN5nlYEy7ZpCjdikaIa9hV8.roa (hash: /f6LxWrzAnFYTxviTKRbY2oY2ySMF7I5ROIB6zkf0g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e6:3d:71:94:ae:6b:29:1e:be:ff:45:aa:5f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Validity
Not Before: Nov 11 02:00:46 2025 GMT
Not After : Nov 12 02:00:46 2025 GMT
Subject: CN=7a98f720ca01d8f9125dec1948c363f9e842d50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:51:8b:85:72:d1:bd:99:c6:37:cb:64:52:
c9:9d:f9:23:d9:c8:f5:d5:2d:6a:62:27:1b:df:74:
f9:85:09:8a:d7:3f:43:53:6a:33:da:b1:76:46:91:
3c:d1:ed:45:66:55:9b:17:2b:55:6d:d3:92:57:d7:
76:c8:27:f6:63:cb:3b:59:07:37:5b:8b:ef:0a:65:
b5:07:9b:99:67:2b:ae:91:fe:05:6c:a9:c2:72:80:
a8:80:28:84:ca:de:c8:41:1e:65:64:21:6b:e8:18:
bb:ce:ac:3c:ca:17:12:be:aa:22:68:32:21:85:25:
18:27:d9:47:00:c2:a6:a2:77:5b:19:54:71:a1:fb:
89:74:5c:df:e5:f3:4f:6e:57:02:1c:41:2b:ac:b7:
a7:2e:4a:0a:3b:b7:72:87:ea:62:a6:46:a2:96:41:
81:2d:09:d3:c4:c4:93:6d:ce:bc:d5:5f:ef:d4:92:
a7:50:ea:f7:78:f6:c8:02:78:16:53:0b:18:d7:37:
a9:5c:c5:29:7f:9c:9d:4c:6a:d5:51:6c:82:3b:dc:
ad:96:52:dc:f2:1e:96:47:35:2f:61:1e:f2:34:5c:
04:cf:49:8a:e7:b3:46:a0:00:59:52:4f:77:ab:eb:
d6:9d:29:b0:e2:3c:27:33:58:3e:2f:9d:ab:94:55:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:F7:20:CA:01:D8:F9:12:5D:EC:19:48:C3:63:F9:E8:42:D5:0A
X509v3 Authority Key Identifier:
keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0d:dc:e3:49:b1:a0:e4:02:e5:40:e2:9b:03:1a:df:e5:43:
7d:90:bc:75:cb:a1:28:e7:b2:60:15:f1:b8:cd:9d:a3:c4:93:
af:1f:91:a3:d9:2f:00:d1:26:d3:f6:09:37:8b:67:35:a8:44:
3b:99:9c:1b:7e:81:6b:98:5b:57:45:c5:bb:5d:f8:fa:a3:7e:
13:a9:90:4a:c2:ce:fd:f0:b8:9d:b4:1a:36:49:ed:31:b1:aa:
f8:a3:b9:cd:36:51:3f:ce:4e:a7:d2:0f:e4:0f:31:06:65:4b:
e2:15:81:66:62:e7:f8:a4:06:79:5e:bc:be:f8:49:42:3b:d0:
e1:16:3f:21:be:26:92:9c:ac:05:5e:ba:cc:c4:bc:e8:be:a5:
37:3e:0f:8c:06:d6:ef:63:c6:03:8e:e9:2f:b4:43:4e:18:73:
7d:e0:c0:2a:1c:17:33:22:be:ae:cd:7b:3b:64:83:0a:85:48:
d6:a6:33:09:10:b3:de:35:2d:5b:4a:be:6c:af:41:00:d6:01:
9c:32:17:8b:0d:c5:9b:77:2f:7b:47:7e:b3:ef:1f:ab:c3:ae:
8b:47:7f:6b:32:6b:ef:0e:14:2c:04:e5:59:86:51:6e:20:69:
0b:55:e3:38:20:c9:93:ba:e0:07:09:c2:b3:93:ed:73:ce:a8:
dc:68:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:18 2025 by rpki-client