Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
File: FVCvriuu-2uI-XUbsyGOs5uUtXY.mft (raw, json)
Hash identifier: hAVlihsSqn6mOohBQH1+fPjHBA4+gI2PPJeTBPAbdQU=
Subject key identifier: 00:B5:D5:37:3D:71:D4:69:28:5D:78:6E:6B:DB:19:16:F0:44:BC:90
Authority key identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
Certificate issuer: /CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Certificate serial: 019A72CA419250F8C09DD092726326C1D468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: FVCvriuu-2uI-XUbsyGOs5uUtXY.crl (hash: BOfysSAb3eUan+/FKsBv+Ezr1qI3Tl0VZoeKScNgcqE=)
2: t9fTM1TKvJ-oUXQJ9lDM9WsVyDc.roa (hash: bT5E6LtHCC1AluQgd2lvyOIQ+/FsjKMjc8eOVOWcAoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:41:92:50:f8:c0:9d:d0:92:72:63:26:c1:d4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=00b5d5373d71d469285d786e6bdb1916f044bc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:fe:1d:e9:9c:fd:23:3f:33:be:f6:07:c4:
c1:8a:8f:cd:b6:3a:88:c6:c9:6a:5b:4f:ab:38:98:
00:b0:39:70:51:7f:73:10:c0:2d:ab:5d:27:89:83:
42:0c:89:e0:dd:4e:64:ca:87:80:eb:66:10:7b:8d:
90:a5:8c:a6:0e:87:87:cf:f4:a7:be:b3:1c:4d:f2:
ce:eb:39:40:36:da:2a:d0:f8:dc:b4:6f:b5:88:6b:
ec:db:67:32:52:5f:13:26:5e:1e:0d:7c:1a:8d:5a:
e6:fe:96:44:3d:9f:96:8f:b6:d4:2c:c4:27:fd:ed:
cf:b2:e4:45:4f:58:98:a7:e7:85:ea:57:07:a3:6f:
95:d1:b8:c4:34:63:49:e5:11:42:66:70:f8:25:d0:
7c:76:e9:a4:ac:ff:7f:10:f5:2a:6b:63:70:fb:94:
e6:af:19:41:38:26:9f:e6:d1:2a:4b:94:bb:83:1c:
92:36:db:b4:cb:1a:69:0d:23:78:22:29:11:01:98:
ce:d3:aa:b7:0b:af:48:50:88:df:0f:f6:4f:1e:9e:
81:3c:7c:c2:e8:33:c4:42:7b:c2:14:53:9c:24:fb:
10:1e:d0:27:9a:11:94:a2:86:59:e9:a5:84:f3:07:
35:18:90:7a:e3:fb:62:29:b8:69:f9:be:64:59:cd:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B5:D5:37:3D:71:D4:69:28:5D:78:6E:6B:DB:19:16:F0:44:BC:90
X509v3 Authority Key Identifier:
keyid:15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f3:3e:d2:a0:d3:d1:ca:36:da:ce:9a:4e:02:8b:87:4b:f9:
6d:c9:d1:44:7b:2c:b2:a8:dc:e5:59:23:5f:15:9e:9b:7d:4c:
7d:7f:00:5a:ac:4c:8e:5c:57:f1:c0:f7:66:e4:81:d9:dd:e5:
57:05:0d:bd:3e:c4:b9:e3:c6:3c:86:a1:63:6c:ee:f4:ef:ab:
e8:dc:8b:1c:99:e4:0b:55:e9:c8:f9:38:5b:e9:97:a8:08:05:
e0:b1:9a:69:cc:3c:d2:18:56:d5:16:aa:a9:51:23:1b:5d:94:
72:91:55:78:e3:c6:33:87:6d:0c:91:a2:9a:bb:cd:28:c1:76:
d7:d7:36:2d:bc:da:ea:44:e2:5b:03:82:89:56:f6:55:ea:76:
31:c5:a4:0b:dc:55:af:09:d5:28:9f:11:1c:a6:2d:67:bc:e7:
7b:69:08:9a:a6:c0:80:99:77:fd:fb:13:4c:40:6f:5f:01:b6:
22:a8:49:5b:a1:d9:d6:3f:49:1a:af:38:7b:ee:a4:20:55:c0:
05:13:2e:8d:3a:1d:2b:55:71:bd:be:1b:d5:e1:17:b9:81:f0:
2b:df:8c:ee:59:dc:8b:6f:0d:13:1a:0c:10:d5:3a:53:ad:8e:
4e:2a:bf:a8:73:91:e0:d4:66:98:d8:a5:d8:e2:53:b5:77:4d:
27:42:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:00 2025 by rpki-client