Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
File: FltW5Vtv77wg20rOb9dWxz10H5w.mft (raw, json)
Hash identifier: 9EeLKpoup1eB1lGiiRp2fyt+0lp7lwDmFwkBIxRE7uk=
Subject key identifier: 60:9F:55:4B:34:79:6C:33:F9:BF:C4:D5:6C:A3:78:C9:28:59:11:BC
Authority key identifier: 16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
Certificate issuer: /CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Certificate serial: 019A70A596253C5EAD94343F629A15B65FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
Manifest number: 0478
Signing time: Tue 11 Nov 2025 02:01:31 +0000
Manifest this update: Tue 11 Nov 2025 02:01:31 +0000
Manifest next update: Wed 12 Nov 2025 02:01:31 +0000
Files and hashes: 1: FltW5Vtv77wg20rOb9dWxz10H5w.crl (hash: zTsQKZybGuRFEe6E1C7DhlE1KpY+DjFVEO4+HbwZ9L0=)
2: sMegHqU7UUGqCYG93dUiBfzhiKY.roa (hash: Uew37Hsz2ZJ9NI8mYh/emEGauK92oIRApPEXx6MkFec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:96:25:3c:5e:ad:94:34:3f:62:9a:15:b6:5f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Validity
Not Before: Nov 11 02:01:31 2025 GMT
Not After : Nov 12 02:01:31 2025 GMT
Subject: CN=609f554b34796c33f9bfc4d56ca378c9285911bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:32:c7:7f:2d:8c:0f:45:37:12:e7:e9:d6:
37:bb:f8:b8:6c:0b:51:28:a1:79:ff:c0:87:ed:96:
a4:7e:d8:37:4d:d8:39:47:d6:ed:f9:ae:3a:bc:09:
56:4d:82:ee:f5:df:e0:ff:fe:53:d8:9d:2f:7c:cc:
1c:b4:08:05:94:17:b2:c7:bc:e0:cf:08:1b:db:87:
7c:0d:71:0e:08:9b:e3:ab:4e:fc:f1:bb:45:fc:b9:
30:29:d2:17:39:93:bb:24:ab:54:b1:30:dc:4a:e1:
4e:9f:f8:d8:fa:8b:e3:72:88:64:02:c6:99:a7:60:
19:b8:92:4a:17:0e:cf:26:02:61:f8:5b:78:4d:14:
fe:ba:17:68:c7:91:18:ce:2d:64:43:30:ed:05:ae:
6e:8d:ac:0f:c4:c4:a4:97:5a:f8:cc:11:04:80:26:
69:2d:68:02:d7:f5:19:12:87:bb:48:83:9b:4f:6e:
c8:39:1d:99:5c:a4:b2:e7:ef:fb:5d:da:fc:c4:7b:
98:90:be:61:aa:2c:9e:32:2b:9c:d7:a2:5f:24:4a:
2d:e4:a0:da:55:d5:bd:38:9d:1e:bc:e9:5d:f3:92:
d1:18:06:49:17:2b:b8:94:8a:05:2c:87:83:89:bb:
dd:4a:a8:6e:5b:ad:a0:cd:ce:13:7e:fb:44:d3:4a:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:55:4B:34:79:6C:33:F9:BF:C4:D5:6C:A3:78:C9:28:59:11:BC
X509v3 Authority Key Identifier:
keyid:16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:03:2a:1c:60:cb:e2:23:23:ec:7e:be:0c:46:6c:ea:c6:
3f:26:c0:19:0c:0f:c7:ca:61:7c:95:f8:71:f1:12:a0:0d:e9:
09:a9:c3:d7:bc:07:a1:c7:af:ce:82:09:ce:77:d4:10:da:54:
ab:90:da:f3:f6:ba:64:65:50:92:be:4c:51:41:2b:39:34:e9:
6f:fc:06:a6:c1:07:e0:8e:10:54:76:30:cb:e7:df:f6:72:3a:
b9:7c:ea:89:64:51:58:40:f6:c7:75:7b:83:e5:dd:2f:fc:36:
8a:58:41:47:f3:12:c6:72:ae:3b:a7:5d:37:73:2b:e3:5e:01:
b6:0a:43:12:73:0b:a4:9c:d4:79:40:c0:92:18:a0:2f:fe:0f:
e5:0b:b2:47:a1:2b:b6:07:4c:17:f8:bf:4b:54:83:b6:6d:ac:
61:68:98:cb:4d:73:f4:18:f1:83:47:a7:90:96:f9:2e:f8:5e:
0d:fc:68:33:49:20:cb:81:64:52:40:ab:14:3c:1f:db:1c:4f:
20:da:c6:52:e0:d6:cf:d2:57:1f:08:54:3e:af:79:28:62:a2:
11:e7:84:ec:93:3d:4d:3a:95:dc:b2:03:5c:88:f2:f2:c6:e2:
03:cb:ac:50:4f:d2:28:5b:9f:39:a4:2d:72:a1:3f:b9:3d:fc:
c6:0c:98:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:21 2025 by rpki-client