Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File: m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier: tjRJWE+PB8MZ4+W6GL/9kIxdEACwEoVMceJvw4IEIPI=
Subject key identifier: D4:B6:47:F0:8B:4A:85:3A:CD:86:BE:37:DE:FF:74:8E:3D:46:22:BC
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer: /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial: 019A722659ED3CF40751E8AEC4B5D8299E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number: 15A0
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: E6Lcsm78oqMHcI27xNI6zxL8kc1ydq0/1SP4D9EyPKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:59:ed:3c:f4:07:51:e8:ae:c4:b5:d8:29:9e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=d4b647f08b4a853acd86be37deff748e3d4622bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:9d:ee:86:fa:3b:02:10:df:40:8b:fd:10:
ca:64:34:52:0d:78:85:e7:97:96:0c:7b:24:dc:d7:
6a:b9:35:c3:f8:4a:d9:37:e8:1e:61:3a:28:e4:ad:
37:7c:da:6c:9f:da:a3:ff:0e:5d:d7:05:fa:07:d0:
9d:ae:63:3d:9a:d8:56:0d:91:b2:a4:6b:af:91:5a:
f2:3d:61:48:06:ef:36:8b:f2:8c:24:ff:6d:fe:73:
ef:e6:57:3d:16:e8:45:cc:65:1c:6a:de:e1:02:91:
b3:7a:81:94:31:af:3d:0f:e7:86:07:70:63:eb:a4:
9b:f0:e6:9e:09:88:c1:9f:29:0d:9f:4a:0d:2d:f0:
09:90:f6:f8:89:ca:17:46:fa:51:c4:bc:90:66:2b:
22:a6:0d:92:bb:03:2b:d7:e1:99:aa:f4:ea:a2:98:
93:d5:ce:8e:41:6d:18:43:a4:3c:0f:4c:e3:b0:96:
56:ca:94:1e:6e:16:d2:7e:56:65:25:bc:a0:76:cf:
8d:99:f7:3a:13:b5:04:a6:5d:ac:b9:1c:3a:4a:1f:
c8:b1:43:fa:78:52:75:14:94:ad:6d:76:a7:5c:ff:
99:99:82:95:03:22:29:cc:9b:ba:97:a6:d3:22:53:
44:6e:2b:55:46:50:ce:5a:f8:aa:71:c6:a0:9d:84:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:47:F0:8B:4A:85:3A:CD:86:BE:37:DE:FF:74:8E:3D:46:22:BC
X509v3 Authority Key Identifier:
keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ab:c0:9c:22:df:4d:fb:0d:73:70:01:d6:e2:85:26:56:6b:
ef:6f:34:75:17:71:70:35:cb:91:75:f6:a2:f0:5b:18:f3:46:
ec:38:d6:02:04:38:cd:f6:09:1e:34:6a:21:64:aa:a9:d7:15:
1a:95:cf:32:dd:fa:aa:21:b0:72:70:d0:64:90:6f:a0:70:fd:
28:98:da:4e:6f:cf:c5:be:3a:51:87:a9:9b:91:2b:e4:39:a6:
0f:50:95:d1:d2:3b:ad:3e:7c:0b:8d:03:5d:4b:53:09:ff:94:
a2:5e:2d:e4:82:e8:e2:75:3a:00:e5:00:b6:20:03:d0:06:7b:
ca:02:11:cc:95:f4:92:f6:84:ea:1c:c9:84:e4:05:fd:51:b6:
60:93:17:77:87:4d:d0:eb:ba:74:62:b4:6f:d7:aa:a4:50:14:
8c:66:48:25:98:89:6a:7e:7a:36:20:93:60:63:e0:f8:d0:48:
ca:a0:f7:6a:b0:d0:39:f5:14:cd:24:85:c0:f4:bd:f8:32:70:
7b:d4:88:58:7b:6b:1d:f7:ea:22:c0:8c:74:ea:5f:9e:fc:df:
75:a6:0f:62:a8:ff:be:2b:34:4c:cd:b2:be:d1:27:4f:86:ab:
84:f8:39:3e:0d:64:a7:74:17:10:6a:08:c0:80:b2:3e:51:b6:
f6:39:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:10:43 2025 by rpki-client