Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier: izjWYixfd0XIFent0QU4ijWZRu/lYvIu8nPxqb6M5RE=
Subject key identifier: E5:A4:02:68:C1:3A:2F:DC:5C:6D:4A:ED:60:AD:B2:65:85:E5:1A:D0
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 019A71B8520190EEAF3F07A92502D802846C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: /DnYCciICZm8DeHDxFCBfpaB73g8flVpKozptWkJsmc=)
2: WIJApdkXlbEUeEO2cKb4qiLS28o.roa (hash: 1qyiMGZ/E0ICeDVPfHZdxWe+RTO7sCD7GgXGyaWl1c0=)
3: jmPpCt20gyt7K42Iosl951LnaB8.roa (hash: pgMiVWt2zP5Kw215EB82Tgo4s/CVNPF5riSUMPLjECQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:52:01:90:ee:af:3f:07:a9:25:02:d8:02:84:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=e5a40268c13a2fdc5c6d4aed60adb26585e51ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:24:c8:93:f6:fc:5f:74:6d:13:49:af:0a:
ad:64:45:bf:c5:b2:30:e2:cd:be:17:48:76:c3:df:
12:cc:32:22:57:fa:b4:20:3d:db:cc:55:f2:4c:69:
8f:0b:1a:b5:ad:dc:7d:ee:77:ff:76:68:82:2c:11:
64:06:1f:79:d9:53:19:d0:bd:59:c6:43:bf:a8:15:
1a:af:c0:3d:28:80:c1:5f:22:ce:ce:42:2f:e3:52:
58:26:81:75:4b:bf:5f:97:46:68:81:36:26:89:d5:
8b:69:a4:56:7b:94:5c:b3:1a:49:08:a3:28:81:b9:
46:fb:b4:e4:dd:a3:87:fb:5e:2d:03:47:c9:c6:3b:
e5:97:dc:dc:fe:cb:5b:97:ac:a0:79:33:e5:1a:e7:
2c:d3:8f:bb:38:ba:bd:f6:65:b9:68:4d:2c:83:cc:
4f:bd:83:7c:74:b0:ca:da:df:f3:1f:c1:1c:20:ef:
5c:3f:01:2d:65:b4:94:7e:04:68:5c:85:51:e4:a7:
30:36:bd:c7:dc:65:5f:8a:f2:29:03:87:b1:57:24:
dd:ea:2b:df:f5:c7:f3:0f:3f:a5:ac:2a:98:69:f9:
5d:76:48:c0:95:28:2b:f6:25:de:d7:8d:78:64:c6:
b5:73:b7:ca:38:aa:68:96:cd:44:cf:a0:9f:7b:99:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A4:02:68:C1:3A:2F:DC:5C:6D:4A:ED:60:AD:B2:65:85:E5:1A:D0
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e6:f4:35:85:52:8d:ec:ab:a5:4a:67:bc:1f:b1:3d:b3:02:
de:ce:3e:c8:f4:2d:88:79:98:7e:59:63:4c:08:af:25:8d:4b:
ae:74:e5:e1:c2:36:76:5b:0e:dc:07:3a:60:a4:f1:6b:f8:6b:
4f:e0:cd:4d:d6:8f:30:d1:bd:bf:44:85:66:cd:35:fb:b9:69:
00:35:9a:05:c8:c6:67:4d:84:42:51:50:33:28:c4:68:df:0d:
4e:3e:a0:a9:71:56:7f:66:2e:40:69:3a:04:c7:ec:29:ab:bd:
61:24:04:7c:33:5a:0f:c9:fc:f9:79:42:06:4c:09:d9:c8:2a:
09:3a:77:ca:a4:3b:20:f7:8e:f6:c1:5f:1c:d9:1a:0b:56:34:
52:92:34:94:f4:4f:74:93:a4:a7:05:06:db:01:d6:2f:eb:8d:
b3:14:1b:f8:a4:96:a5:11:f1:c1:60:cf:23:a2:95:06:4a:7d:
3e:71:8a:8e:45:45:c7:16:c9:fe:ae:42:01:1b:cc:42:39:85:
0c:0c:b7:cd:8d:cb:bb:84:c0:b3:40:bd:4b:d5:de:25:a7:c8:
af:21:32:0b:50:fd:4f:98:37:6c:27:a3:81:ed:f0:f6:b8:e4:
8f:26:e3:cd:02:02:9c:d5:c8:8b:7c:e1:5c:e5:bb:ff:96:a7:
fd:7d:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:13 2025 by rpki-client