Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier: Eto0mMhmuGz4ZiQ5EEuxfuxYPA2fgx1icS9dgy2Am1o=
Subject key identifier: DC:16:05:A5:6D:92:8F:7A:0A:42:13:D9:40:17:50:F5:31:7A:A0:53
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 019A72265E287A026062DD783068204852AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number: 14C3
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: gBmYBqVZs43vdme+xetJWgfUiLx1KLQaoWnjKQvESsw=)
2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5e:28:7a:02:60:62:dd:78:30:68:20:48:52:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=dc1605a56d928f7a0a4213d9401750f5317aa053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:90:96:0b:eb:c1:42:32:66:df:a6:3f:cc:
08:14:71:c5:95:39:6b:ba:ae:ae:2f:06:b5:ea:52:
99:49:35:d3:1e:8f:a5:c6:b9:f6:85:7b:a1:49:d7:
d9:84:b3:28:05:a9:02:bd:59:78:fc:ad:20:c3:ba:
73:22:81:88:38:1d:a9:a0:a2:96:a8:f8:61:ad:b3:
55:17:f6:fa:7e:dd:ed:0e:37:47:96:51:d2:b2:13:
72:b4:67:95:00:30:85:22:fa:1e:7a:e6:9b:5d:12:
43:3b:e3:3c:2c:23:01:60:7b:19:a6:2a:5e:ce:d4:
f2:55:4a:d7:9b:ff:7e:55:e0:58:02:23:5c:95:35:
4a:93:ad:2f:e5:69:ce:0b:86:5e:02:86:d9:05:e4:
b9:85:9c:08:f1:02:52:c5:5e:24:91:0e:18:cc:b5:
ec:9a:11:80:62:2a:5b:79:a5:78:26:6b:77:e1:3e:
60:c8:3d:06:1e:f7:0c:fa:98:12:3c:61:70:58:a7:
05:51:03:d3:9b:3d:2d:93:2e:5f:92:43:3b:3a:ad:
be:7c:ff:d1:97:24:d3:9d:74:e0:e3:37:9f:5f:a6:
b5:d8:6c:d6:a3:c2:65:f3:ba:ca:b4:eb:b8:01:d3:
74:9f:27:8b:34:47:fe:c4:05:41:9a:bb:7c:26:ec:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:05:A5:6D:92:8F:7A:0A:42:13:D9:40:17:50:F5:31:7A:A0:53
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:3a:da:cf:55:c0:d9:20:17:49:e7:8e:e7:74:e2:a4:45:c6:
d0:c7:71:cb:0b:f8:d0:9b:c1:c6:80:3e:40:8f:52:6a:86:00:
a8:07:1f:75:50:92:db:4d:45:06:65:d1:24:ee:02:cf:85:22:
03:2c:57:ae:10:f1:22:a9:0e:f3:c7:e3:fb:07:91:4e:69:4d:
f7:35:42:ed:26:b1:90:33:44:41:11:73:18:2d:6d:8d:b6:84:
ef:ac:16:a9:03:52:8a:2b:3c:e3:71:00:d4:ef:10:9f:05:0e:
5e:e8:3d:37:7a:e9:65:c3:6a:57:c5:d1:40:a1:a8:aa:9e:69:
ed:bf:90:7f:4a:3f:bf:dc:25:87:db:96:05:a3:5e:8d:4a:be:
c6:50:8c:45:af:19:11:45:80:72:8c:56:8a:2c:84:88:d2:b7:
63:c6:83:1f:32:ed:1c:b3:86:e4:04:4b:64:d4:fc:f8:b8:eb:
4a:dd:38:79:64:7d:3d:ac:9b:2d:64:68:a9:ad:27:7f:7f:a7:
4f:c7:22:f3:ae:26:3e:5d:15:f5:c8:10:06:d7:34:26:27:ce:
1e:30:e6:d5:c6:d6:cc:ef:a5:27:a1:22:51:cf:61:0a:36:28:
94:23:a4:03:8e:e5:d0:e9:b1:86:ad:c9:33:d4:33:5a:fb:34:
11:bf:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:02 2025 by rpki-client