Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
File: Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft (raw, json)
Hash identifier: 06P0fApOC6n5AoqgH99ETifAXh2wMvpG6iazATeTnl4=
Subject key identifier: 23:22:5C:19:64:E1:B8:A4:94:B9:5D:D2:3D:4A:9B:4F:78:22:16:76
Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
Certificate issuer: /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Certificate serial: 019A73A6B611CC44262F7D9EDE7FB181738A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
Manifest number: 03EB
Signing time: Tue 11 Nov 2025 16:01:36 +0000
Manifest this update: Tue 11 Nov 2025 16:01:36 +0000
Manifest next update: Wed 12 Nov 2025 16:01:36 +0000
Files and hashes: 1: Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl (hash: 4mjOVY13Az+DjRRB/UTUElY1e5Tt0+0U92xJC70zPzg=)
2: slKuYhirMr_9AdtUijDzLipBRL0.roa (hash: /qHjp8kupLORl1OCxD3SUcgezP/zyet0u8Wb2x+yJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:b6:11:cc:44:26:2f:7d:9e:de:7f:b1:81:73:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Validity
Not Before: Nov 11 16:01:36 2025 GMT
Not After : Nov 12 16:01:36 2025 GMT
Subject: CN=23225c1964e1b8a494b95dd23d4a9b4f78221676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:d7:2d:cd:f4:b9:1b:ea:f9:39:03:ea:ff:
6a:ee:9b:41:19:47:d1:dc:56:a5:17:7a:47:de:c3:
06:c7:ff:35:8f:c0:a0:41:a1:95:89:bb:8b:cb:4a:
09:d0:8d:bf:d9:a2:eb:5f:11:66:b3:d2:ac:6e:e1:
82:fc:73:b3:af:7a:e3:ad:bb:ea:07:79:c0:c5:2c:
c7:7e:d5:56:c3:0b:62:68:5a:15:4e:43:f0:4c:5b:
27:84:42:c3:81:d4:a8:c4:b8:cd:49:26:84:09:f8:
2b:8e:02:b1:8c:55:00:9e:fb:5e:6e:78:9f:5b:41:
76:e9:d5:d0:b7:2f:93:5c:60:cf:f2:bd:3f:33:0b:
d3:45:4d:f9:a2:6e:f4:12:17:9c:10:12:87:36:22:
69:98:1d:63:d4:b4:5e:74:fd:e8:db:2e:3a:6f:e1:
d6:0b:f4:03:0c:d6:61:d5:4a:f6:08:4d:e8:15:30:
e6:89:31:cd:48:aa:8d:95:56:4f:de:9b:56:56:c4:
70:1d:23:a2:70:31:4e:db:6a:9c:35:17:cb:32:a5:
1e:32:a3:f7:6f:23:41:11:23:72:fa:44:b7:f3:89:
ca:e7:be:26:9b:43:17:12:e2:82:9e:75:b2:b0:a2:
c5:b7:34:bd:f5:71:1c:79:72:22:5c:9d:ad:02:96:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:22:5C:19:64:E1:B8:A4:94:B9:5D:D2:3D:4A:9B:4F:78:22:16:76
X509v3 Authority Key Identifier:
keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8d:f7:31:57:8e:8a:26:71:26:a6:db:db:76:47:70:6c:7d:
70:df:7e:dc:3c:42:a5:40:68:c9:d4:8c:86:e7:f5:c8:08:5d:
ec:ac:09:c0:f2:c2:3b:2b:81:34:cc:65:7c:df:86:db:9e:12:
db:a5:a6:9f:92:dd:52:b3:63:bb:f8:9b:36:1b:af:4c:57:11:
d1:f4:9e:0d:4a:a0:80:62:58:19:7c:9f:ce:0d:24:0e:6d:8f:
1b:c0:3d:15:20:56:80:e2:3b:d3:08:44:4a:af:43:fc:9c:0e:
e6:cc:11:16:f0:61:59:2e:bd:ae:27:de:cc:38:f3:29:fb:fb:
6e:e7:af:13:e9:d4:3a:1b:ca:1c:e8:d5:4e:c1:2b:50:6d:7b:
61:1f:f2:80:e9:86:84:cb:b1:51:f9:a2:83:d2:59:23:bf:19:
e5:a4:5e:cd:96:a4:af:d5:ab:32:da:a1:12:54:b1:31:21:2a:
8c:ee:29:28:34:e5:b8:12:2d:4b:56:5c:ba:bf:b0:9a:62:54:
49:ae:31:b8:8d:c2:f2:09:9b:01:b0:41:d4:3b:44:79:04:c5:
a1:0e:19:c4:93:4b:4d:0b:f3:cc:48:67:ed:59:12:fd:67:e2:
a0:bf:22:dd:55:66:51:c9:84:ef:0a:33:84:12:f7:8a:a7:36:
95:55:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:05 2025 by rpki-client