Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: OHcB+og/BhsJ8Sc6F3aMMk+SAC3dAVjdtLPiZjfOHYo=
Subject key identifier: 13:9C:69:19:F1:F9:81:B8:50:13:8F:7C:AC:24:72:AE:16:60:A7:B3
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 019A71B8CE13954B3B2935036A18BF5F2F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 16B3
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: Iwub/CXeshZFBSuP077VCtIJ2mpBixGTtEK35DN4udU=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ce:13:95:4b:3b:29:35:03:6a:18:bf:5f:2f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=139c6919f1f981b850138f7cac2472ae1660a7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:de:ac:6f:2a:a0:a0:0c:d0:52:70:50:5a:06:
d8:ce:16:1b:97:7e:42:65:de:e0:64:8b:85:41:4f:
69:80:c0:0b:a5:ff:8c:82:ea:6d:ee:ac:fb:4d:15:
fa:1f:93:46:25:8f:1d:66:15:88:4b:c1:c4:15:54:
f0:ca:b7:bc:78:3f:a6:87:77:f6:c1:e3:d1:bf:0c:
43:8d:0e:35:01:88:f1:06:a7:70:9f:96:50:89:c5:
76:41:57:ba:83:f3:29:a5:16:e2:2f:44:60:c8:3b:
d7:8d:fa:19:02:92:63:18:5d:f3:f2:1f:80:0d:10:
f7:d2:ae:e6:f7:cf:f6:b0:69:7c:c4:38:a2:f3:71:
25:fa:7e:c3:a9:28:fc:af:09:93:c2:f6:a4:0d:5d:
b0:fb:68:2d:f6:e5:ac:5c:94:e5:4b:c4:2e:d5:5c:
63:be:e1:67:e1:6b:fb:12:7e:b7:b0:34:8d:ff:bc:
99:a3:c3:eb:91:75:45:6d:24:77:90:bc:fc:80:b4:
77:12:c7:a6:62:ae:1e:e6:43:e0:c4:47:27:bd:22:
da:97:6f:38:aa:1b:e7:98:37:fa:bb:52:0d:51:5f:
45:2b:9d:c0:3f:dd:eb:4d:09:f3:7f:8e:ee:bc:86:
c7:0d:f8:04:e2:56:0c:99:a6:cc:32:48:96:d3:a7:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:69:19:F1:F9:81:B8:50:13:8F:7C:AC:24:72:AE:16:60:A7:B3
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7d:10:4f:38:24:38:dd:96:41:50:88:88:de:4e:d6:b5:77:
9e:8d:8f:ec:29:62:2b:03:15:71:b4:ac:cd:65:c7:ab:2f:1d:
35:16:0c:54:b3:cc:48:af:cd:85:20:b5:f5:e7:b0:ba:01:43:
2c:e5:35:13:66:8c:8f:e6:29:83:48:79:a5:6c:6d:32:7d:c2:
af:cc:b6:cc:df:02:10:a1:da:4a:3f:d3:8f:35:50:ed:f9:23:
ef:18:bc:51:9a:d6:31:ad:d8:6e:45:0b:70:4b:12:07:e5:dd:
cb:2c:c2:1e:8d:5b:ed:cb:e3:8b:9b:a7:b7:19:f4:bb:8f:ed:
c6:17:3d:2d:2a:ac:b6:5b:c1:b3:c7:94:ae:29:46:80:91:c5:
1d:5c:f2:0c:db:0f:88:76:bf:84:53:87:f5:7b:45:79:f6:0c:
40:65:d5:ff:b5:d8:9a:ab:ce:e5:fd:e4:14:b1:ce:6d:dc:1c:
b4:90:52:be:33:a1:2d:bc:37:ed:d9:c8:a1:8a:74:ee:91:b3:
8b:2e:7f:12:26:5b:94:15:5e:45:e5:88:16:65:b6:6e:4a:0b:
b0:6b:5c:26:eb:d9:9e:3b:fd:fb:75:48:1c:e2:7b:27:ef:f1:
a4:2a:3e:fd:6f:d5:dc:c7:be:b9:85:fc:ba:08:4c:3f:ac:20:
56:bc:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:54 2025 by rpki-client