Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: KWq90rczeMpVYxZC6IGR9xx/NI7SyQGFQG5hZzzku0E=
Subject key identifier: E5:35:08:78:08:9B:93:9D:D9:D4:A1:14:59:E1:D0:98:2E:43:16:D7
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 019A706E037471D991C10783761BBB0A48AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 1432
Signing time: Tue 11 Nov 2025 01:00:49 +0000
Manifest this update: Tue 11 Nov 2025 01:00:49 +0000
Manifest next update: Wed 12 Nov 2025 01:00:49 +0000
Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: dUjmQzImvfB778S8WCJbR0yA6QXcBayvjWTwsy+4khA=)
2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:03:74:71:d9:91:c1:07:83:76:1b:bb:0a:48:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Nov 11 01:00:49 2025 GMT
Not After : Nov 12 01:00:49 2025 GMT
Subject: CN=e5350878089b939dd9d4a11459e1d0982e4316d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ee:f6:9d:5f:07:19:91:2b:8e:4a:38:6b:a1:
fa:eb:18:ad:fb:bd:95:bf:28:f9:be:fa:d3:d9:51:
79:d7:bf:cd:97:70:25:0a:87:15:f2:81:4a:a3:ec:
e1:67:a4:f8:9d:6f:f6:4b:03:42:9a:2b:73:ed:4f:
2e:cb:e8:c0:c4:e2:40:a6:22:69:14:d2:77:0b:86:
73:2d:8a:80:56:27:0f:1c:78:60:32:c6:f2:73:c1:
3c:01:d6:9a:9b:34:46:58:9d:64:d8:ae:d5:68:dc:
95:40:17:79:0a:8b:33:df:32:7c:5f:4a:b2:49:b1:
f2:54:c1:15:8d:be:96:ec:81:35:bb:46:82:7e:f9:
e1:32:74:e1:88:15:c7:b4:cc:fc:c8:cb:20:ae:bf:
41:3a:f4:1a:d8:91:90:74:67:ce:26:26:d8:2b:e7:
01:88:c3:a2:97:8f:e5:b4:49:8c:76:e5:61:b8:d4:
9c:34:61:eb:9e:c5:ba:48:40:1d:16:d5:d3:4d:df:
85:1a:22:b7:ed:65:f5:84:d5:5b:d8:3d:bf:0f:6f:
b1:59:bf:47:02:47:ab:49:67:b8:32:dc:9a:74:0b:
f5:05:7d:35:dc:14:f7:63:cc:44:68:34:04:79:dd:
0a:b6:58:57:31:9c:f5:ac:a8:bc:59:63:b3:3d:16:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:08:78:08:9B:93:9D:D9:D4:A1:14:59:E1:D0:98:2E:43:16:D7
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:66:82:90:e0:16:53:a0:d1:a0:02:a3:ac:1c:a0:f9:19:6d:
64:e0:80:43:5c:77:2d:b7:dd:ed:98:c6:a5:15:20:34:c7:8a:
27:d2:30:de:13:e6:4a:82:13:0a:33:77:0c:a6:df:32:14:de:
f6:b4:f7:aa:6b:a9:ac:77:ac:37:f9:ab:c2:de:b7:9a:3b:c9:
f2:90:2f:06:f2:32:c9:44:32:b5:c9:56:9e:f9:02:32:60:36:
6d:7f:f8:66:bc:2e:1e:cd:9b:76:47:39:a3:eb:c7:8e:c4:2b:
c6:80:41:cf:7f:6f:9c:0d:a1:e6:9d:78:ba:87:4b:19:26:4d:
d9:54:f6:2d:14:49:c3:a1:71:ac:06:1a:1d:4d:25:9c:4e:57:
52:ed:56:f3:38:31:99:45:8b:19:5d:b3:77:97:8c:99:fc:59:
32:59:d9:39:e9:7c:1e:b8:06:61:f1:f2:cc:5b:22:bd:87:db:
39:55:f6:49:cb:00:bd:91:b5:7c:04:a0:cb:fa:83:c9:d2:a0:
ce:54:89:f3:22:4f:62:32:f6:96:98:57:86:94:46:2f:43:1e:
e2:01:08:9b:5b:95:b9:2f:dd:96:e8:7d:1f:20:2e:1b:a3:3d:
85:85:ee:d0:ed:ce:cb:c0:7b:09:0f:a8:5a:a7:81:e3:2b:c2:
a1:68:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:44 2025 by rpki-client