
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft
File: Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft (raw, json)
Hash identifier: QMoxBxrtndOhz+fu95kbQh2ZtLeGQVTvCbUoEEphrcY=
Subject key identifier: 23:0D:04:19:99:97:D6:82:D4:2A:7C:64:77:50:63:52:D5:E4:60:3A
Authority key identifier: 16:9F:7C:BF:CA:85:95:E3:91:F4:0B:97:5F:D1:03:95:8D:E0:8D:24
Certificate issuer: /CN=169f7cbfca8595e391f40b975fd103958de08d24
Certificate serial: 019A71807FDCE537ABBCB1499496ED7332DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp98v8qFleOR9AuXX9EDlY3gjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft
Manifest number: D1
Signing time: Tue 11 Nov 2025 06:00:37 +0000
Manifest this update: Tue 11 Nov 2025 06:00:37 +0000
Manifest next update: Wed 12 Nov 2025 06:00:37 +0000
Files and hashes: 1: Fp98v8qFleOR9AuXX9EDlY3gjSQ.crl (hash: OCTDhZ4WDWeZqLjzp0nEQ3grtKyMyDeJyNhY+WSkeUY=)
2: QeR0_-QpyMnm5VOY2skH9rawH98.roa (hash: HZFnbfoP+it8U5mx5jCEe3yhlH8DwMcgZsFRRs4p0rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp98v8qFleOR9AuXX9EDlY3gjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:7f:dc:e5:37:ab:bc:b1:49:94:96:ed:73:32:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f7cbfca8595e391f40b975fd103958de08d24
Validity
Not Before: Nov 11 06:00:37 2025 GMT
Not After : Nov 12 06:00:37 2025 GMT
Subject: CN=230d04199997d682d42a7c6477506352d5e4603a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:b5:44:6c:ec:b8:bb:57:63:6d:d8:54:e8:
cf:94:1d:0a:f7:e7:ef:4d:8b:7a:1d:7a:d2:d5:27:
a0:f4:f4:b9:42:24:f9:f8:44:f3:38:62:b6:4a:d3:
87:94:48:b1:e5:c9:85:a0:3a:a5:a6:c3:97:c6:77:
f2:fa:d6:1d:05:95:41:9f:91:c7:43:02:db:85:2e:
e9:44:74:89:6f:b8:45:6e:91:69:e7:aa:89:4b:82:
3d:38:e5:90:72:b0:1d:a8:78:67:b7:36:7f:af:4f:
a0:56:83:3e:81:49:1c:65:67:e9:db:a6:7c:b2:39:
65:99:89:e7:71:bc:b1:05:57:12:5e:8f:c0:a7:47:
14:31:bd:f9:77:dc:25:09:50:3c:b3:33:ed:91:3b:
fb:c6:a4:d5:63:94:2c:fd:d7:99:47:c0:cf:8f:d3:
77:b5:31:33:ce:28:63:8c:2b:6b:2f:4c:73:22:7e:
b4:31:78:d6:cd:db:94:f0:1c:2a:96:f3:2a:82:0a:
c2:d1:0b:03:49:a3:2e:4c:60:05:a6:29:46:89:57:
55:97:8e:a8:2d:a4:dc:3b:f3:53:53:31:16:e3:a8:
29:aa:94:20:0a:da:0f:7f:72:b6:60:03:30:28:2f:
49:2f:f9:22:32:55:49:28:c8:3d:86:95:ec:a6:22:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0D:04:19:99:97:D6:82:D4:2A:7C:64:77:50:63:52:D5:E4:60:3A
X509v3 Authority Key Identifier:
keyid:16:9F:7C:BF:CA:85:95:E3:91:F4:0B:97:5F:D1:03:95:8D:E0:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp98v8qFleOR9AuXX9EDlY3gjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5a:5d:bf:f9:10:ea:56:6f:f4:8f:24:23:7c:ca:ce:df:1c:
e2:1c:a1:98:3c:df:56:03:e2:76:1e:49:59:79:6b:bb:4a:de:
87:5d:59:3c:46:08:3d:fb:db:a4:9b:50:0f:7f:58:e1:04:72:
a1:5b:8c:49:2d:7e:6f:b1:c5:db:c3:2a:f3:98:45:d9:69:03:
c6:2e:7a:ea:48:ae:87:a1:8e:f7:3b:99:a5:d9:3d:99:97:84:
8a:0f:e7:04:a4:92:2a:0a:c6:54:f1:63:54:c7:65:dd:13:63:
ca:a9:91:b0:68:b8:2b:c0:13:40:a6:16:2d:e5:ee:31:9a:88:
3c:4c:3e:d5:27:82:1c:65:2f:7f:e2:cc:14:92:06:38:3d:31:
e2:44:93:93:ad:6f:44:32:7d:73:e6:dd:22:fa:5e:2c:da:9f:
54:b1:e9:56:d5:42:4d:ee:e4:e8:20:2f:45:c4:9f:b3:77:25:
83:29:a3:1e:ba:13:c9:93:d0:25:bd:d2:f0:6e:a3:f9:85:d1:
43:54:5d:10:74:62:95:32:50:b7:ea:f6:68:53:07:81:a9:31:
b0:d2:34:22:6d:e6:a0:bd:c8:58:62:29:9d:b0:52:94:29:ca:
93:30:72:44:e4:ee:dd:e9:5d:11:d0:33:44:a5:66:1c:8e:8f:
35:3c:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:17 2025 by rpki-client