Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: AEf9YJwu9w/QZX8ix/578rw6nuBTHO27z8phcVLmwrE=
Subject key identifier: 2F:08:68:7D:23:FF:BC:92:9D:32:E5:47:00:AA:8F:86:80:9C:47:8E
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 019A71B7BCB9D2D567A231B4814FC7D9E967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: 3LhYqC+yEuX7jkyjMk0RyLrjLGtvD0BoSQ4AZuO0Ajc=)
2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bc:b9:d2:d5:67:a2:31:b4:81:4f:c7:d9:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=2f08687d23ffbc929d32e54700aa8f86809c478e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:2e:a3:26:03:41:aa:52:8b:09:5d:1a:31:
af:63:bb:2e:1b:ca:47:78:9d:b9:44:9f:f8:dc:84:
b8:22:c3:71:a5:9b:6d:69:6f:a3:4c:db:42:7e:c0:
88:b1:64:34:66:a8:02:f5:e6:4f:52:ff:91:42:10:
8a:bf:40:90:54:3b:e5:6f:3b:ab:bb:b2:11:57:97:
36:86:49:fb:22:26:81:50:3f:f9:6e:27:6d:5d:e8:
50:fc:e3:3e:2e:bd:79:81:78:84:51:14:36:76:fb:
f0:a2:f0:2b:6d:9b:c8:c9:4d:3f:75:d3:4f:10:48:
d6:05:d1:8c:57:38:47:b6:eb:4e:4b:1a:ef:e6:22:
52:c6:99:2c:6f:de:49:10:c5:c6:7d:68:7b:cf:fb:
24:3f:c3:c6:54:75:db:7f:68:d5:63:8e:ba:c3:ef:
b0:7e:b1:a4:72:2e:d0:6d:c7:62:08:84:e9:17:90:
01:db:68:75:cf:41:54:0d:c1:c8:57:b2:58:7d:d4:
b5:b6:39:32:b5:83:bd:65:36:13:83:17:18:e0:da:
ca:6c:31:a1:b5:c9:6c:25:70:9b:88:c3:9b:88:46:
72:4d:8d:0a:a7:a0:e1:e5:81:40:f5:ec:6f:fd:ac:
8f:f5:98:e1:35:92:a2:be:2d:e4:50:33:8a:f9:c4:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:08:68:7D:23:FF:BC:92:9D:32:E5:47:00:AA:8F:86:80:9C:47:8E
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1a:19:09:ea:20:3a:00:e5:4b:3a:4a:c3:fc:30:2d:74:87:
6b:69:87:5a:1a:25:09:b5:c5:00:82:bd:43:e0:29:47:1a:af:
3a:17:f9:b5:ef:71:c5:ac:46:67:28:1a:8e:ba:f2:64:7f:e9:
b2:fa:0c:ca:2c:3c:a0:fb:5f:b9:25:7e:7a:43:86:34:fe:be:
e5:95:15:ca:98:ce:39:e4:38:60:04:ec:aa:65:bd:e2:b9:dc:
4e:f7:86:94:57:94:08:e7:8f:e5:b6:a3:b9:92:c5:22:ae:5f:
b8:02:c8:ff:d6:7a:99:2e:d3:99:4b:0e:d8:d8:e8:b9:4a:3f:
77:8f:57:51:22:20:11:67:57:13:5e:99:73:ae:48:20:76:36:
6f:af:dd:e6:ec:a3:7d:4e:e4:d9:f1:78:4f:bf:c8:8e:32:ba:
8b:d2:7b:41:d1:51:a9:02:6b:ee:e1:66:ec:4c:94:dd:c1:6a:
de:c8:de:89:fd:48:30:91:eb:ef:09:a0:88:dc:2b:87:36:c9:
19:41:3c:be:fc:fc:f2:34:d4:e0:c6:c2:7a:c0:11:78:7e:87:
79:b9:89:67:98:4b:ee:cb:f6:8e:ea:1a:3f:b0:22:2e:0f:4f:
b6:43:94:99:ab:41:6e:e1:b2:37:5e:d4:f5:7a:aa:05:7e:ff:
f6:34:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:17 2025 by rpki-client