Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
File: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json)
Hash identifier: Kq8cPk65DzE2jmZZYS32rVsMmJy2sB2mNMq7tF44Plw=
Subject key identifier: 31:74:F5:BF:70:01:7E:74:8D:2C:0A:B7:99:AD:71:FF:8B:62:F2:DB
Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
Certificate issuer: /CN=171bfdd42fa9484f56e189ba683d5188c524083b
Certificate serial: 019A1BABBCC3506884C1C6FF12A7488BB275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
Manifest number: 0159
Signing time: Sat 25 Oct 2025 14:00:31 +0000
Manifest this update: Sat 25 Oct 2025 14:00:31 +0000
Manifest next update: Sun 26 Oct 2025 14:00:31 +0000
Files and hashes: 1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: 1D9yeupF1lsB1LRIhG37Hl3BVm+4HO7rGVxlvOuNpXA=)
2: TRbKL4kGxrCFAvUXltN0ocBpT58.roa (hash: oZP4etk1n3bpFlXee7D7+3mgIQiNQb5oae2tqJgBRbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ab:bc:c3:50:68:84:c1:c6:ff:12:a7:48:8b:b2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b
Validity
Not Before: Oct 25 14:00:31 2025 GMT
Not After : Oct 26 14:00:31 2025 GMT
Subject: CN=3174f5bf70017e748d2c0ab799ad71ff8b62f2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:db:63:a0:a5:0e:6a:7e:fb:28:ae:7a:d7:
f4:b6:e5:23:5b:05:9b:fb:ea:8c:49:d5:58:5b:c9:
e3:ee:7e:78:9e:fe:56:46:d6:06:20:cd:a0:a4:09:
c0:14:2d:29:5a:9c:91:a3:9b:b1:8a:e5:28:e0:9f:
0a:2d:51:5e:84:f2:63:33:42:00:52:5d:80:2e:ff:
07:c3:b1:fa:90:19:75:f0:1d:6c:81:66:94:09:52:
71:90:63:55:8f:af:b8:06:05:ef:39:55:16:b3:b5:
b0:8d:d1:11:dc:56:ed:3c:33:ad:9a:8c:7c:88:8f:
50:c4:d4:2c:e7:a3:24:17:a1:06:92:7c:36:ca:89:
20:f8:45:bb:97:e3:df:da:b4:4c:ef:73:f0:10:56:
ca:84:4c:04:68:b8:7c:b7:46:a9:7c:16:0b:55:a5:
0d:db:6d:92:99:21:bc:09:f6:37:d5:23:8c:3f:7a:
b4:88:0d:41:93:d3:71:84:02:19:87:e1:c4:43:3d:
69:98:62:79:5c:84:dd:1a:04:43:b0:0e:00:da:6f:
21:4e:cd:d6:22:18:92:2e:96:68:84:32:ec:46:45:
31:46:44:df:e2:3f:d1:ef:b1:21:cc:be:58:e2:f2:
ba:8a:d2:8a:ec:73:11:0e:26:42:0e:fd:c9:f4:7b:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:F5:BF:70:01:7E:74:8D:2C:0A:B7:99:AD:71:FF:8B:62:F2:DB
X509v3 Authority Key Identifier:
keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:05:19:8d:94:34:06:f3:97:cd:9a:71:6b:53:b7:1f:63:
e7:c7:5d:1e:ea:d7:71:c3:02:f6:e1:24:6c:9d:31:6a:96:af:
e6:ad:94:5d:c2:bb:79:2f:97:07:0d:c7:8b:3e:1d:ef:3d:8d:
95:41:b2:30:2d:41:c7:00:e0:70:7b:79:e6:6f:af:d6:b3:20:
14:05:e2:6a:c4:3c:83:46:a6:e6:a6:20:db:c3:a8:44:86:79:
4e:a1:80:64:0c:20:c7:9e:e9:d9:33:61:82:c8:6e:e4:fd:2e:
6f:36:ea:ef:8b:1f:56:59:5c:74:a8:9e:84:14:50:a5:a3:b2:
b6:f9:53:0f:1a:02:21:9b:38:e0:11:28:11:17:4c:fa:13:99:
13:7b:7a:f0:27:89:b6:25:2e:7d:91:25:32:cf:cb:7d:5c:c4:
50:77:fa:05:90:02:fd:21:47:fb:d9:2b:6d:96:2b:ee:a8:5a:
3e:44:42:db:9b:32:bd:c1:da:43:4f:e3:05:9b:eb:eb:83:ee:
3a:c8:1f:35:ae:00:8b:1f:51:a9:41:e6:ea:40:b0:ca:be:eb:
03:f3:7d:78:28:09:a9:07:b2:b7:2a:4d:37:51:62:07:78:8c:
03:68:b4:c5:59:15:14:52:96:a3:df:e8:39:38:e2:b2:19:81:
f6:8e:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:23:51 2025 by rpki-client