Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: oXFD/I7uoLZrLHtjTEdwoXuYGoPCZTM7xuURgEwve80=
Subject key identifier: B9:64:58:DD:CB:B0:8C:6C:1C:5A:C0:FF:06:38:C4:6F:8D:90:D4:D3
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 019A70A54D869F4E5E86557B69BC6802577F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 04FD
Signing time: Tue 11 Nov 2025 02:01:12 +0000
Manifest this update: Tue 11 Nov 2025 02:01:12 +0000
Manifest next update: Wed 12 Nov 2025 02:01:12 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: XZDTgEHLaVsHCSb+s3va1evAGazSjB28lxGbFol1FVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4d:86:9f:4e:5e:86:55:7b:69:bc:68:02:57:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Nov 11 02:01:12 2025 GMT
Not After : Nov 12 02:01:12 2025 GMT
Subject: CN=b96458ddcbb08c6c1c5ac0ff0638c46f8d90d4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:33:fe:2e:03:11:56:b0:72:bf:23:61:1e:
5b:71:b4:1c:90:d9:d0:49:38:4c:ce:a9:de:5c:c3:
ec:82:5d:84:33:11:35:7e:b4:be:d7:23:62:b8:5d:
4f:db:7a:98:54:46:3a:7d:5f:79:76:f8:75:ca:59:
04:3a:ba:c1:45:cf:04:f7:ca:b0:80:52:e7:ef:6f:
f8:6d:19:7b:10:d1:da:8f:bd:40:fe:3c:c6:ea:22:
63:5c:ed:0e:d3:29:e0:f4:41:32:60:83:6b:2a:25:
5c:f3:e7:b6:91:91:7f:43:d2:fe:0b:28:08:fb:ae:
5a:27:2c:11:67:ee:70:0d:18:d5:92:82:5f:fc:28:
46:2d:c4:15:4d:df:da:66:90:30:b2:e6:82:d0:4c:
38:da:87:84:90:ef:c2:08:6a:63:be:e3:5b:bf:61:
46:ed:b5:e9:8e:a7:08:92:2a:dc:49:b7:8e:91:e3:
77:f0:44:57:0f:b8:2a:86:37:a6:5a:49:60:8c:5e:
4e:ac:05:e8:71:94:70:c6:27:97:a5:75:a6:51:ae:
3e:2e:e7:2a:50:6b:ae:df:52:c0:8a:b5:68:c0:57:
57:0b:9d:c1:44:5e:14:ce:6b:50:82:db:52:0d:c7:
99:b4:cf:eb:15:cc:58:bf:13:9e:a8:fa:be:80:e7:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:64:58:DD:CB:B0:8C:6C:1C:5A:C0:FF:06:38:C4:6F:8D:90:D4:D3
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dd:61:e6:8d:fa:78:b6:35:ef:25:4b:0a:f9:2d:85:53:95:
42:e4:11:ee:9a:ee:e9:58:40:1c:84:ec:ce:94:0a:c2:29:b2:
db:81:79:c4:af:6b:3b:15:b7:68:a3:70:92:1b:04:86:36:67:
0c:57:83:d1:c9:13:02:6a:0e:f0:9f:e4:5f:33:e1:23:64:b0:
c0:4d:c5:c6:2b:b3:0d:97:84:99:49:f9:ef:15:32:b5:8a:a5:
c0:9c:56:94:7b:be:20:6d:99:f2:2b:e8:40:d9:7c:46:ee:be:
d2:71:70:e7:f2:91:84:77:c6:ac:e9:03:03:b8:d2:fa:03:38:
1b:17:83:00:d5:d9:2a:3c:90:34:9a:a2:3a:de:cc:4a:d3:cf:
d2:00:38:c8:93:6b:28:dc:6b:f9:78:6e:a9:a7:8e:9d:41:30:
ad:6a:93:3b:b8:b1:00:eb:ea:cc:9d:73:8c:1a:2c:c3:9f:d5:
d5:f4:4f:56:4a:19:f9:a7:41:97:21:7e:41:bf:c6:6a:8a:d2:
81:8c:d0:53:7e:b8:bc:1e:00:18:87:8d:8f:48:96:cc:2c:5d:
e7:e9:1a:35:30:b0:b0:bf:05:7c:64:83:d1:73:10:cb:da:42:
58:29:f1:ca:42:25:da:79:0b:62:d0:cb:95:f2:f0:f6:dd:98:
9d:4f:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:00 2025 by rpki-client