Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft
File: FMUSYv6H9OKV755_h6H55J9XwwA.mft (raw, json)
Hash identifier: rb8TUQOS10ZvIpVx46qoZ1suFkAH1lJ5r794lpAUiOs=
Subject key identifier: B9:1E:05:F4:D0:E7:07:76:C9:D4:72:0E:24:FD:29:52:D9:6F:1B:17
Authority key identifier: 14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
Certificate issuer: /CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Certificate serial: 019A70DBEE479172730B935370C6246C9A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: FMUSYv6H9OKV755_h6H55J9XwwA.crl (hash: dsIm58SoexvGa3U3QzAhBLM98XhmU1fhbhVryEOeNGQ=)
2: g_XzhYK_F03VjR9bvWlU1jF-Z50.roa (hash: ncibWC7f4F7EAqAuohBbP1sHDmPsoPuD5J5qdDnZdOA=)
3: wMG4w9uOn61cljP-qNjeEZGUwwk.roa (hash: HqXX/Ra1vF/x/d826M43hJ5A8k+zB4kBn5HcqZ0geiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ee:47:91:72:73:0b:93:53:70:c6:24:6c:9a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=b91e05f4d0e70776c9d4720e24fd2952d96f1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:6d:b1:cd:43:4a:ce:73:66:9f:27:03:ca:
4e:ae:b0:71:21:28:37:65:c3:cf:67:14:40:20:70:
34:58:e4:d5:7b:02:46:ca:a6:b6:eb:4a:9a:b3:90:
f7:bd:28:72:50:f1:be:b2:88:61:c8:92:f1:2e:3b:
4b:ec:13:1a:e7:3c:4d:5e:91:dc:a0:9d:4a:3a:ee:
a9:b1:58:0e:55:43:4b:e8:9a:f5:44:99:8f:f0:5d:
e9:bb:8b:10:2a:06:90:38:dd:e8:7c:e9:9e:85:ca:
37:b8:92:61:25:cd:a4:8e:f7:1a:45:6e:74:3b:55:
bd:d4:bd:02:df:f1:08:b0:d6:3c:a2:b0:47:0b:07:
9d:5a:d1:c3:ed:f0:1d:08:6d:fc:b8:1d:db:07:a4:
60:a6:46:ea:5a:ff:22:0f:fc:40:39:e0:c5:a9:d0:
8f:c2:e5:6c:61:9d:34:be:32:a0:db:0d:bd:86:09:
5c:c8:9f:3c:75:d6:f4:a5:b3:48:52:8b:f2:08:8b:
8b:28:5d:2e:d0:48:4f:6b:94:e7:cb:50:07:ff:3a:
7e:16:3e:96:1e:19:8a:3e:6d:4a:8e:f2:3f:1e:39:
4b:a1:d0:b4:16:38:88:bd:3c:07:df:46:1e:f4:90:
01:35:ab:f1:42:8a:14:7c:0f:b9:74:57:b9:5d:46:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:05:F4:D0:E7:07:76:C9:D4:72:0E:24:FD:29:52:D9:6F:1B:17
X509v3 Authority Key Identifier:
keyid:14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:06:ee:11:9c:6a:ac:e2:c1:48:56:31:ad:4a:fd:a3:83:
9f:d9:ef:c3:55:f2:df:76:3d:bc:1d:2b:8a:d3:e7:09:a2:68:
f2:40:c8:24:94:d5:13:bf:40:4d:41:42:ff:98:aa:07:e5:f5:
0f:8e:4c:1e:8f:ba:62:37:93:dc:6f:54:57:76:1f:5a:fa:d4:
cb:68:8f:a8:9f:e9:0b:48:f4:4b:bb:e7:8b:69:36:27:37:2e:
fd:da:dd:e5:a2:ad:1b:60:41:b9:c3:0f:9c:e6:08:bf:4b:94:
df:e5:04:c8:70:7c:69:a5:46:b6:5c:5f:2f:db:54:c1:5b:3c:
b0:0d:c1:43:05:aa:72:d9:89:0a:bc:90:e1:68:25:1c:ea:6f:
cd:12:f5:ab:b0:7c:7c:d6:b6:c6:d9:fd:65:02:cc:89:1e:29:
cd:33:dc:a0:51:ad:72:9f:b2:7c:b6:f4:3c:76:70:0e:5d:1a:
8c:78:8d:77:ce:e9:04:59:d4:19:13:72:04:01:aa:cd:3a:59:
e7:01:29:85:5d:45:57:ed:97:b8:2c:85:06:9d:46:b4:e9:1a:
ef:79:5c:56:2c:89:80:3e:fe:8c:f8:e6:1a:fe:c7:a7:10:ec:
cd:1a:3b:55:bc:9e:24:bb:9a:ab:7e:9e:57:1b:ce:68:17:15:
c6:4d:6b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:09 2025 by rpki-client