Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier: 3DuAG8cI+aSETx6LLsmdqBto3NZ0IIQRxiC5gvHX58Q=
Subject key identifier: 39:D7:05:1A:AC:09:14:C5:18:B5:C0:03:3E:49:19:AE:ED:83:28:E3
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 019A70DC23648515270EDB0BA2055CE840AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number: 0F92
Signing time: Tue 11 Nov 2025 03:01:06 +0000
Manifest this update: Tue 11 Nov 2025 03:01:06 +0000
Manifest next update: Wed 12 Nov 2025 03:01:06 +0000
Files and hashes: 1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: WKDz4kYRpQnnSDUhSoOn9Ws23YJXv+m/WDNBL/WCa1I=)
2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:23:64:85:15:27:0e:db:0b:a2:05:5c:e8:40:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Nov 11 03:01:06 2025 GMT
Not After : Nov 12 03:01:06 2025 GMT
Subject: CN=39d7051aac0914c518b5c0033e4919aeed8328e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:9d:a7:cc:83:f3:d5:66:96:eb:f4:be:12:
8d:29:a2:9c:70:2d:a1:16:68:cb:ce:e5:1d:32:08:
ea:ce:f6:9b:f7:68:a6:b7:89:be:a9:f9:c3:bf:36:
11:ad:69:39:5d:2a:6e:82:6c:b2:06:9c:0a:87:d2:
7d:32:58:bc:17:7f:aa:b2:03:15:aa:08:46:d8:16:
86:53:9b:22:cf:c1:72:ca:c3:4d:83:ce:0e:fc:b2:
26:bf:c7:92:d4:e2:1f:66:67:f7:65:ff:c6:a4:68:
35:16:8f:46:1b:d3:bb:a6:85:8d:7e:af:72:06:75:
4c:96:02:a1:6a:d7:2d:0a:4c:d2:1c:d3:54:5c:23:
f8:6a:e4:16:dc:33:d3:59:1d:41:0e:81:00:ad:7c:
75:d9:f0:bf:07:ec:d3:a0:0c:70:f7:7b:d8:97:98:
75:9a:77:23:cc:2f:20:26:a1:05:3c:29:f7:75:9f:
d9:70:ba:04:57:03:cd:41:29:ae:2b:5d:45:84:cd:
4a:92:1e:1d:5b:c4:14:5c:94:9a:37:14:03:f1:c8:
ec:ec:5d:34:03:d4:c6:4a:85:be:46:ed:34:6b:d3:
37:7a:04:89:a7:0d:b1:27:47:00:0a:fc:b2:40:47:
05:ee:e8:5d:ad:d0:bf:ae:4b:ed:16:69:89:4a:bb:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:05:1A:AC:09:14:C5:18:B5:C0:03:3E:49:19:AE:ED:83:28:E3
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:fb:44:00:9d:06:d0:a5:8b:7f:64:41:5c:36:00:16:38:
a0:3e:19:2e:9e:00:86:f6:76:8d:6c:f4:78:cd:91:53:96:a9:
58:3e:12:9e:fa:c0:7c:5b:b0:0c:50:0d:f6:49:2b:81:87:65:
4d:4b:6d:6a:30:ac:62:9f:c1:af:f2:ab:21:41:5c:3a:6c:0d:
61:3a:94:69:46:2b:fc:6b:8e:ee:8b:5d:2f:4b:2a:c3:a4:31:
b0:94:a3:28:92:e6:0f:35:23:73:7c:7a:99:2d:1f:fe:7b:23:
cb:2e:54:24:cd:82:29:35:f1:9f:47:76:05:b5:ee:ea:67:a1:
e5:2c:85:3d:af:8a:5e:51:db:5e:6c:25:55:65:ac:3f:c5:e3:
ad:da:2b:29:0a:91:37:79:55:af:6b:91:5b:1f:0d:db:e1:f0:
90:dc:3a:82:0d:54:dc:e8:28:b0:36:88:7b:e0:ea:c8:59:92:
c2:53:f7:76:d8:2a:02:c6:d9:94:32:ec:97:cd:0d:62:8e:02:
5c:7c:6c:91:5f:1f:66:19:75:59:74:83:73:33:50:41:77:16:
75:d8:52:64:77:57:a8:17:67:5b:6d:8c:af:4a:ff:70:43:a0:
94:63:a3:09:c3:d1:d1:77:5d:ac:f8:91:0e:74:4f:d2:8c:11:
68:3a:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:16 2025 by rpki-client