Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
File: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft (raw, json)
Hash identifier: qKrHdx1Z7AEgq5UeZIpCUo6KlIfJ6jGjQt2NayWpoHU=
Subject key identifier: DB:16:9E:CA:A5:A9:15:1D:A0:3E:47:2C:0A:CB:92:F2:6C:21:31:CE
Authority key identifier: 16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
Certificate issuer: /CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Certificate serial: 019A7225A538D609BEE0A8E5D33653E02A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
Manifest number: 0502
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl (hash: 3iAAa/AQuIFG/wOJUxYZwij0qHYVg5pgI+aC4ssFOfM=)
2: KN3Pqvfy1GqF2HSIy087TZo7Qs0.roa (hash: oGzQ0+1tlhBDajtg9SkNTia0clrGxHNnBRyqbyuthV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a5:38:d6:09:be:e0:a8:e5:d3:36:53:e0:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=db169ecaa5a9151da03e472c0acb92f26c2131ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:40:78:c3:6a:f2:14:0a:30:12:a8:4e:3a:
80:19:73:29:cf:d4:d4:d2:a6:9c:09:dc:ca:32:93:
78:ac:84:da:2c:bb:51:46:23:4f:09:df:58:24:bb:
b4:fa:d6:13:3c:be:15:64:68:b0:6a:2e:fa:b6:78:
13:73:97:ad:dc:1b:7b:44:82:76:3e:db:c1:91:c9:
4c:8e:a1:90:46:cc:93:fd:02:27:2a:a7:9f:23:85:
69:b0:99:18:ae:eb:46:a6:05:74:92:75:19:e3:5d:
c4:a4:df:9a:ae:98:30:79:b4:04:86:8d:03:ce:8b:
f8:8c:e2:d5:a4:38:79:55:ab:14:15:23:b0:30:74:
89:aa:a2:d1:70:63:7f:76:c7:b7:29:13:5b:c3:24:
c3:e0:c3:56:10:51:58:fd:32:3b:cb:f6:77:49:a9:
d7:b5:8d:3f:0d:9c:d5:61:a8:b5:0c:75:f8:5c:8f:
a1:98:ae:ee:40:56:17:5f:b2:ba:e1:2d:90:db:16:
be:06:74:f6:c1:ce:29:2a:df:43:e4:d1:1b:f7:25:
c7:b9:fe:9b:89:4e:14:8d:c2:18:df:7a:ec:84:f8:
e2:85:a4:09:21:21:f2:41:ad:10:e3:46:e7:65:c1:
26:0a:d7:fb:0b:b1:08:f6:55:4c:e0:0a:84:ea:97:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:16:9E:CA:A5:A9:15:1D:A0:3E:47:2C:0A:CB:92:F2:6C:21:31:CE
X509v3 Authority Key Identifier:
keyid:16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2a:3d:1d:d2:57:1c:5b:6e:1f:97:5e:44:2f:dd:43:61:14:
a2:6f:6d:1f:d2:6a:c9:bd:96:61:f6:d0:a8:ac:27:31:58:6f:
ae:85:af:67:16:23:56:72:01:70:fa:45:56:0b:a1:08:e5:a1:
3a:c9:92:10:d5:ae:4f:57:49:b4:24:a5:f9:93:3c:13:b2:18:
e1:27:fa:86:a2:2a:42:d4:94:fe:69:8f:6c:14:1a:15:15:d8:
77:02:38:78:34:ef:d9:18:58:7e:1a:b3:fa:01:c1:57:2f:a1:
cb:24:4a:d9:51:28:16:ed:6d:4b:e3:db:35:a8:d5:9d:c3:4f:
bc:2d:d1:62:4d:6f:c3:4a:01:e8:f7:75:1e:88:c6:bd:a3:c9:
89:8b:0b:29:14:fe:c8:a9:8b:27:1b:b6:e6:59:58:3e:53:df:
68:87:7e:d5:b3:06:2e:9e:4e:a0:70:70:8c:b2:54:12:fd:ac:
35:bc:50:9d:fb:8f:03:f0:50:2d:2f:79:d0:18:0f:61:2a:bb:
28:6b:e6:65:95:91:6d:bc:43:84:a0:9f:9a:51:73:a3:6d:e1:
08:19:e8:9d:75:b4:51:9c:8d:f0:1e:e6:7b:b1:b7:49:c6:40:
60:7e:cb:ca:6b:0a:c9:f4:03:d6:98:17:19:16:a4:c5:78:8b:
d6:25:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:02 2025 by rpki-client